RHSA-2023:7873: Important: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.Security Fix(es): gstreamer: AV1 codec parser heap-based buffer overflow (CVE-2023-44429) gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Important: gstreamer1-plugins-bad-free security update
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:7873?
The severity of RHSA-2023:7873 is classified as Important.
How do I fix RHSA-2023:7873?
You can fix RHSA-2023:7873 by updating the gstreamer1-plugins-bad-free package to version 1.18.4-6.el9_0 or higher.
What systems are affected by RHSA-2023:7873?
RHSA-2023:7873 affects gstreamer1-plugins-bad-free on various architectures including x86_64, ppc64le, and ARM.
Is there a workaround for RHSA-2023:7873?
There is no official workaround for RHSA-2023:7873; updating the package is recommended.
What is the purpose of the gstreamer1-plugins-bad-free package in RHSA-2023:7873?
The gstreamer1-plugins-bad-free package contains a collection of plug-ins for the GStreamer streaming media framework.