First published: Wed Jan 17 2024(Updated: )
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer-plugins-bad-free package contains a collection of plug-ins for GStreamer.<br>Security Fix(es):<br><li> gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/gstreamer-plugins-bad-free | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free-debuginfo | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free-debuginfo | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free-devel | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free-devel | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free-devel-docs | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free-devel-docs | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free-debuginfo | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free-devel | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
redhat/gstreamer-plugins-bad-free-devel-docs | <0.10.23-24.el7_9 | 0.10.23-24.el7_9 |
Red Hat Enterprise Linux Workstation Supplementary | ||
Red Hat Enterprise Linux for Power, little endian - Extended Update Support | ||
Red Hat Enterprise Linux 8 | ||
Red Hat Enterprise Linux for Power, big endian |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2024:0279 is classified as important.
You can fix RHSA-2024:0279 by updating the gstreamer-plugins-bad-free package to version 0.10.23-24.el7_9.
RHSA-2024:0279 affects several Red Hat Enterprise Linux products, including Workstation and Desktop editions.
RHSA-2024:0279 addresses a use-after-free vulnerability in the MXF demuxer of GStreamer.
The package that contains the fix for RHSA-2024:0279 is gstreamer-plugins-bad-free.