MGASA-2021-0334

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2021-0334.html
Import Source
https://advisories.mageia.org/MGASA-2021-0334.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2021-0334
Related
Published
2021-07-10T20:00:34Z
Modified
2021-07-10T18:43:23Z
Summary
Updated gstreamer1.0-plugins packages fix security vulnerabilities
Details

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags (CVE-2021-3522).

Overflows in AVC/HEVC NAL unit length calculations, which would lead to allocating infinite amounts of small memory blocks until OOM and could potentially also lead to memory corruptions.

References
Credits

Affected packages

Mageia:7 / gstreamer1.0-plugins-bad

Package

Name
gstreamer1.0-plugins-bad
Purl
pkg:rpm/mageia/gstreamer1.0-plugins-bad?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-1.2.mga7.tainted

Ecosystem specific 

{
    "section": "tainted"
}

Mageia:7 / gstreamer1.0-plugins-base

Package

Name
gstreamer1.0-plugins-base
Purl
pkg:rpm/mageia/gstreamer1.0-plugins-base?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-2.1.mga7

Ecosystem specific 

{
    "section": "core"
}

Mageia:7 / gstreamer1.0-plugins-bad

Package

Name
gstreamer1.0-plugins-bad
Purl
pkg:rpm/mageia/gstreamer1.0-plugins-bad?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-1.2.mga7

Ecosystem specific 

{
    "section": "core"
}

Mageia:8 / gstreamer1.0-plugins-bad

Package

Name
gstreamer1.0-plugins-bad
Purl
pkg:rpm/mageia/gstreamer1.0-plugins-bad?distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.18.3-1.1.mga8.tainted

Ecosystem specific 

{
    "section": "tainted"
}

Mageia:8 / gstreamer1.0-plugins-base

Package

Name
gstreamer1.0-plugins-base
Purl
pkg:rpm/mageia/gstreamer1.0-plugins-base?distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.18.3-1.1.mga8

Ecosystem specific 

{
    "section": "core"
}

Mageia:8 / gstreamer1.0-plugins-bad

Package

Name
gstreamer1.0-plugins-bad
Purl
pkg:rpm/mageia/gstreamer1.0-plugins-bad?distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.18.3-1.1.mga8

Ecosystem specific 

{
    "section": "core"
}