Heap-based buffer overflow in gstreamer - CVE-2023-37327

Vulnerability identifier: #VU77964

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-37327

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the FLAC parser when handling malformed image tags. A remote attacker can pass specially crafted data to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

gstreamer
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Package Hub 15
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Fedora
gst-plugins-base1.0 (Ubuntu package)
libgstvideo-1_0-0-debuginfo
libgstapp-1_0-0-debuginfo-32bit
libgstpbutils-1_0-0-32bit
libgstrtp-1_0-0
libgsttag-1_0-0-debuginfo-32bit
libgstaudio-1_0-0-debuginfo
libgsttag-1_0-0
libgstfft-1_0-0
libgstpbutils-1_0-0
libgstvideo-1_0-0-debuginfo-32bit
libgstapp-1_0-0-32bit
libgstaudio-1_0-0-32bit
libgstapp-1_0-0
libgstallocators-1_0-0
libgstsdp-1_0-0-debuginfo
libgstvideo-1_0-0
libgsttag-1_0-0-debuginfo
libgstriff-1_0-0
libgstvideo-1_0-0-32bit
libgstfft-1_0-0-debuginfo
libgstrtp-1_0-0-debuginfo
libgstrtsp-1_0-0
libgstriff-1_0-0-debuginfo
libgstpbutils-1_0-0-debuginfo
libgstallocators-1_0-0-debuginfo
libgstrtsp-1_0-0-debuginfo
gstreamer-plugins-base-lang
typelib-1_0-GstVideo-1_0
gstreamer-plugins-base
libgstpbutils-1_0-0-debuginfo-32bit
libgstapp-1_0-0-debuginfo
libgstaudio-1_0-0-debuginfo-32bit
libgsttag-1_0-0-32bit
typelib-1_0-GstRtsp-1_0
typelib-1_0-GstFft-1_0
typelib-1_0-GstRtp-1_0
typelib-1_0-GstAllocators-1_0
gstreamer-plugins-base-devel
typelib-1_0-GstSdp-1_0
typelib-1_0-GstApp-1_0
gstreamer-plugins-base-debugsource
libgstfft-1_0-0-32bit
gstreamer-plugins-base-debuginfo
typelib-1_0-GstPbutils-1_0
libgstfft-1_0-0-debuginfo-32bit
gstreamer-plugins-base-debuginfo-32bit
typelib-1_0-GstTag-1_0
typelib-1_0-GstAudio-1_0
libgstaudio-1_0-0
libgstsdp-1_0-0
gstreamer-plugins-good-debugsource
gstreamer-plugins-good-debuginfo
gstreamer-plugins-good
gstreamer-plugins-good-lang
gstreamer1-plugins-good
gstreamer1-plugins-good-gtk
gstreamer1-plugins-good (Red Hat package)
gstreamer1-plugins-good-debugsource
gstreamer1-plugins-good-debuginfo
gstreamer1-plugins-good-help
gstreamer1.0-plugins-good (Ubuntu package)
gstreamer1.0-plugins-base (Ubuntu package)
gstreamer-plugins-good-doc
gstreamer-plugins-base-doc
libgstgl-1_0-0-debuginfo
typelib-1_0-GstGL-1_0
libgstgl-1_0-0
gst-plugins-good1.0 (Debian package)
libgstaudio-1_0-0-32bit-debuginfo
libgstgl-1_0-0-32bit
gstreamer-plugins-base-32bit-debuginfo
libgstpbutils-1_0-0-32bit-debuginfo
libgstrtp-1_0-0-32bit
gstreamer-plugins-base-64bit
libgsttag-1_0-0-64bit-debuginfo
libgstriff-1_0-0-64bit-debuginfo
libgstapp-1_0-0-64bit-debuginfo
gstreamer-plugins-base-devel-64bit
libgstrtsp-1_0-0-64bit-debuginfo
gstreamer-plugins-base-64bit-debuginfo
typelib-1_0-GstGLX11-1_0
libgstaudio-1_0-0-64bit-debuginfo
libgstgl-1_0-0-64bit-debuginfo
libgstallocators-1_0-0-64bit
libgstrtp-1_0-0-64bit
typelib-1_0-GstGLEGL-1_0
typelib-1_0-GstGLWayland-1_0
libgstpbutils-1_0-0-64bit
libgsttag-1_0-0-32bit-debuginfo
libgstriff-1_0-0-64bit
libgstaudio-1_0-0-64bit
libgstvideo-1_0-0-64bit
libgstallocators-1_0-0-64bit-debuginfo
libgstvideo-1_0-0-64bit-debuginfo
libgstapp-1_0-0-64bit
libgstsdp-1_0-0-64bit
libgstfft-1_0-0-64bit
libgstsdp-1_0-0-64bit-debuginfo
libgstrtsp-1_0-0-32bit
gstreamer-plugins-base-devel-32bit
libgstgl-1_0-0-32bit-debuginfo
libgstallocators-1_0-0-32bit
libgstrtp-1_0-0-64bit-debuginfo
libgstriff-1_0-0-32bit-debuginfo
libgstfft-1_0-0-32bit-debuginfo
libgstvideo-1_0-0-32bit-debuginfo
libgstrtsp-1_0-0-32bit-debuginfo
libgstallocators-1_0-0-32bit-debuginfo
libgstapp-1_0-0-32bit-debuginfo
libgstsdp-1_0-0-32bit-debuginfo
gstreamer-plugins-base-32bit
libgstsdp-1_0-0-32bit
libgstriff-1_0-0-32bit
libgstrtp-1_0-0-32bit-debuginfo
libgstrtsp-1_0-0-64bit
libgsttag-1_0-0-64bit
libgstpbutils-1_0-0-64bit-debuginfo
libgstgl-1_0-0-64bit
libgstfft-1_0-0-64bit-debuginfo
gstreamer-plugins-good-jack-32bit
gstreamer-plugins-good-jack
gstreamer-plugins-good-extra
gstreamer-plugins-good-qtqml-debuginfo
gstreamer-plugins-good-extra-debuginfo
gstreamer-plugins-good-qtqml
gstreamer-plugins-good-gtk
gstreamer-plugins-good-gtk-debuginfo
gstreamer-plugins-good-jack-debuginfo
gstreamer-plugins-good-extra-32bit
gstreamer-plugins-good-jack-32bit-debuginfo
gstreamer-plugins-good-32bit
gstreamer-plugins-good-extra-32bit-debuginfo
gstreamer-plugins-good-32bit-debuginfo
gstreamer-plugins-good-extra-64bit
gstreamer-plugins-good-extra-64bit-debuginfo
gstreamer-plugins-good-64bit-debuginfo
gstreamer-plugins-good-jack-64bit-debuginfo
gstreamer-plugins-good-jack-64bit
gstreamer-plugins-good-64bit
mingw-gstreamer1-plugins-good
mingw-gstreamer1-plugins-base
mingw-gstreamer1-plugins-bad-free
mingw-gstreamer1

Install updates from vendor's website.

gstreamer - update to 1.22.4
gst-plugins-base1.0 (Ubuntu package) - addressed in versions 1.8.3-1ubuntu0.3+esm2, 1.14.5-0ubuntu1~18.04.3+esm1
libgstvideo-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstapp-1_0-0-debuginfo-32bit - update to 1.8.3-13.9.1
libgstpbutils-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0-debuginfo-32bit - update to 1.8.3-13.9.1
libgstaudio-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-debuginfo-32bit - update to 1.8.3-13.9.1
libgstapp-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstapp-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-lang - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstVideo-1_0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-debuginfo-32bit - update to 1.8.3-13.9.1
libgstapp-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0-debuginfo-32bit - update to 1.8.3-13.9.1
libgsttag-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstRtsp-1_0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstFft-1_0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1
typelib-1_0-GstRtp-1_0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstAllocators-1_0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-devel - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstSdp-1_0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstApp-1_0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-debugsource - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-debuginfo - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstPbutils-1_0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-debuginfo-32bit - update to 1.8.3-13.9.1
gstreamer-plugins-base-debuginfo-32bit - update to 1.8.3-13.9.1
typelib-1_0-GstTag-1_0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstAudio-1_0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-good-debugsource - addressed in versions 1.8.3-16.9.1, 1.12.5-150000.3.7.2, 1.16.3-150200.3.12.1, 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-debuginfo - addressed in versions 1.8.3-16.9.1, 1.12.5-150000.3.7.2, 1.16.3-150200.3.12.1, 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good - addressed in versions 1.8.3-16.9.1, 1.12.5-150000.3.7.2, 1.16.3-150200.3.12.1, 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-lang - addressed in versions 1.8.3-16.9.1, 1.12.5-150000.3.7.2, 1.16.3-150200.3.12.1, 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer1-plugins-good - update to 1.16.1-4
gstreamer1-plugins-good-gtk - update to 1.16.1-4
gstreamer1-plugins-good (Red Hat package) - addressed in versions 1.16.1-4.el8, 1.22.1-2.el9
gstreamer1-plugins-good - update to 1.16.2-4
gstreamer1-plugins-good-gtk - update to 1.16.2-4
gstreamer1-plugins-good-debugsource - update to 1.16.2-4
gstreamer1-plugins-good-debuginfo - update to 1.16.2-4
gstreamer1-plugins-good-help - update to 1.16.2-4
gstreamer1.0-plugins-good (Ubuntu package) - addressed in versions 1.16.3-0ubuntu1.2, 1.20.3-0ubuntu1.1, 1.22.1-1ubuntu1.2
gstreamer1.0-plugins-base (Ubuntu package) - addressed in versions 1.16.3-0ubuntu1.2, 1.20.1-1ubuntu0.1, 1.22.1-1ubuntu1.1
gstreamer-plugins-good-doc - update to 1.16.3-150200.3.12.1
gstreamer-plugins-base-doc - update to 1.16.3-150200.4.9.2
libgstgl-1_0-0-debuginfo - addressed in versions 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstGL-1_0 - addressed in versions 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstgl-1_0-0 - addressed in versions 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gst-plugins-good1.0 (Debian package) - addressed in versions 1.18.4-2+deb11u2, 1.22.0-5+deb12u1
libgstaudio-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstgl-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstapp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-devel-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstGLX11-1_0 - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstgl-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstGLEGL-1_0 - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstGLWayland-1_0 - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstapp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-devel-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstgl-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstapp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstgl-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-good-jack-32bit - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-jack - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-extra - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-qtqml-debuginfo - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-extra-debuginfo - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-qtqml - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-gtk - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-gtk-debuginfo - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-jack-debuginfo - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-extra-32bit - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-jack-32bit-debuginfo - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-32bit - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-extra-32bit-debuginfo - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-32bit-debuginfo - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-extra-64bit - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-extra-64bit-debuginfo - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-64bit-debuginfo - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-jack-64bit-debuginfo - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-jack-64bit - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
gstreamer-plugins-good-64bit - addressed in versions 1.20.1-150400.3.6.1, 1.22.0-150500.4.3.1
mingw-gstreamer1-plugins-good - update to 1.22.7-1.fc38
mingw-gstreamer1-plugins-base - update to 1.22.7-1.fc38
mingw-gstreamer1-plugins-bad-free - update to 1.22.7-1.fc38
mingw-gstreamer1 - update to 1.22.7-1.fc38

• https://gstreamer.freedesktop.org/security/sa-2023-0001.html
• https://www.zerodayinitiative.com/advisories/ZDI-23-903/

• Multiple vulnerabilities in GStreamer
• Debian update for gst-plugins-good1.0
• Ubuntu update for gst-plugins-good1.0
• Ubuntu update for gst-plugins-base1.0
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-good
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-good
• SUSE update for gstreamer-plugins-good
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-good
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-good
• SUSE update for gstreamer-plugins-base
• Fedora 38 update for mingw-gstreamer1, mingw-gstreamer1-plugins-bad-free, mingw-gstreamer1-plugins-base, mingw-gstreamer1-plugins-good
• openEuler update for gstreamer1-plugins-good
• Red Hat Enterprise Linux 9 update for gstreamer1-plugins-good
• Red Hat Enterprise Linux 8 update for gstreamer1-plugins-good
• Anolis OS update for gstreamer1-plugins-good
• Ubuntu update for gst-plugins-base1.0