ELSA-2023-7791

ELSA-2023-7791 - gstreamer1-plugins-bad-free security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-12-15

Description

[1.22.1-2]
- Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
- Patch CVE-2023-44446: MXF demuxer use-after-free
- Resolves: RHEL-17030, RHEL-17039

Related CVEs

CVE-2023-44446

CVE-2023-44429

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	gstreamer1-plugins-bad-free-1.22.1-2.el9_3.src.rpm	a79e9234ee21e763f15e257a7a34de90	-	ol9_aarch64_appstream
	gstreamer1-plugins-bad-free-1.22.1-2.el9_3.src.rpm	a79e9234ee21e763f15e257a7a34de90	-	ol9_aarch64_codeready_builder
	gstreamer1-plugins-bad-free-1.22.1-2.el9_3.aarch64.rpm	7e677c82af95c0202dc94a81be1ed8e6	-	ol9_aarch64_appstream
	gstreamer1-plugins-bad-free-devel-1.22.1-2.el9_3.aarch64.rpm	7892fd410942674b9a7b9c36cb707f8a	-	ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64)	gstreamer1-plugins-bad-free-1.22.1-2.el9_3.src.rpm	a79e9234ee21e763f15e257a7a34de90	-	ol9_x86_64_appstream
	gstreamer1-plugins-bad-free-1.22.1-2.el9_3.src.rpm	a79e9234ee21e763f15e257a7a34de90	-	ol9_x86_64_codeready_builder
	gstreamer1-plugins-bad-free-1.22.1-2.el9_3.i686.rpm	bbcacdba69f1bd8fe8fb27a193a2dc48	-	ol9_x86_64_appstream
	gstreamer1-plugins-bad-free-1.22.1-2.el9_3.x86_64.rpm	b2cd2aa6a43dc58296803955ba1b6a44	-	ol9_x86_64_appstream
	gstreamer1-plugins-bad-free-devel-1.22.1-2.el9_3.i686.rpm	213891c3ea31c67878ff51bb559b1994	-	ol9_x86_64_codeready_builder
	gstreamer1-plugins-bad-free-devel-1.22.1-2.el9_3.x86_64.rpm	e0d666525d8db7b8cd1a94bdc56274a4	-	ol9_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team