Issued:
2009-06-25
Updated:
2009-06-25

RHSA-2009:1123 - Security Advisory

Synopsis

Moderate: gstreamer-plugins-good security update

Type/Severity

Security Advisory: Moderate

Topic

Updated gstreamer-plugins-good packages that fix multiple security issues
are now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

GStreamer is a streaming media framework, based on graphs of filters which
operate on media data. GStreamer Good Plug-ins is a collection of
well-supported, good quality GStreamer plug-ins.

Multiple integer overflow flaws, that could lead to a buffer overflow, were
found in the GStreamer Good Plug-ins PNG decoding handler. An attacker
could create a specially-crafted PNG file that would cause an application
using the GStreamer Good Plug-ins library to crash or, potentially, execute
arbitrary code as the user running the application when parsed.
(CVE-2009-1932)

All users of gstreamer-plugins-good are advised to upgrade to these updated
packages, which contain a backported patch to correct these issues. After
installing the update, all applications using GStreamer Good Plug-ins (such
as some media playing applications) must be restarted for the changes to
take effect.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 5.3 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.3 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.3 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.3 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386
  • Red Hat Enterprise Linux Server - AUS 5.3 x86_64
  • Red Hat Enterprise Linux Server - AUS 5.3 ia64
  • Red Hat Enterprise Linux Server - AUS 5.3 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.3 ppc

Fixes

  • BZ - 504199 - CVE-2009-1932 gstreamer-plugins-good: PNG decoder integer overflow

CVEs

References

Red Hat Enterprise Linux Server 5

SRPM
gstreamer-plugins-good-0.10.9-1.el5_3.2.src.rpm SHA-256: 0911bf74dadbed388a4eae8bb6a48b4dad04c9a458ab715ab27b9bdf87e976cb
x86_64
gstreamer-plugins-good-0.10.9-1.el5_3.2.x86_64.rpm SHA-256: 16c5a20563a4da2d0d599ed20fd31bcae81b9eec9545f95274cd01002bb684f2
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.i386.rpm SHA-256: f86c788d7c35ef51012cf078729ffb53e8169488026e044b741f986cfaa50577
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.x86_64.rpm SHA-256: 3de89763a0ed81447526928770d757e0248268bd21db5a1664682790e6c05f0c
ia64
gstreamer-plugins-good-0.10.9-1.el5_3.2.ia64.rpm SHA-256: b80b04b445636b96fb2338a4850607efd69cfa667b55fcff30804dcaea6d9d83
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.ia64.rpm SHA-256: 5a1ad4d5c151a834f7f0aa0685eb176a0ebb3813eaaebf7428e4c2f34e6f0475
i386
gstreamer-plugins-good-0.10.9-1.el5_3.2.i386.rpm SHA-256: 8e4dc6669a937b24afcf3365fcb4c8db54ceb4f585af1d6d8dfdb93d83b9512b
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.i386.rpm SHA-256: f86c788d7c35ef51012cf078729ffb53e8169488026e044b741f986cfaa50577

Red Hat Enterprise Linux Workstation 5

SRPM
gstreamer-plugins-good-0.10.9-1.el5_3.2.src.rpm SHA-256: 0911bf74dadbed388a4eae8bb6a48b4dad04c9a458ab715ab27b9bdf87e976cb
x86_64
gstreamer-plugins-good-0.10.9-1.el5_3.2.x86_64.rpm SHA-256: 16c5a20563a4da2d0d599ed20fd31bcae81b9eec9545f95274cd01002bb684f2
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.i386.rpm SHA-256: f86c788d7c35ef51012cf078729ffb53e8169488026e044b741f986cfaa50577
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.x86_64.rpm SHA-256: 3de89763a0ed81447526928770d757e0248268bd21db5a1664682790e6c05f0c
i386
gstreamer-plugins-good-0.10.9-1.el5_3.2.i386.rpm SHA-256: 8e4dc6669a937b24afcf3365fcb4c8db54ceb4f585af1d6d8dfdb93d83b9512b
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.i386.rpm SHA-256: f86c788d7c35ef51012cf078729ffb53e8169488026e044b741f986cfaa50577

Red Hat Enterprise Linux Desktop 5

SRPM
gstreamer-plugins-good-0.10.9-1.el5_3.2.src.rpm SHA-256: 0911bf74dadbed388a4eae8bb6a48b4dad04c9a458ab715ab27b9bdf87e976cb
x86_64
gstreamer-plugins-good-0.10.9-1.el5_3.2.x86_64.rpm SHA-256: 16c5a20563a4da2d0d599ed20fd31bcae81b9eec9545f95274cd01002bb684f2
i386
gstreamer-plugins-good-0.10.9-1.el5_3.2.i386.rpm SHA-256: 8e4dc6669a937b24afcf3365fcb4c8db54ceb4f585af1d6d8dfdb93d83b9512b

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
gstreamer-plugins-good-0.10.9-1.el5_3.2.src.rpm SHA-256: 0911bf74dadbed388a4eae8bb6a48b4dad04c9a458ab715ab27b9bdf87e976cb
s390x
gstreamer-plugins-good-0.10.9-1.el5_3.2.s390x.rpm SHA-256: 43971b54b4b9749415f65cdd74b0f7ffce94c3a762bf5c26143c4ff9bd472b9f
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.s390.rpm SHA-256: b8c56879b8dc0200c40e2cb1432af73fe59d12d30a85ac8a54f67ae5972c64a1
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.s390x.rpm SHA-256: 8934587ba82237894938e5222641652eeed40652595687cac40daee9b0fb4cb8

Red Hat Enterprise Linux for Power, big endian 5

SRPM
gstreamer-plugins-good-0.10.9-1.el5_3.2.src.rpm SHA-256: 0911bf74dadbed388a4eae8bb6a48b4dad04c9a458ab715ab27b9bdf87e976cb
ppc
gstreamer-plugins-good-0.10.9-1.el5_3.2.ppc.rpm SHA-256: 11bb3328bd696094c1d5681bb1f238a561ef408d421ca70120d25d968bd43912
gstreamer-plugins-good-0.10.9-1.el5_3.2.ppc64.rpm SHA-256: 53bbf2722fa7817d4ad40621bf9644a0c2198f0e34d5465ee260e5ec2a0011a6
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.ppc.rpm SHA-256: f1c8fa3bf96e673b7a2ba9a02e4d4f6f66be0539631967856a32672079511c5b
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.ppc64.rpm SHA-256: d29508d43d7433245de100b8bcada42d241f44c0212c6b65661eeb9c89aa4ae3

Red Hat Enterprise Linux Server from RHUI 5

SRPM
gstreamer-plugins-good-0.10.9-1.el5_3.2.src.rpm SHA-256: 0911bf74dadbed388a4eae8bb6a48b4dad04c9a458ab715ab27b9bdf87e976cb
x86_64
gstreamer-plugins-good-0.10.9-1.el5_3.2.x86_64.rpm SHA-256: 16c5a20563a4da2d0d599ed20fd31bcae81b9eec9545f95274cd01002bb684f2
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.i386.rpm SHA-256: f86c788d7c35ef51012cf078729ffb53e8169488026e044b741f986cfaa50577
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.x86_64.rpm SHA-256: 3de89763a0ed81447526928770d757e0248268bd21db5a1664682790e6c05f0c
i386
gstreamer-plugins-good-0.10.9-1.el5_3.2.i386.rpm SHA-256: 8e4dc6669a937b24afcf3365fcb4c8db54ceb4f585af1d6d8dfdb93d83b9512b
gstreamer-plugins-good-devel-0.10.9-1.el5_3.2.i386.rpm SHA-256: f86c788d7c35ef51012cf078729ffb53e8169488026e044b741f986cfaa50577

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.