Red Hat Product Errata RHSA-2024:11120 - Security Advisory
Issued:
2024-12-16
Updated:
2024-12-16

RHSA-2024:11120 - Security Advisory

Synopsis

Important: gstreamer1-plugins-base security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

  • gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet (CVE-2024-47538)
  • gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer (CVE-2024-47615)
  • gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x

Fixes

  • BZ - 2331727 - CVE-2024-47538 gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet
  • BZ - 2331740 - CVE-2024-47615 gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer
  • BZ - 2331754 - CVE-2024-47607 gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0

SRPM
gstreamer1-plugins-base-1.18.4-7.el9_0.src.rpm SHA-256: 7ae661bd533b71fe006a88a9a6ae929550efae3df8946881d9bf7573bb315af2
ppc64le
gstreamer1-plugins-base-1.18.4-7.el9_0.ppc64le.rpm SHA-256: 1105456fc3e1189bcac6707c7ccbe5b10348771ca91c40c6a6e453d473ff36d7
gstreamer1-plugins-base-debuginfo-1.18.4-7.el9_0.ppc64le.rpm SHA-256: ea62616074bca49fec23f35c471456ae8bb569629be4f4d4bae34a15109199e4
gstreamer1-plugins-base-debugsource-1.18.4-7.el9_0.ppc64le.rpm SHA-256: a60fb39816ae15d559e40b01c78f0028838df49a9d8d1993c39e09e0dc33a0ec
gstreamer1-plugins-base-devel-1.18.4-7.el9_0.ppc64le.rpm SHA-256: ffbbe359fe66ee46d2eaf25a858ab747f2277e8c12ea1ef39dcd0768b79cc41d
gstreamer1-plugins-base-tools-debuginfo-1.18.4-7.el9_0.ppc64le.rpm SHA-256: 3680a7a9e72a778aacdecd6280d5bc60058fcc61eaae9abb81c7325890f973d1

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0

SRPM
gstreamer1-plugins-base-1.18.4-7.el9_0.src.rpm SHA-256: 7ae661bd533b71fe006a88a9a6ae929550efae3df8946881d9bf7573bb315af2
x86_64
gstreamer1-plugins-base-1.18.4-7.el9_0.i686.rpm SHA-256: eaa7b2c40d95bdd666f7b44ea283731b2d212ef47a7b67b8ce15faa247fe4f7e
gstreamer1-plugins-base-1.18.4-7.el9_0.x86_64.rpm SHA-256: af100d1fa3dfabd7058a8b22af054c6e9b5708b05d275d97d5dc1340d4b50fbf
gstreamer1-plugins-base-debuginfo-1.18.4-7.el9_0.i686.rpm SHA-256: 3686cc55770b6fbcdf22f9e6160f37f91904374239210e3a0973a3c2b3ba447d
gstreamer1-plugins-base-debuginfo-1.18.4-7.el9_0.x86_64.rpm SHA-256: ede3695aced926b745a055cccda4735e5fd4aac5d6f13e463fa7b2d473eb3281
gstreamer1-plugins-base-debugsource-1.18.4-7.el9_0.i686.rpm SHA-256: d3177b57e069d4e0fb7db8328ba2ca699b9a4666b443a6bd474863939632cbf0
gstreamer1-plugins-base-debugsource-1.18.4-7.el9_0.x86_64.rpm SHA-256: 51c30e7a270e6ed2dc48c7142fed1e27bef706b85d1dc21c80fc56a4ba642f05
gstreamer1-plugins-base-devel-1.18.4-7.el9_0.i686.rpm SHA-256: b4b884b015bb1bd0f2ddb2be473859b2aa580fb7d7c4d7a23fbe4d8dbfa77d1a
gstreamer1-plugins-base-devel-1.18.4-7.el9_0.x86_64.rpm SHA-256: e8f560a0f75dbbe36d3b49b6f36d0e54a635caedae249913962eba17b0fde3c4
gstreamer1-plugins-base-tools-debuginfo-1.18.4-7.el9_0.i686.rpm SHA-256: fd4bba2235fba0802ecb3be0840a0c741d54a9d3338b6160a7238d287f471d83
gstreamer1-plugins-base-tools-debuginfo-1.18.4-7.el9_0.x86_64.rpm SHA-256: 6e73a14e48d3800824355ac91472ec5019c49e305d55f5620824458f1d677b0d

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0

SRPM
gstreamer1-plugins-base-1.18.4-7.el9_0.src.rpm SHA-256: 7ae661bd533b71fe006a88a9a6ae929550efae3df8946881d9bf7573bb315af2
aarch64
gstreamer1-plugins-base-1.18.4-7.el9_0.aarch64.rpm SHA-256: e67eeae469f1db743c3d2d9378df1a252b0b6fa5c259d70a1ddcc85d36857307
gstreamer1-plugins-base-debuginfo-1.18.4-7.el9_0.aarch64.rpm SHA-256: b1f126768636b02cefc0da8dc72872cb6ad6bd97499c87fe851d190f13fe8282
gstreamer1-plugins-base-debugsource-1.18.4-7.el9_0.aarch64.rpm SHA-256: 3dca953c467f144170909789b1ccd222e22ce341e924114d4ffc55a817cadb9f
gstreamer1-plugins-base-devel-1.18.4-7.el9_0.aarch64.rpm SHA-256: ae86a6ada02d016e8b18915982cbfdbb130d9138491a8ff4a73bbe61c781aa88
gstreamer1-plugins-base-tools-debuginfo-1.18.4-7.el9_0.aarch64.rpm SHA-256: dc608f2f0468575ece363aad9429c78677ae8701b2f7ea0aa06b36e7bc25ab17

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0

SRPM
gstreamer1-plugins-base-1.18.4-7.el9_0.src.rpm SHA-256: 7ae661bd533b71fe006a88a9a6ae929550efae3df8946881d9bf7573bb315af2
s390x
gstreamer1-plugins-base-1.18.4-7.el9_0.s390x.rpm SHA-256: cc6d47345a051dcbc9a79636f64f1366e5679cea68d32db049b5b2bafb693f2b
gstreamer1-plugins-base-debuginfo-1.18.4-7.el9_0.s390x.rpm SHA-256: 772f30ab5da0e34c24ae2cdac9b58b14e997a1c4004605f015b6fe8f90364cf9
gstreamer1-plugins-base-debugsource-1.18.4-7.el9_0.s390x.rpm SHA-256: bb3161ef6865ed7cc74349724b14acd1d7e87b4eda37a7e308d17756a56a5137
gstreamer1-plugins-base-devel-1.18.4-7.el9_0.s390x.rpm SHA-256: 9a57c35874137e1e5a6fd4e7e2084a049a61b5d4e476a74a4b0ebbe63896b992
gstreamer1-plugins-base-tools-debuginfo-1.18.4-7.el9_0.s390x.rpm SHA-256: ab236e0cd25d534ab322080ed415af131dee9d97eca93792adfa4ec3ecfa072e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.