LWN.net Logo

Fedora alert FEDORA-2009-1343 (gstreamer-plugins-good)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 9 Update: gstreamer-plugins-good-0.10.8-10.fc9
Date:  Tue, 24 Feb 2009 20:42:05 +0000
Message-ID:  <20090224204206.2505A2084D0@bastion.fedora.phx.redhat.com>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-1343 2009-02-05 01:17:57 -------------------------------------------------------------------------------- Name : gstreamer-plugins-good Product : Fedora 9 Version : 0.10.8 Release : 10.fc9 URL : http://gstreamer.freedesktop.org/ Summary : GStreamer plug-ins with good code and licensing Description : GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plug-ins. GStreamer Good Plug-ins is a collection of well-supported plug-ins of good quality and under the LGPL license. -------------------------------------------------------------------------------- ChangeLog: * Mon Feb 2 2009 - Bastien Nocera <bnocera@redhat.com> - 0.10.8-10 - Patch for overflows in the QT demuxer (#481267) * Tue Aug 12 2008 Adam Jackson <ajax@redhat.com> 0.10.8-9 - gst-plugins-good-0.10.8-http-auth.patch: Fix http auth. (#457952) * Mon Jul 21 2008 Adam Jackson <ajax@redhat.com> 0.10.8-8 - gst-plugins-good-0.10.8-v4l2-progressive-fix.patch: Backport v4l2 interlace/progressive fixes. (#454534) * Thu Jun 19 2008 Adam Jackson <ajax@redhat.com> 0.10.8-7 - gst-plugins-good-0.10.8-speex-nego.patch: Backport speex channel and rate negotiation from 0.10.9. (#451391) * Tue Jun 17 2008 - Bastien Nocera <bnocera@redhat.com> - 0.10.8-6 - Really fix the default audio output not being correct * Tue Jun 3 2008 - Bastien Nocera <bnocera@redhat.com> - 0.10.8-5 - Fix compilation of the v4l2 plugin with newer kernels * Mon Jun 2 2008 - Bastien Nocera <bnocera@redhat.com> - 0.10.8-4 - Work-around bug that would set the default audio output to "GOOM!" See http://bugzilla.gnome.org/show_bug.cgi?id=532295 * Wed May 21 2008 Tom "spot" Callaway <tcallawa@redhat.com> 0.10.8-3 - fix license tag * Wed May 21 2008 Adam Jackson <ajax@redhat.com> 0.10.8-2 - BR: libsoup-devel and package the soup http src plugin. (#447604) - s/Fedora Core/Fedora/ * Thu Apr 24 2008 - Bastien Nocera <bnocera@redhat.com> - 0.10.8-1 - Update to 0.10.8 * Thu Apr 10 2008 - Bastien Nocera <bnocera@redhat.com> - 0.10.7-2 - Add patch to unbreak the QuickTime demuxer plugin -------------------------------------------------------------------------------- References: [ 1 ] Bug #481267 - gstreamer-plugins, gstreamer-plugins-good: heap-based buffer overflows / an array index out of bounds vulnerability while parsing malformed QuickTime media files https://bugzilla.redhat.com/show_bug.cgi?id=481267 [ 2 ] Bug #483736 - CVE-2009-0386 gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Composition Time To Sample (aka ctts) atom data https://bugzilla.redhat.com/show_bug.cgi?id=483736 [ 3 ] Bug #483737 - CVE-2009-0387 gstreamer-plugins-good: Array index error while parsing malformed QuickTime media files via crafted Sync Sample (aka stss) atom data https://bugzilla.redhat.com/show_bug.cgi?id=483737 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update gstreamer-plugins-good' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds