Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat GStreamer Base plugins could allow code execution

published 1 year ago

Summary

The GStreamer 1 base plugin packages for Red Hat may contain a flaw that could let an attacker run malicious code on your system. This can lead to unauthorized actions or data compromise. Install the latest security update from Red Hat as soon as possible to protect your environment.

What to do

Update redhat gstreamer1-plugins-base to version 0:1.16.1-3.el8_4.
Update redhat gstreamer1-plugins-base-debuginfo to version 0:1.16.1-3.el8_4.
Update redhat gstreamer1-plugins-base-debugsource to version 0:1.16.1-3.el8_4.
Update redhat gstreamer1-plugins-base-devel to version 0:1.16.1-3.el8_4.
Update redhat gstreamer1-plugins-base-tools-debuginfo to version 0:1.16.1-3.el8_4.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.4::appstream	redhat	gstreamer1-plugins-base	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	gstreamer1-plugins-base-debuginfo	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	gstreamer1-plugins-base-debugsource	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	gstreamer1-plugins-base-devel	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	gstreamer1-plugins-base-tools-debuginfo	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_e4s:8.4::appstream	redhat	gstreamer1-plugins-base	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_e4s:8.4::appstream	redhat	gstreamer1-plugins-base-debuginfo	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_e4s:8.4::appstream	redhat	gstreamer1-plugins-base-debugsource	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_e4s:8.4::appstream	redhat	gstreamer1-plugins-base-devel	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_e4s:8.4::appstream	redhat	gstreamer1-plugins-base-tools-debuginfo	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_tus:8.4::appstream	redhat	gstreamer1-plugins-base	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_tus:8.4::appstream	redhat	gstreamer1-plugins-base-debuginfo	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_tus:8.4::appstream	redhat	gstreamer1-plugins-base-debugsource	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_tus:8.4::appstream	redhat	gstreamer1-plugins-base-devel	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4
Red Hat:rhel_tus:8.4::appstream	redhat	gstreamer1-plugins-base-tools-debuginfo	< 0:1.16.1-3.el8_4 Fix: upgrade to 0:1.16.1-3.el8_4

Original advisory text

Red Hat Security Advisory: gstreamer1-plugins-base security update

References

https://access.redhat.com/errata/RHSA-2024:11143 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2331727 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2331740 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2331754 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_11143.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-47538 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-47538 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-47538 Vendor Advisory
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8035.patch Third Party Advisory
https://gstreamer.freedesktop.org/security/sa-2024-0022.html Third Party Advisory
https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-47607 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-47607 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-47607 Vendor Advisory
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8037.patch Third Party Advisory
https://gstreamer.freedesktop.org/security/sa-2024-0024.html Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-47615 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-47615 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-47615 Vendor Advisory
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8038.patch Third Party Advisory
https://gstreamer.freedesktop.org/security/sa-2024-0026.html Third Party Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Timeline

Published18 Dec 2024

Updated23 Sep 2026

First seen23 Sep 2026

Sources

RHSA-2024:11143 · OSV

Track software like this

Free during beta