Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 843770 - <media-libs/gstreamer-1.20.2: Multiple vulnerabilities
Summary: <media-libs/gstreamer-1.20.2: Multiple vulnerabilities
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: https://gstreamer.freedesktop.org/news/
Whiteboard: B3 [glsa+]
Keywords:
Depends on: 839939
Blocks:
  Show dependency tree
 
Reported: 2022-05-11 10:10 UTC by Joakim Tjernlund
Modified: 2022-08-14 21:50 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Joakim Tjernlund 2022-05-11 10:10:22 UTC
Highlighted bugfixes:

    avviddec: Remove vc1/wmv3 override and fix crashes on WMV files with FFMPEG 5.0+
    macOS: fix plugin discovery for GStreamer installed via brew and fix loading of Rust plugins
    rtpbasepayload: various header extension handling fixes
    rtpopusdepay: fix regression in stereo input handling if sprop-stereo is not advertised
    rtspclientsink: fix possible shutdown deadlock
    mpegts: gracefully handle "empty" program maps and fix AC-4 detection
    mxfdemux: Handle empty VANC packets and fix EOS handling
    playbin3: various playbin3, uridecodebin3, and playsink fixes
    ptpclock: fix initial sync-up with certain devices
    gltransformation: let graphene alloc its structures memory aligned
    webrtcbin fixes and webrtc sendrecv example improvements
    video4linux2: various fixes including some fixes for Raspberry Pi users
    videorate segment handling fixes and other fixes
    nvh264dec, nvh265dec: Fix broken key-unit trick modes and reverse playback
    wpe: Reintroduce persistent WebContext
    cerbero: Make it easier to consume 1.20.1 macOS GStreamer .pkgs
    build fixes and gobject annotation fixes
    bug fixes, security fixes, memory leak fixes, and other stability and reliability improvements
Comment 1 Larry the Git Cow gentoo-dev 2022-05-12 22:42:54 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3915b764b76507c595f389ff6870bb1d79c3ef52

commit 3915b764b76507c595f389ff6870bb1d79c3ef52
Author:     Igor V. Kovalenko <igor.v.kovalenko@gmail.com>
AuthorDate: 2022-05-08 09:55:49 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-05-12 22:42:34 +0000

    media-libs/gstreamer: Version bump, 1.20.2
    
    Bug: https://bugs.gentoo.org/843770
    Signed-off-by: Igor V. Kovalenko <igor.v.kovalenko@gmail.com>
    Signed-off-by: Sam James <sam@gentoo.org>

 dev-python/gst-python/Manifest                     |   1 +
 dev-python/gst-python/gst-python-1.20.2.ebuild     |  63 +++++++++
 media-libs/gst-plugins-bad/Manifest                |   1 +
 .../gst-plugins-bad/gst-plugins-bad-1.20.2.ebuild  |  88 ++++++++++++
 media-libs/gst-plugins-base/Manifest               |   1 +
 .../gst-plugins-base-1.20.2.ebuild                 | 149 +++++++++++++++++++++
 media-libs/gst-plugins-good/Manifest               |   1 +
 .../gst-plugins-good-1.20.2.ebuild                 |  53 ++++++++
 media-libs/gst-plugins-ugly/Manifest               |   1 +
 .../gst-plugins-ugly-1.20.2.ebuild                 |  28 ++++
 media-libs/gst-rtsp-server/Manifest                |   1 +
 .../gst-rtsp-server/gst-rtsp-server-1.20.2.ebuild  |  43 ++++++
 media-libs/gstreamer/Manifest                      |   1 +
 media-libs/gstreamer/gstreamer-1.20.2.ebuild       |  72 ++++++++++
 media-plugins/gst-plugins-a52dec/Manifest          |   1 +
 .../gst-plugins-a52dec-1.20.2.ebuild               |  25 ++++
 media-plugins/gst-plugins-amr/Manifest             |   1 +
 .../gst-plugins-amr/gst-plugins-amr-1.20.2.ebuild  |  19 +++
 media-plugins/gst-plugins-aom/Manifest             |   1 +
 .../gst-plugins-aom/gst-plugins-aom-1.20.2.ebuild  |  19 +++
 media-plugins/gst-plugins-assrender/Manifest       |   1 +
 .../gst-plugins-assrender-1.20.2.ebuild            |  13 ++
 media-plugins/gst-plugins-bluez/Manifest           |   1 +
 .../gst-plugins-bluez-1.20.2.ebuild                |  18 +++
 media-plugins/gst-plugins-bs2b/Manifest            |   1 +
 .../gst-plugins-bs2b-1.20.2.ebuild                 |  15 +++
 media-plugins/gst-plugins-cairo/Manifest           |   1 +
 .../gst-plugins-cairo-1.20.2.ebuild                |  13 ++
 media-plugins/gst-plugins-cdio/Manifest            |   1 +
 .../gst-plugins-cdio-1.20.2.ebuild                 |  21 +++
 media-plugins/gst-plugins-cdparanoia/Manifest      |   1 +
 .../gst-plugins-cdparanoia-1.20.2.ebuild           |  18 +++
 media-plugins/gst-plugins-chromaprint/Manifest     |   1 +
 .../gst-plugins-chromaprint-1.20.2.ebuild          |  13 ++
 media-plugins/gst-plugins-colormanagement/Manifest |   1 +
 .../gst-plugins-colormanagement-1.20.2.ebuild      |  13 ++
 media-plugins/gst-plugins-dash/Manifest            |   1 +
 .../gst-plugins-dash-1.20.2.ebuild                 |  22 +++
 media-plugins/gst-plugins-dtls/Manifest            |   1 +
 .../gst-plugins-dtls-1.20.2.ebuild                 |  15 +++
 media-plugins/gst-plugins-dts/Manifest             |   1 +
 .../gst-plugins-dts/gst-plugins-dts-1.20.2.ebuild  |  25 ++++
 media-plugins/gst-plugins-dv/Manifest              |   1 +
 .../gst-plugins-dv/gst-plugins-dv-1.20.2.ebuild    |  13 ++
 media-plugins/gst-plugins-dvb/Manifest             |   1 +
 .../gst-plugins-dvb/gst-plugins-dvb-1.20.2.ebuild  |  18 +++
 media-plugins/gst-plugins-dvdread/Manifest         |   1 +
 .../gst-plugins-dvdread-1.20.2.ebuild              |  21 +++
 media-plugins/gst-plugins-faac/Manifest            |   1 +
 .../gst-plugins-faac-1.20.2.ebuild                 |  13 ++
 media-plugins/gst-plugins-faad/Manifest            |   1 +
 .../gst-plugins-faad-1.20.2.ebuild                 |  21 +++
 media-plugins/gst-plugins-flac/Manifest            |   1 +
 .../gst-plugins-flac-1.20.2.ebuild                 |  13 ++
 media-plugins/gst-plugins-gdkpixbuf/Manifest       |   1 +
 .../gst-plugins-gdkpixbuf-1.20.2.ebuild            |  16 +++
 media-plugins/gst-plugins-gtk/Manifest             |   1 +
 .../gst-plugins-gtk/gst-plugins-gtk-1.20.2.ebuild  |  31 +++++
 media-plugins/gst-plugins-hls/Manifest             |   1 +
 .../gst-plugins-hls/gst-plugins-hls-1.20.2.ebuild  |  36 +++++
 media-plugins/gst-plugins-jack/Manifest            |   1 +
 .../gst-plugins-jack-1.20.2.ebuild                 |  17 +++
 media-plugins/gst-plugins-jpeg/Manifest            |   1 +
 .../gst-plugins-jpeg-1.20.2.ebuild                 |  13 ++
 media-plugins/gst-plugins-kate/Manifest            |   1 +
 .../gst-plugins-kate-1.20.2.ebuild                 |  16 +++
 media-plugins/gst-plugins-ladspa/Manifest          |   1 +
 .../gst-plugins-ladspa-1.20.2.ebuild               |  16 +++
 media-plugins/gst-plugins-lame/Manifest            |   1 +
 .../gst-plugins-lame-1.20.2.ebuild                 |  13 ++
 media-plugins/gst-plugins-ldac/Manifest            |   1 +
 .../gst-plugins-ldac-1.20.2.ebuild                 |  13 ++
 media-plugins/gst-plugins-libav/Manifest           |   1 +
 .../gst-plugins-libav-1.20.2.ebuild                |  28 ++++
 media-plugins/gst-plugins-libde265/Manifest        |   1 +
 .../gst-plugins-libde265-1.20.2.ebuild             |  15 +++
 media-plugins/gst-plugins-libpng/Manifest          |   1 +
 .../gst-plugins-libpng-1.20.2.ebuild               |  15 +++
 media-plugins/gst-plugins-libvisual/Manifest       |   1 +
 .../gst-plugins-libvisual-1.20.2.ebuild            |  23 ++++
 media-plugins/gst-plugins-lv2/Manifest             |   1 +
 .../gst-plugins-lv2/gst-plugins-lv2-1.20.2.ebuild  |  16 +++
 .../gst-plugins-meta-1.20.2.ebuild                 |  68 ++++++++++
 media-plugins/gst-plugins-modplug/Manifest         |   1 +
 .../gst-plugins-modplug-1.20.2.ebuild              |  13 ++
 media-plugins/gst-plugins-mpeg2dec/Manifest        |   1 +
 .../gst-plugins-mpeg2dec-1.20.2.ebuild             |  21 +++
 media-plugins/gst-plugins-mpeg2enc/Manifest        |   1 +
 .../gst-plugins-mpeg2enc-1.20.2.ebuild             |  21 +++
 media-plugins/gst-plugins-mpg123/Manifest          |   1 +
 .../gst-plugins-mpg123-1.20.2.ebuild               |  15 +++
 media-plugins/gst-plugins-mplex/Manifest           |   1 +
 .../gst-plugins-mplex-1.20.2.ebuild                |  21 +++
 media-plugins/gst-plugins-neon/Manifest            |   1 +
 .../gst-plugins-neon-1.20.2.ebuild                 |  16 +++
 media-plugins/gst-plugins-openaptx/Manifest        |   1 +
 .../gst-plugins-openaptx-1.20.2.ebuild             |  18 +++
 media-plugins/gst-plugins-opencv/Manifest          |   1 +
 ...plugins-bad-1.20.2-use-system-libs-opencv.patch |  95 +++++++++++++
 .../gst-plugins-opencv-1.20.2.ebuild               |  31 +++++
 media-plugins/gst-plugins-openh264/Manifest        |   1 +
 .../gst-plugins-openh264-1.20.2.ebuild             |  15 +++
 media-plugins/gst-plugins-opus/Manifest            |   2 +
 .../gst-plugins-opus-1.20.2.ebuild                 |  54 ++++++++
 media-plugins/gst-plugins-oss/Manifest             |   1 +
 .../gst-plugins-oss/gst-plugins-oss-1.20.2.ebuild  |  13 ++
 media-plugins/gst-plugins-pulse/Manifest           |   1 +
 .../gst-plugins-pulse-1.20.2.ebuild                |  16 +++
 media-plugins/gst-plugins-raw1394/Manifest         |   1 +
 .../gst-plugins-raw1394-1.20.2.ebuild              |  20 +++
 media-plugins/gst-plugins-resindvd/Manifest        |   1 +
 .../gst-plugins-resindvd-1.20.2.ebuild             |  24 ++++
 media-plugins/gst-plugins-rtmp/Manifest            |   1 +
 .../gst-plugins-rtmp-1.20.2.ebuild                 |  13 ++
 media-plugins/gst-plugins-sbc/Manifest             |   1 +
 .../gst-plugins-sbc/gst-plugins-sbc-1.20.2.ebuild  |  15 +++
 media-plugins/gst-plugins-sctp/Manifest            |   1 +
 .../gst-plugins-sctp-1.20.2.ebuild                 |  15 +++
 media-plugins/gst-plugins-shout2/Manifest          |   1 +
 .../gst-plugins-shout2-1.20.2.ebuild               |  13 ++
 media-plugins/gst-plugins-sidplay/Manifest         |   1 +
 .../gst-plugins-sidplay-1.20.2.ebuild              |  21 +++
 media-plugins/gst-plugins-smoothstreaming/Manifest |   1 +
 .../gst-plugins-smoothstreaming-1.20.2.ebuild      |  21 +++
 media-plugins/gst-plugins-soundtouch/Manifest      |   1 +
 .../gst-plugins-soundtouch-1.20.2.ebuild           |  13 ++
 media-plugins/gst-plugins-soup/Manifest            |   1 +
 .../gst-plugins-soup-1.20.2.ebuild                 |  13 ++
 media-plugins/gst-plugins-speex/Manifest           |   1 +
 .../gst-plugins-speex-1.20.2.ebuild                |  13 ++
 media-plugins/gst-plugins-srt/Manifest             |   1 +
 .../gst-plugins-srt/gst-plugins-srt-1.20.2.ebuild  |  15 +++
 media-plugins/gst-plugins-srtp/Manifest            |   1 +
 .../gst-plugins-srtp-1.20.2.ebuild                 |  16 +++
 media-plugins/gst-plugins-taglib/Manifest          |   1 +
 .../gst-plugins-taglib-1.20.2.ebuild               |  13 ++
 media-plugins/gst-plugins-twolame/Manifest         |   1 +
 .../gst-plugins-twolame-1.20.2.ebuild              |  13 ++
 media-plugins/gst-plugins-uvch264/Manifest         |   1 +
 .../gst-plugins-uvch264-1.20.2.ebuild              |  21 +++
 media-plugins/gst-plugins-v4l2/Manifest            |   1 +
 .../gst-plugins-v4l2-1.20.2.ebuild                 |  30 +++++
 media-plugins/gst-plugins-vaapi/Manifest           |   1 +
 .../gst-plugins-vaapi-1.20.2.ebuild                |  98 ++++++++++++++
 media-plugins/gst-plugins-voaacenc/Manifest        |   1 +
 .../gst-plugins-voaacenc-1.20.2.ebuild             |  13 ++
 media-plugins/gst-plugins-voamrwbenc/Manifest      |   1 +
 .../gst-plugins-voamrwbenc-1.20.2.ebuild           |  13 ++
 media-plugins/gst-plugins-vpx/Manifest             |   1 +
 .../gst-plugins-vpx/gst-plugins-vpx-1.20.2.ebuild  |  13 ++
 media-plugins/gst-plugins-wavpack/Manifest         |   1 +
 .../gst-plugins-wavpack-1.20.2.ebuild              |  13 ++
 media-plugins/gst-plugins-webrtc/Manifest          |   1 +
 .../gst-plugins-webrtc-1.20.2.ebuild               |  42 ++++++
 media-plugins/gst-plugins-x264/Manifest            |   1 +
 .../gst-plugins-x264-1.20.2.ebuild                 |  22 +++
 media-plugins/gst-plugins-x265/Manifest            |   1 +
 .../gst-plugins-x265-1.20.2.ebuild                 |  23 ++++
 media-plugins/gst-plugins-ximagesrc/Manifest       |   1 +
 .../gst-plugins-ximagesrc-1.20.2.ebuild            |  34 +++++
 media-plugins/gst-plugins-zbar/Manifest            |   1 +
 .../gst-plugins-zbar-1.20.2.ebuild                 |  13 ++
 162 files changed, 2183 insertions(+)
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-08-14 05:23:33 UTC
GLSA request filed
Comment 3 Larry the Git Cow gentoo-dev 2022-08-14 21:48:39 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=f69203b9608d0db5bda6ce4050bf90de5119c0f8

commit f69203b9608d0db5bda6ce4050bf90de5119c0f8
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2022-08-14 21:47:49 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-08-14 21:48:21 +0000

    [ GLSA 202208-31 ] GStreamer, GStreamer Plugins: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/765163
    Bug: https://bugs.gentoo.org/766336
    Bug: https://bugs.gentoo.org/785652
    Bug: https://bugs.gentoo.org/785655
    Bug: https://bugs.gentoo.org/785658
    Bug: https://bugs.gentoo.org/785661
    Bug: https://bugs.gentoo.org/835368
    Bug: https://bugs.gentoo.org/843770
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Sam James <sam@gentoo.org>

 glsa-202208-31.xml | 111 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 111 insertions(+)
Comment 4 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-08-14 21:50:35 UTC
GLSA done, all done.