VDB
ALSA-2024%3A2302
ALSA-2024%3A2302
PUBLISHED
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer-plugins-base: heap overwrite in subtitle parsing (CVE-2023-37328) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:9 | gstreamer1-plugins-base | 0, 0 |
| AlmaLinux:9 | gstreamer1-plugins-base-tools | 0, 0 |
| AlmaLinux:9 | gstreamer1-plugins-base-devel | 0, 0 |
Timeline
- Apr 30, 2024 CVE Published
- May 7, 2024 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:2302 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-37328 third-party-advisory
- https://bugzilla.redhat.com/2254540 third-party-advisory
- https://errata.almalinux.org/9/ALSA-2024-2302.html vendor-advisory