Every CVE Search/ Get API key

RLSA-2024:3089

Moderate: gstreamer1-plugins-good security update

No scoreFix available

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

  • gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling (CVE-2023-37327)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

What each source reports

OSV No score

Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

  • gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling (CVE-2023-37327)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

Record
RLSA-2024:3089
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
gstreamer1-plugins-good
Rocky Linux:8
before 0:1.16.1-4.el8
0:1.16.1-4.el8

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

RLSA-2024:3089 is a vulnerability with no CVSS score yet in gstreamer1-plugins-good, published June 14, 2024. No source lists public exploit code. Fixed in gstreamer1-plugins-good 0:1.16.1-4.el8.

References

MoveEnter Open