Описание
[gstreamer1-libav: gstreamer1-libav: NULL pointer dereference in gstavdemux.c error handler]
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gst-libav1.0 | fixed | 1.28.4-1 | package | |
| gst-libav1.0 | no-dsa | trixie | package | |
| gst-libav1.0 | postponed | bookworm | package | |
| gst-libav1.0 | postponed | bullseye | package |
Примечания
https://gstreamer.freedesktop.org/security/sa-2026-0038.html
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11802
Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f904dfda677a0c148de8c391f3dbb11490c7e026 (1.29.2)
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11823 (1.28 backport)
Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ea6e333c53e5fbae113804e03cbd6a53c4da5c3f (1.28.4)
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11828 (1.26 backport)
Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2db03e541d9e3bb4cd8d02ce519d5c8e091dd8e3 (1.26 branch)
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11824 (1.24 backport)
Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f9a43351c18cef873e4d2d062d0d388ce0cf21a7 (1.24 branch)
Связанные уязвимости
[gstreamer1-libav: gstreamer1-libav: NULL pointer dereference in gstavdemux.c error handler]
A flaw was found in the GStreamer gst-libav plugin. A NULL pointer dereference in the demuxer error handler can be triggered when processing malformed media files, such as crafted Musepack (.mpc) files. When a user or application opens such a file using GStreamer, the application crashes, resulting in a denial of service.