ALAS2-2023-2011

Related Vulnerabilities: CVE-2021-3497  

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files. (CVE-2021-3497)

ALAS2-2023-2011


Amazon Linux 2 Security Advisory: ALAS-2023-2011
Advisory Release Date: 2023-03-30 18:56 Pacific
Advisory Updated Date: 2023-04-04 22:10 Pacific
Severity: Medium

Issue Overview:

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files. (CVE-2021-3497)


Affected Packages:

gstreamer-plugins-good


Issue Correction:
Run yum update gstreamer-plugins-good to update your system.

New Packages:
aarch64:
    gstreamer-plugins-good-0.10.31-20.amzn2.0.1.aarch64
    gstreamer-plugins-good-debuginfo-0.10.31-20.amzn2.0.1.aarch64

i686:
    gstreamer-plugins-good-0.10.31-20.amzn2.0.1.i686
    gstreamer-plugins-good-debuginfo-0.10.31-20.amzn2.0.1.i686

noarch:
    gstreamer-plugins-good-devel-docs-0.10.31-20.amzn2.0.1.noarch

src:
    gstreamer-plugins-good-0.10.31-20.amzn2.0.1.src

x86_64:
    gstreamer-plugins-good-0.10.31-20.amzn2.0.1.x86_64
    gstreamer-plugins-good-debuginfo-0.10.31-20.amzn2.0.1.x86_64