| Release | Version |
|---|---|
| jessie | 1.4.4-2+deb8u2 |
| stretch | 1.10.4-1+deb9u2 |
| stretch (security) | 1.10.4-1+deb9u1 |
| buster | 1.14.4-1+deb10u1 |
| buster (security) | 1.14.4-1+deb10u2 |
| bullseye | 1.18.4-2+deb11u1 |
| bookworm | 1.22.0-2+deb12u1 |
| trixie | 1.22.10-1 |
| sid | 1.24.2-1 |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-38104 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | ZDI-CAN-21444: Integer overflow leading to heap overwrite in RealMedia file handling |
| CVE-2023-38103 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | ZDI-CAN-21443: Integer overflow leading to heap overwrite in RealMedia file handling |
| Bug | Description |
|---|---|
| TEMP-0000000-4DAA44 | out of bounds reads in ASF demuxer |
| CVE-2017-5847 | The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gs ... |
| CVE-2017-5846 | The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gs ... |
| DSA / DLA | Description |
|---|---|
| DLA-3552-1 | gst-plugins-ugly1.0 - security update |
| ELA-941-1 | gst-plugins-ugly1.0 - security update |
| DSA-5476-1 | gst-plugins-ugly1.0 - security update |
| DLA-2643-1 | gst-plugins-ugly1.0 - security update |
| ELA-414-1 | gst-plugins-ugly1.0 - security update |
| DSA-4904-1 | gst-plugins-ugly1.0 - security update |
| DSA-3821-1 | gst-plugins-ugly1.0 - security update |