All of lore.kernel.org
 help / color / mirror / Atom feed
From: Peter Korsgaard <peter@korsgaard.com>
To: buildroot@buildroot.org
Subject: [Buildroot] [PATCH 02/12] package/gst1-plugins-base: security bump to version 1.22.6
Date: Fri,  6 Oct 2023 21:10:39 +0200	[thread overview]
Message-ID: <20231006191049.2450822-2-peter@korsgaard.com> (raw)
In-Reply-To: <20231006191049.2450822-1-peter@korsgaard.com>

Fixes CVE-2023-37328: Heap-based buffer overflow in the subparse subtitle
parser when handling certain SRT subtitle files in GStreamer versions before
1.22.4 / 1.20.7.

https://gstreamer.freedesktop.org/security/sa-2023-0002.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/gstreamer1/gst1-plugins-base/gst1-plugins-base.hash | 4 ++--
 package/gstreamer1/gst1-plugins-base/gst1-plugins-base.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.hash b/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.hash
index 173f359afc..a46ce228c4 100644
--- a/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.hash
+++ b/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.hash
@@ -1,3 +1,3 @@
-# From https://gstreamer.freedesktop.org/src/gst-plugins-base/gst-plugins-base-1.22.2.tar.xz.sha256sum
-sha256  eb65120c4ee79b7a153c3c1972d5c0158c2151877cc51ec7725bba5749679d49  gst-plugins-base-1.22.2.tar.xz
+# From https://gstreamer.freedesktop.org/src/gst-plugins-base/gst-plugins-base-1.22.6.tar.xz.sha256sum
+sha256  50f2b4d17c02eefe430bbefa8c5cd134b1be78a53c0f60e951136d96cf49fd4b  gst-plugins-base-1.22.6.tar.xz
 sha256  ad2eec519ebd4b5df86ea84dff24ae3bfa2edea846a703b58902dd221ae375db  COPYING
diff --git a/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.mk b/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.mk
index 153187f743..7fcac012f2 100644
--- a/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.mk
+++ b/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-GST1_PLUGINS_BASE_VERSION = 1.22.2
+GST1_PLUGINS_BASE_VERSION = 1.22.6
 GST1_PLUGINS_BASE_SOURCE = gst-plugins-base-$(GST1_PLUGINS_BASE_VERSION).tar.xz
 GST1_PLUGINS_BASE_SITE = https://gstreamer.freedesktop.org/src/gst-plugins-base
 GST1_PLUGINS_BASE_INSTALL_STAGING = YES
-- 
2.30.2

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

  reply	other threads:[~2023-10-06 19:11 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-10-06 19:10 [Buildroot] [PATCH 01/12] package/gstreamer1: bump to version 1.22.6 Peter Korsgaard
2023-10-06 19:10 ` Peter Korsgaard [this message]
2023-10-06 19:10 ` [Buildroot] [PATCH 03/12] package/gst1-plugins-good: security " Peter Korsgaard
2023-10-06 19:10 ` [Buildroot] [PATCH 04/12] package/gst1-plugins-bad: " Peter Korsgaard
2023-10-06 19:10 ` [Buildroot] [PATCH 05/12] package/gst1-plugins-ugly: " Peter Korsgaard
2023-10-06 19:10 ` [Buildroot] [PATCH 06/12] package/gst1-devtools: " Peter Korsgaard
2023-10-06 19:10 ` [Buildroot] [PATCH 07/12] package/gst1-libav: " Peter Korsgaard
2023-10-06 19:10 ` [Buildroot] [PATCH 08/12] package/gst1-python: " Peter Korsgaard
2023-10-06 19:10 ` [Buildroot] [PATCH 09/12] package/gst1-rtsp-server: " Peter Korsgaard
2023-10-06 19:10 ` [Buildroot] [PATCH 10/12] package/gst1-rtsp-vaapi: " Peter Korsgaard
2023-10-06 19:10 ` [Buildroot] [PATCH 11/12] package/gst-omx: " Peter Korsgaard
2023-10-06 19:10 ` [Buildroot] [PATCH 12/12] package/gstreamer1-editing-services: " Peter Korsgaard
2023-10-11  9:02 ` [Buildroot] [PATCH 01/12] package/gstreamer1: " Peter Korsgaard
2023-10-13 18:20 ` Peter Korsgaard

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20231006191049.2450822-2-peter@korsgaard.com \
    --to=peter@korsgaard.com \
    --cc=buildroot@buildroot.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.