A gst-plugins-good1.0 security update has been released for Debian GNU/Linux 8 Extended LTS to address a use-after-free vulnerability.
ELA-410-1 gst-plugins-good1.0 security update
Package gst-plugins-good1.0
ELA-410-1 gst-plugins-good1.0 security update
Version 1.4.4-2+deb8u4
Related CVEs CVE-2021-3497
A use-after-free vulnerability was found in the Matroska plugin of the the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened.
For Debian 8 jessie, these problems have been fixed in version 1.4.4-2+deb8u4.
We recommend that you upgrade your gst-plugins-good1.0 packages.
Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/
