From 3a2660af5525b0cc77609b588e752e43aeb458df Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Wed, 20 Aug 2025 09:11:19 +0200 Subject: [PATCH] package/gst1-plugins-good: security bump to version 1.24.13 Fixes the following vulnerabilities: - CVE-2025-47219: An Out-of-bounds read in the MOV/MP4 demuxer that can cause crashes or potentially information leaks for certain input files. https://gstreamer.freedesktop.org/security/sa-2025-0004.html - CVE-2025-47183: An Out-of-bounds read in the MOV/MP4 demuxer that can cause crashes or potentially information leaks for certain input files. https://gstreamer.freedesktop.org/security/sa-2025-0005.html Signed-off-by: Peter Korsgaard Signed-off-by: Julien Olivain (cherry picked from commit 4d9e973d724b3fb5c99f57d6db61c94c834ab234) Signed-off-by: Thomas Perale --- package/gstreamer1/gst1-plugins-good/gst1-plugins-good.hash | 4 ++-- package/gstreamer1/gst1-plugins-good/gst1-plugins-good.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/gstreamer1/gst1-plugins-good/gst1-plugins-good.hash b/package/gstreamer1/gst1-plugins-good/gst1-plugins-good.hash index 0c5192c515..a8b17f3d0d 100644 --- a/package/gstreamer1/gst1-plugins-good/gst1-plugins-good.hash +++ b/package/gstreamer1/gst1-plugins-good/gst1-plugins-good.hash @@ -1,3 +1,3 @@ -# From https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-good-1.24.11.tar.xz.sha256sum -sha256 94bf3b5118dd4213af66048faac830569cc9a94a8c8e59e8a6d33b315f518462 gst-plugins-good-1.24.11.tar.xz +# From https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-good-1.24.13.tar.xz.sha256sum +sha256 574ac6f9fd84b32eb04e80572391d6762df6f9802a47bc0386cd6cc48c14d08b gst-plugins-good-1.24.13.tar.xz sha256 6095e9ffa777dd22839f7801aa845b31c9ed07f3d6bf8a26dc5d2dec8ccc0ef3 COPYING diff --git a/package/gstreamer1/gst1-plugins-good/gst1-plugins-good.mk b/package/gstreamer1/gst1-plugins-good/gst1-plugins-good.mk index a7ab9a0326..cd1b9f45b9 100644 --- a/package/gstreamer1/gst1-plugins-good/gst1-plugins-good.mk +++ b/package/gstreamer1/gst1-plugins-good/gst1-plugins-good.mk @@ -4,7 +4,7 @@ # ################################################################################ -GST1_PLUGINS_GOOD_VERSION = 1.24.11 +GST1_PLUGINS_GOOD_VERSION = 1.24.13 GST1_PLUGINS_GOOD_SOURCE = gst-plugins-good-$(GST1_PLUGINS_GOOD_VERSION).tar.xz GST1_PLUGINS_GOOD_SITE = https://gstreamer.freedesktop.org/src/gst-plugins-good GST1_PLUGINS_GOOD_LICENSE_FILES = COPYING