From 7ae23dc70fba3f0139745b67377a26fd202b96b0 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Wed, 20 Aug 2025 09:11:18 +0200 Subject: [PATCH] package/gst1-plugins-base: security bump to version 1.24.13 Fixes the following vulnerabilities: - CVE-2025-47806: A stack buffer overflow in the SubRip subtitle parser that can cause crashes for certain input files. https://gstreamer.freedesktop.org/security/sa-2025-0006.html - CVE-2025-47807: NULL-pointer dereference in the SubRip subtitle parser that can cause crashes for certain input files. https://gstreamer.freedesktop.org/security/sa-2025-0002.html https://gstreamer.freedesktop.org/security/sa-2025-0003.html Signed-off-by: Peter Korsgaard Signed-off-by: Julien Olivain --- package/gstreamer1/gst1-plugins-base/gst1-plugins-base.hash | 4 ++-- package/gstreamer1/gst1-plugins-base/gst1-plugins-base.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.hash b/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.hash index 6133825e58..cbe3a00566 100644 --- a/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.hash +++ b/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.hash @@ -1,3 +1,3 @@ -# From https://gstreamer.freedesktop.org/src/gst-plugins-base/gst-plugins-base-1.24.11.tar.xz.sha256sum -sha256 98572c1f8b710e52673e250cd96e4f2660d79bd66aa172c5dde5f690c1231e1d gst-plugins-base-1.24.11.tar.xz +# From https://gstreamer.freedesktop.org/src/gst-plugins-base/gst-plugins-base-1.24.13.tar.xz.sha256sum +sha256 31a4a34e02df0471274fd0e8016495475b670320d20a3349faf0634340166c42 gst-plugins-base-1.24.13.tar.xz sha256 ad2eec519ebd4b5df86ea84dff24ae3bfa2edea846a703b58902dd221ae375db COPYING diff --git a/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.mk b/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.mk index f0cf3e8686..456cd205bb 100644 --- a/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.mk +++ b/package/gstreamer1/gst1-plugins-base/gst1-plugins-base.mk @@ -4,7 +4,7 @@ # ################################################################################ -GST1_PLUGINS_BASE_VERSION = 1.24.11 +GST1_PLUGINS_BASE_VERSION = 1.24.13 GST1_PLUGINS_BASE_SOURCE = gst-plugins-base-$(GST1_PLUGINS_BASE_VERSION).tar.xz GST1_PLUGINS_BASE_SITE = https://gstreamer.freedesktop.org/src/gst-plugins-base GST1_PLUGINS_BASE_INSTALL_STAGING = YES