[ubuntu/jammy-updates] gst-plugins-good1.0 1.20.3-0ubuntu1.4 (Accepted)

[Ubuntu Archive Robot]

gst-plugins-good1.0 (1.20.3-0ubuntu1.4) jammy-security; urgency=medium

  * SECURITY UPDATE: buffer over-read in isomp4 plugin
    - debian/patches/CVE-2025-47183.patch: use byte reader to parse mvhd
      box in gst/isomp4/qtdemux.c.
    - CVE-2025-47183
  * SECURITY UPDATE: buffer over-read in isomp4 plugin
    - debian/patches/CVE-2025-47219.patch: check if enough bytes are
      available for each stsd entry in gst/isomp4/qtdemux.c.
    - CVE-2025-47219

Date: 2025-08-25 16:14:13.388389+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.4
-------------- next part --------------
Sorry, changesfile not available.