GStreamer streaming media framework "bad" plugins
Go to file
RHEL Packaging Agent 2d9c493ac1 Fix bytes/bits confusion in AV1 parser when parsing tile data size
Backport upstream commit fe5f81163e4f from the GStreamer 1.26
stable branch to fix a bytes/bits confusion in the AV1 parser.
The tile_data_size_minus_1 value (in bytes) was being passed
directly to gst_bit_reader_skip() which expects bits, causing
an assertion failure. The fix multiplies the value by 8 to
convert bytes to bits.

CVE: CVE-2026-52718
Upstream patches:
 - fe5f81163e.patch
Resolves: RHEL-184392

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-29 10:15:49 +00:00
.gitignore Update to 1.26.7 2025-11-04 17:28:28 +01:00
0001-dvbsuboverlay-Mark-parsed-byte-array-as-const.patch Add patches for CVE-2026-2923 and CVE-2026-3082 2026-03-31 11:50:19 +02:00
0002-dvbsuboverlay-Add-missing-bounds-checks-to-the-parse.patch Add patches for CVE-2026-2923 and CVE-2026-3082 2026-03-31 11:50:19 +02:00
0003-dvbsuboverlay-Avoid-integer-overflows-and-unreasonab.patch Add patches for CVE-2026-2923 and CVE-2026-3082 2026-03-31 11:50:19 +02:00
0004-libs-jpegparser-boundary-checks-before-copying-it.patch Add patches for CVE-2026-2923 and CVE-2026-3082 2026-03-31 11:50:19 +02:00
0005-av1parser-Fix-bytes-bits-confusion-when-parsing-tile.patch Fix bytes/bits confusion in AV1 parser when parsing tile data size 2026-07-29 10:15:49 +00:00
0005-dtlsconnection-Allocate-large-enough-buffer-for-the-.patch Fix CVE-2026-59692: DTLS connection buffer overflow in certificate DN 2026-07-29 10:12:20 +00:00
gating.yaml Add gating.yaml via API 2024-04-30 09:42:46 +00:00
gstreamer1-plugins-bad-free-1.26.7-CVE-2026-52719.patch Fix CVE-2026-52719: out-of-bounds read in VA JPEG decoder 2026-07-29 10:12:20 +00:00
gstreamer1-plugins-bad-free-1.26.7-CVE-2026-52720.patch Fix CVE-2026-52720 in gstreamer1-plugins-bad-free librfb plugin 2026-07-29 10:12:20 +00:00
gstreamer1-plugins-bad-free-1.26.7-CVE-2026-52722.patch Fix integer overflows in vmnc decoder (CVE-2026-52722) 2026-07-29 10:12:20 +00:00
gstreamer1-plugins-bad-free-1.26.7-CVE-2026-59691.patch Fix CVE-2026-59691: rfbsrc bpp handling in hextile and color reads 2026-07-29 10:12:20 +00:00
gstreamer1-plugins-bad-free.spec Fix bytes/bits confusion in AV1 parser when parsing tile data size 2026-07-29 10:15:49 +00:00
openh264-add-license-file.patch Add gstreamer1-plugin-openh264 subpackage with the openh264 plugin 2024-02-08 16:39:50 +01:00
sources Update to 1.26.7 2025-11-04 17:28:28 +01:00