GStreamer streaming media framework "bad" plugins
c92aaa75be
Backport upstream commit 9bb455393b to fix CVE-2026-59692,
a buffer overflow in ext/dtls/gstdtlsconnection.c where a
fixed 2048-byte stack buffer was used to store the peer
certificate subject DN. The fix replaces the stack buffer
with a dynamically allocated buffer sized to the actual
length returned by X509_NAME_print_ex(), and adds proper
error handling for the length check and BIO_read() call.
The patch was manually rebased to account for line number
differences between the upstream monorepo layout and the
RHEL 8 standalone source tree.
CVE: CVE-2026-59692
Upstream patches:
-
|
||
|---|---|---|
| .gitignore | ||
| 0001-dtlsconnection-CVE-2026-59692.patch | ||
| 0001-h265parser-Fix-max_dec_pic_buffering_minus1-bound-ch.patch | ||
| 0001-librfb-Validate-framebuffer-update-rectangles-agains.patch | ||
| 0001-libs-jpegparser-boundary-checks-before-copying-it.patch | ||
| 0001-mxfdemux-Store-GstMXFDemuxEssenceTrack-in-their-own-.patch | ||
| 0001-rfbsrc-CVE-2026-59691.patch | ||
| 0001-vnmdec-Avoid-integer-overflows-when-rectangle-positi.patch | ||
| 0003-mxfdemux-Fix-integer-overflow-causing-out-of-bounds-.patch | ||
| 0004-mxfdemux-Check-number-of-channels-for-AES3-audio.patch | ||
| 0005-h265parser-Fix-possible-overflow-using-max_sub_layer.patch | ||
| gating.yaml | ||
| gst-p-bad-cleanup.sh | ||
| gstreamer1-plugins-bad-free.spec | ||
| sources | ||