rpms/gstreamer1-plugins-bad-free
7
0
Fork 0
Code Issues Pull Requests Releases Activity
GStreamer streaming media framework "bad" plugins
34 Commits 10 Branches 44 Tags 880 KiB
Shell 100%
ca613476ca
Go to file
RHEL Packaging Agent ca613476ca Fix CVE-2026-52719: out-of-bounds read in VA JPEG decoder 
Backport upstream commit c97cce5f from the GStreamer monorepo
to fix CVE-2026-52719. The patch adds input validation to the
VA JPEG decoder (gstjpegdecoder.c) by introducing a
jpeg_segment_fits_input() helper function that verifies parsed
JPEG segments don't exceed the available input data, preventing
potential out-of-bounds reads.

CVE: CVE-2026-52719
Upstream patches:
 - c97cce5f18.patch
Resolves: RHEL-184404

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-29 10:10:31 +00:00
.gitignore Update to 1.22.12 2024-08-27 12:24:28 +02:00
0001-dvbsuboverlay-Mark-parsed-byte-array-as-const.patch fix for CVE-2026-2923, CVE-2026-3082 2026-03-27 13:03:40 +01:00
0001-h265parser-Fix-max_dec_pic_buffering_minus1-bound-ch.patch fix for CVE-2025-3887 2025-05-26 11:59:13 +02:00
0001-rfbsrc-Use-correct-bpp-for-copying-hextile-data.patch Fix CVE-2026-59691: rfbsrc bpp handling in hextile and color reads 2026-07-29 10:10:31 +00:00
0002-dvbsuboverlay-Add-missing-bounds-checks-to-the-parse.patch fix for CVE-2026-2923, CVE-2026-3082 2026-03-27 13:03:40 +01:00
0002-rfbsrc-Read-the-correct-number-of-bytes-for-color-va.patch Fix CVE-2026-59691: rfbsrc bpp handling in hextile and color reads 2026-07-29 10:10:31 +00:00
0003-dvbsuboverlay-Avoid-integer-overflows-and-unreasonab.patch fix for CVE-2026-2923, CVE-2026-3082 2026-03-27 13:03:40 +01:00
0004-libs-jpegparser-boundary-checks-before-copying-it.patch fix for CVE-2026-2923, CVE-2026-3082 2026-03-27 13:03:40 +01:00
gating.yaml enabling gating for el9 2021-06-16 13:25:27 +02:00
gst-p-bad-cleanup.sh RHEL 9.0.0 Alpha bootstrap 2020-10-15 12:07:14 +02:00
gstreamer1-plugins-bad-free-1.22.12-CVE-2026-52719.patch Fix CVE-2026-52719: out-of-bounds read in VA JPEG decoder 2026-07-29 10:10:31 +00:00
gstreamer1-plugins-bad-free-1.22.12-CVE-2026-52720.patch Fix CVE-2026-52720 in gstreamer1-plugins-bad-free 2026-07-29 10:10:31 +00:00
gstreamer1-plugins-bad-free-1.22.12-CVE-2026-52722.patch Fix integer overflows in vmnc decoder (CVE-2026-52722) 2026-07-29 10:10:31 +00:00
gstreamer1-plugins-bad-free-1.22.12-CVE-2026-59692.patch Fix CVE-2026-59692: DTLS connection buffer overflow in certificate DN 2026-07-29 10:10:31 +00:00
gstreamer1-plugins-bad-free.spec Fix CVE-2026-52719: out-of-bounds read in VA JPEG decoder 2026-07-29 10:10:31 +00:00
openh264-add-license-file.patch Update to 1.22.12 2024-08-27 12:24:28 +02:00
openh264-drop-runtime-version-checks.patch Update to 1.22.12 2024-08-27 12:24:28 +02:00
sources Update to 1.22.12 2024-08-27 12:24:28 +02:00