rpms/gstreamer1-plugins-base
7
0
Fork 0
Code Issues Pull Requests Releases Activity
GStreamer streaming media framework base plugins
23 Commits 8 Branches 39 Tags 437 KiB
Diff 100%
c9s
Go to file
RHEL Packaging Agent bee2d55c97 Fix CVE-2026-18297: opusdec channel position bounds check 
Backport upstream commit 178ae5ac20db to fix CVE-2026-18297.
The patch adds a bounds check in gst_opus_dec_negotiate() to
set pos = NULL when n_channels > 64, preventing a buffer
overflow in the memcpy into the fixed-size opus_pos array.

CVE: CVE-2026-18297
Upstream patches:
 - 178ae5ac20.patch
Resolves: RHEL-246584

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-25 07:32:57 +00:00
.gitignore Update to 1.22.12 2024-08-27 11:32:18 +02:00
0001-missing-plugins-Remove-the-mpegaudioversion-field.patch Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 2024-12-13 16:02:03 +01:00
0001-opusdec-Don-t-use-any-channel-positions-for-64-chann.patch Fix CVE-2026-18297: opusdec channel position bounds check 2026-08-25 07:32:57 +00:00
0001-riff-Correctly-check-that-enough-RGB-palette-data-is.patch Apply patch for CVE-2026-2921 2026-03-27 11:52:09 +01:00
0002-id3v2-Don-t-try-parsing-extended-header-if-not-enoug.patch Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 2024-12-13 16:02:03 +01:00
0003-opusdec-Set-at-most-64-channels-to-NONE-position.patch Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 2024-12-13 16:02:03 +01:00
0004-vorbis_parse-check-writes-to-GstOggStream.vorbis_mod.patch Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 2024-12-13 16:02:03 +01:00
0005-oggstream-review-and-fix-per-format-min_packet_size.patch Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 2024-12-13 16:02:03 +01:00
0006-discoverer-Don-t-print-channel-layout-for-more-than-.patch Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 2024-12-13 16:02:03 +01:00
0007-vorbisdec-Set-at-most-64-channels-to-NONE-position.patch Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 2024-12-13 16:02:03 +01:00
0008-ssaparse-Search-for-closing-brace-after-opening-brac.patch Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 2024-12-13 16:02:03 +01:00
0009-ssaparse-Don-t-use-strstr-on-strings-that-are-potent.patch Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 2024-12-13 16:02:03 +01:00
0010-subparse-Check-for-NULL-return-of-strchr-when-parsin.patch Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, 2024-12-13 16:02:03 +01:00
gating.yaml enabling gating for el9 2021-06-16 13:25:32 +02:00
gstreamer1-plugins-base.spec Fix CVE-2026-18297: opusdec channel position bounds check 2026-08-25 07:32:57 +00:00
sources Update to 1.22.12 2024-08-27 11:32:18 +02:00
xdg-compile.patch Handle both compressed and uncompressed man pages 2022-01-14 17:08:39 +01:00