rpms/gstreamer1-plugins-good
7
0
Fork 0
Code Issues Pull Requests Releases Activity
GStreamer plugins with good code and licensing
23 Commits 8 Branches 42 Tags 506 KiB
Diff 100%
c9s
Go to file
RHEL Packaging Agent a8a9c25b9f Fix integer overflow in wavpack decoder (CVE-2026-53705) 
Backport CVE-2026-53705 fix from upstream GStreamer MR !11797
(4 commits by Sebastian Dröge) to address integer overflow
vulnerabilities in the wavpackdec element. The patch fixes
integer overflows when calculating output buffer size and
checking input buffer size, uses correctly-sized variable
types, and unmaps the input buffer directly after decoding
to avoid use-after-free scenarios.

CVE: CVE-2026-53705
Upstream patches:
 - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11797.patch
Resolves: RHEL-184478

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-29 08:44:18 +00:00
.gitignore Update to 1.22.12 2024-08-27 12:26:04 +02:00
0001-qtdemux-Avoid-integer-overflow-when-parsing-Theora-e.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch Apply patches for CVE-2026-3083, CVE-2026-3085 2026-03-27 12:11:36 +01:00
0002-avisubtitle-Fix-size-checks-and-avoid-overflows-when.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0003-gdkpixbufdec-Check-if-initializing-the-video-info-ac.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0004-wavparse-Check-for-short-reads-when-parsing-headers-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0005-wavparse-Make-sure-enough-data-for-the-tag-list-tag-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0006-wavparse-Fix-parsing-of-acid-chunk.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0007-wavparse-Check-that-at-least-4-bytes-are-available-b.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0008-wavparse-Check-that-at-least-32-bytes-are-available-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0009-wavparse-Fix-clipping-of-size-to-the-file-size.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0010-wavparse-Check-size-before-reading-ds64-chunk.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0011-matroskademux-Only-unmap-GstMapInfo-in-WavPack-heade.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0012-matroskademux-Fix-off-by-one-when-parsing-multi-chan.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0013-matroskademux-Check-for-big-enough-WavPack-codec-pri.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0014-matroskademux-Don-t-take-data-out-of-an-empty-adapte.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0015-matroskademux-Skip-over-laces-directly-when-postproc.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0016-matroskademux-Skip-over-zero-sized-Xiph-stream-heade.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0017-matroskademux-Put-a-copy-of-the-codec-data-into-the-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0018-qtdemux-Fix-integer-overflow-when-allocating-the-sam.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0019-qtdemux-Check-sizes-of-stsc-stco-stts-before-trying-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0020-qtdemux-Make-sure-only-an-even-number-of-bytes-is-pr.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0021-qtdemux-Make-sure-enough-data-is-available-before-re.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0022-qtdemux-Fix-length-checks-and-offsets-in-stsd-entry-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0023-qtdemux-Fix-error-handling-when-parsing-cenc-sample-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0024-qtdemux-Make-sure-there-are-enough-offsets-to-read-w.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0025-qtdemux-Actually-handle-errors-returns-from-various-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0026-qtdemux-Check-for-invalid-atom-length-when-extractin.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0027-qtdemux-Add-size-check-for-parsing-SMI-SEQH-atom.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0028-jpegdec-Directly-error-out-on-negotiation-failures.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
gating.yaml enabling gating for el9 2021-06-16 13:25:36 +02:00
gstreamer1-plugins-good-1.22.12-CVE-2026-53705.patch Fix integer overflow in wavpack decoder (CVE-2026-53705) 2026-07-29 08:44:18 +00:00
gstreamer1-plugins-good.spec Fix integer overflow in wavpack decoder (CVE-2026-53705) 2026-07-29 08:44:18 +00:00
gstreamer-good.appdata.xml RHEL 9.0.0 Alpha bootstrap 2020-10-15 12:07:58 +02:00
sources Update to 1.22.12 2024-08-27 12:26:04 +02:00