rpms/gstreamer1-plugins-good
7
0
Fork 0
Code Issues Pull Requests Releases Activity
GStreamer plugins with good code and licensing
13 Commits 8 Branches 53 Tags 823 KiB
Diff 100%
10effc6042
Go to file
RHEL Packaging Agent 10effc6042 Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling 
Backport upstream commit 0bcc6564 to fix an out-of-bounds read
vulnerability in the AVI demuxer (CVE-2026-73434). The fix
corrects the divisor used when calculating the available number
of vprp field infos, changing it from `vprp->fields` to
`sizeof(vprp->field_info[0])` to prevent reading beyond the
allocated buffer.

CVE: CVE-2026-73434
Upstream patches:
 - 0bcc6564c7.patch
Resolves: RHEL-239048

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-13 14:49:59 +00:00
.gitignore re-import sources as agreed with the maintainer 2023-07-10 12:58:17 +02:00
0001-matroskademux-Fix-extraction-of-multichannel-WavPack.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch Add patch for CVE-2026-3083 and CVE-2026-3085 2026-03-31 13:22:08 +02:00
0002-matroskademux-Initialize-track-context-out-parameter.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0003-flacparse-Avoid-integer-overflow-in-available-data-c.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0004-qtdemux-Avoid-integer-overflow-when-parsing-Theora-e.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0005-gdkpixbufdec-Check-if-initializing-the-video-info-ac.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0006-matroskademux-Only-unmap-GstMapInfo-in-WavPack-heade.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0007-matroskademux-Fix-off-by-one-when-parsing-multi-chan.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0008-qtdemux-Fix-integer-overflow-when-allocating-the-sam.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0009-qtdemux-Make-sure-only-an-even-number-of-bytes-is-pr.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 10:43:14 -08:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18649.patch Fix CVE-2026-18649 in H.264/H.265 RTP depayloaders 2026-08-13 14:43:28 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-53705.patch Fix CVE-2026-53705: integer overflow in wavpackdec 2026-06-19 14:55:03 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-73433.patch Fix multiple security issues in AVI demuxer (CVE-2026-73433) 2026-08-13 14:43:28 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-73434.patch Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling 2026-08-13 14:49:59 +00:00
gstreamer1-plugins-good.spec Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling 2026-08-13 14:49:59 +00:00
sources Auto sync2gitlab import of gstreamer1-plugins-good-1.16.1-2.el8.src.rpm 2022-05-26 09:17:30 -04:00