GStreamer plugins with good code and licensing
14df9f8d70
Backport CVE-2026-18649 fix from upstream GStreamer MR 12244 to gstreamer1-plugins-good 1.16.1. The patch adds a max-fragmentation-unit-size property (default 32 MB) to both H.264 and H.265 RTP depayloaders. If a fragmentation unit exceeds this limit while being assembled, it is dropped and the depayloader state is reset, preventing excessive memory usage from crafted RTP streams. CVE: CVE-2026-18649 Upstream patches: - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12244.patch Resolves: RHEL-224145 This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent. Assisted-by: Ymir |
||
|---|---|---|
| .gitignore | ||
| 0001-matroskademux-Fix-extraction-of-multichannel-WavPack.patch | ||
| 0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch | ||
| 0002-matroskademux-Initialize-track-context-out-parameter.patch | ||
| 0003-flacparse-Avoid-integer-overflow-in-available-data-c.patch | ||
| 0004-qtdemux-Avoid-integer-overflow-when-parsing-Theora-e.patch | ||
| 0005-gdkpixbufdec-Check-if-initializing-the-video-info-ac.patch | ||
| 0006-matroskademux-Only-unmap-GstMapInfo-in-WavPack-heade.patch | ||
| 0007-matroskademux-Fix-off-by-one-when-parsing-multi-chan.patch | ||
| 0008-qtdemux-Fix-integer-overflow-when-allocating-the-sam.patch | ||
| 0009-qtdemux-Make-sure-only-an-even-number-of-bytes-is-pr.patch | ||
| gating.yaml | ||
| gstreamer1-plugins-good-1.16.1-CVE-2026-18649.patch | ||
| gstreamer1-plugins-good-1.16.1-CVE-2026-53705.patch | ||
| gstreamer1-plugins-good-1.16.1-CVE-2026-73433.patch | ||
| gstreamer1-plugins-good.spec | ||
| sources | ||