rpms/gstreamer1-plugins-good
7
0
Fork 0
Code Issues Pull Requests Releases Activity
GStreamer plugins with good code and licensing
17 Commits 8 Branches 53 Tags 823 KiB
Diff 100%
157a2dda08
Go to file
RHEL Packaging Agent 157a2dda08 Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover 
Backport upstream commit 93fa4cd30ba43b38b02a9de76a7a80dc198c87a0
(qtmoovrecover: Validate box sizes) to fix CVE-2026-18295 and
CVE-2026-18296. The patch adds box size validation and box version
checks to gst/isomp4/atomsrecovery.c. The upstream patch was adapted
from the GStreamer monorepo layout to match the standalone
gst-plugins-good-1.16.1 source tree.

CVE: CVE-2026-18295 CVE-2026-18296
Upstream patches:
 - 93fa4cd30b.patch
Resolves: RHEL-246382

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-22 13:07:25 +00:00
.gitignore re-import sources as agreed with the maintainer 2023-07-10 12:58:17 +02:00
0001-matroskademux-Fix-extraction-of-multichannel-WavPack.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch Add patch for CVE-2026-3083 and CVE-2026-3085 2026-03-31 13:22:08 +02:00
0002-matroskademux-Initialize-track-context-out-parameter.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0003-flacparse-Avoid-integer-overflow-in-available-data-c.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0004-qtdemux-Avoid-integer-overflow-when-parsing-Theora-e.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0005-gdkpixbufdec-Check-if-initializing-the-video-info-ac.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0006-matroskademux-Only-unmap-GstMapInfo-in-WavPack-heade.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0007-matroskademux-Fix-off-by-one-when-parsing-multi-chan.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0008-qtdemux-Fix-integer-overflow-when-allocating-the-sam.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0009-qtdemux-Make-sure-only-an-even-number-of-bytes-is-pr.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 10:43:14 -08:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18296.patch Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover 2026-08-22 13:01:55 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18298.patch Fix CVE-2026-18298: heap buffer overflow in GdkPixbuf image decoder 2026-08-22 13:01:55 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18299.patch Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay 2026-08-22 13:01:55 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18649.patch Fix CVE-2026-18649 in H.264/H.265 RTP depayloaders 2026-08-13 14:43:28 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-53705.patch Fix CVE-2026-53705: integer overflow in wavpackdec 2026-06-19 14:55:03 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-73433.patch Fix multiple security issues in AVI demuxer (CVE-2026-73433) 2026-08-13 14:43:28 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-73434.patch Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling 2026-08-13 14:49:59 +00:00
gstreamer1-plugins-good-1.16.1-RHEL-246382.patch Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover 2026-08-22 13:07:25 +00:00
gstreamer1-plugins-good.spec Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover 2026-08-22 13:07:25 +00:00
sources Auto sync2gitlab import of gstreamer1-plugins-good-1.16.1-2.el8.src.rpm 2022-05-26 09:17:30 -04:00