GStreamer plugins with good code and licensing
1a5072bc97
Backport upstream GStreamer MR !12231 to fix CVE-2026-73433, addressing multiple security issues in the AVI demuxer (gst/avi/gstavidemux.c). The patch includes fixes for bounds checking on FUJIFILM strd parsing, read-only buffer handling, tag pointer dereferencing, vprp field info calculation, integer overflow in index parsing, and subindex item count validation. CVE: CVE-2026-73433 Upstream patches: - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12231.patch Resolves: RHEL-239068 This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent. Assisted-by: Ymir |
||
|---|---|---|
| .gitignore | ||
| 0001-matroskademux-Fix-extraction-of-multichannel-WavPack.patch | ||
| 0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch | ||
| 0002-matroskademux-Initialize-track-context-out-parameter.patch | ||
| 0003-flacparse-Avoid-integer-overflow-in-available-data-c.patch | ||
| 0004-qtdemux-Avoid-integer-overflow-when-parsing-Theora-e.patch | ||
| 0005-gdkpixbufdec-Check-if-initializing-the-video-info-ac.patch | ||
| 0006-matroskademux-Only-unmap-GstMapInfo-in-WavPack-heade.patch | ||
| 0007-matroskademux-Fix-off-by-one-when-parsing-multi-chan.patch | ||
| 0008-qtdemux-Fix-integer-overflow-when-allocating-the-sam.patch | ||
| 0009-qtdemux-Make-sure-only-an-even-number-of-bytes-is-pr.patch | ||
| gating.yaml | ||
| gstreamer1-plugins-good-1.16.1-CVE-2026-53705.patch | ||
| gstreamer1-plugins-good-1.16.1-CVE-2026-73433.patch | ||
| gstreamer1-plugins-good.spec | ||
| sources | ||