rpms/gstreamer1-plugins-good
7
0
Fork 0
Code Issues Pull Requests Releases Activity
GStreamer plugins with good code and licensing
29 Commits 8 Branches 53 Tags 823 KiB
Diff 100%
266613ae0b
Go to file
RHEL Packaging Agent 266613ae0b Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay 
Backport CVE-2026-18299 fix from upstream MR !12042 to
gstreamer1-plugins-good. The patch includes three upstream
commits fixing the rtpsbcdepay element: checking for
available data in the adapter before reading, validating
sufficient data for the payload header, and removing
incorrect variable shadowing.

CVE: CVE-2026-18299
Upstream patches:
 - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12042.patch
Resolves: RHEL-246616

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-25 11:08:04 +00:00
.gitignore Update to 1.22.12 2024-08-27 12:26:04 +02:00
0001-qtdemux-Avoid-integer-overflow-when-parsing-Theora-e.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch Apply patches for CVE-2026-3083, CVE-2026-3085 2026-03-27 12:11:36 +01:00
0002-avisubtitle-Fix-size-checks-and-avoid-overflows-when.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0003-gdkpixbufdec-Check-if-initializing-the-video-info-ac.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0004-wavparse-Check-for-short-reads-when-parsing-headers-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0005-wavparse-Make-sure-enough-data-for-the-tag-list-tag-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0006-wavparse-Fix-parsing-of-acid-chunk.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0007-wavparse-Check-that-at-least-4-bytes-are-available-b.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0008-wavparse-Check-that-at-least-32-bytes-are-available-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0009-wavparse-Fix-clipping-of-size-to-the-file-size.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0010-wavparse-Check-size-before-reading-ds64-chunk.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0011-matroskademux-Only-unmap-GstMapInfo-in-WavPack-heade.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0012-matroskademux-Fix-off-by-one-when-parsing-multi-chan.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0013-matroskademux-Check-for-big-enough-WavPack-codec-pri.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0014-matroskademux-Don-t-take-data-out-of-an-empty-adapte.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0015-matroskademux-Skip-over-laces-directly-when-postproc.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0016-matroskademux-Skip-over-zero-sized-Xiph-stream-heade.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0017-matroskademux-Put-a-copy-of-the-codec-data-into-the-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0018-qtdemux-Fix-integer-overflow-when-allocating-the-sam.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0019-qtdemux-Check-sizes-of-stsc-stco-stts-before-trying-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0020-qtdemux-Make-sure-only-an-even-number-of-bytes-is-pr.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0021-qtdemux-Make-sure-enough-data-is-available-before-re.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0022-qtdemux-Fix-length-checks-and-offsets-in-stsd-entry-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0023-qtdemux-Fix-error-handling-when-parsing-cenc-sample-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0024-qtdemux-Make-sure-there-are-enough-offsets-to-read-w.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0025-qtdemux-Actually-handle-errors-returns-from-various-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0026-qtdemux-Check-for-invalid-atom-length-when-extractin.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0027-qtdemux-Add-size-check-for-parsing-SMI-SEQH-atom.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0028-jpegdec-Directly-error-out-on-negotiation-failures.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
gating.yaml enabling gating for el9 2021-06-16 13:25:36 +02:00
gstreamer1-plugins-good-1.22.12-CVE-2026-18296.patch Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover 2026-08-24 18:42:13 +00:00
gstreamer1-plugins-good-1.22.12-CVE-2026-18298.patch Fix CVE-2026-18298 in gdkpixbufdec element 2026-08-25 11:04:50 +00:00
gstreamer1-plugins-good-1.22.12-CVE-2026-18299.patch Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay 2026-08-25 11:08:04 +00:00
gstreamer1-plugins-good-1.22.12-CVE-2026-18649.patch Fix CVE-2026-18649: limit RTP H.264/H.265 fragmentation unit size 2026-08-17 09:05:28 +00:00
gstreamer1-plugins-good-1.22.12-CVE-2026-53705.patch Fix integer overflow in wavpack decoder (CVE-2026-53705) 2026-07-29 08:44:18 +00:00
gstreamer1-plugins-good-1.22.12-CVE-2026-73433.patch Fix CVE-2026-73433: out-of-bounds reads in AVI FUJIFILM strd parsing 2026-08-17 09:05:28 +00:00
gstreamer1-plugins-good-1.22.12-CVE-2026-73434.patch Fix avidemux vprp field info divisor calculation (CVE-2026-73434) 2026-08-17 09:09:04 +00:00
gstreamer1-plugins-good.spec Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay 2026-08-25 11:08:04 +00:00
gstreamer-good.appdata.xml RHEL 9.0.0 Alpha bootstrap 2020-10-15 12:07:58 +02:00
sources Update to 1.22.12 2024-08-27 12:26:04 +02:00