rpms/gstreamer1-plugins-good
7
0
Fork 0
Code Issues Pull Requests Releases Activity
GStreamer plugins with good code and licensing
200 Commits 8 Branches 53 Tags 823 KiB
Diff 100%
53fb8e1fe5
Go to file
RHEL Packaging Agent 53fb8e1fe5 Fix CVE-2026-5056: bounds checks in qtdemux uncompressed video 
Backport upstream fix (commit f9567e3e26c9, MR !11242) for
CVE-2026-5056 (ZDI-CAN-29392). The patch adds integer overflow
and bounds checks to uncompressed video (uncv) handling in
qtdemux.c, including upper bounds on cmpd and uncC component
counts, validation of num_components range, component_index
bounds checking, and a guard against GST_VIDEO_FORMAT_UNKNOWN
before using the format.

CVE: CVE-2026-5056
Upstream patches:
 - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11242.patch
Resolves: RHEL-222332

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-11 14:45:58 +00:00
.gitignore Update to 1.26.7 2025-11-04 17:24:03 +01:00
0001-jitterbuffer-Allow-rtp-caps-without-clock-rate.patch Don't force RTP jitterbuffer clock-rate 2015-03-06 16:57:25 +00:00
0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch Add patch for CVE-2026-3083 and CVE-2026-3085 2026-03-31 11:39:29 +02:00
gating.yaml Add gating.yaml via API 2024-04-30 10:22:18 +00:00
gstreamer1-plugins-good-1.26.7-CVE-2026-5056.patch Fix CVE-2026-5056: bounds checks in qtdemux uncompressed video 2026-08-11 14:45:58 +00:00
gstreamer1-plugins-good-1.26.7-CVE-2026-18649.patch Fix CVE-2026-18649: limit RTP H.264/H.265 fragmentation unit size 2026-08-11 14:42:38 +00:00
gstreamer1-plugins-good-1.26.7-CVE-2026-53705.patch Fix integer overflow in wavpack decoder (CVE-2026-53705) 2026-07-29 08:38:47 +00:00
gstreamer1-plugins-good.spec Fix CVE-2026-5056: bounds checks in qtdemux uncompressed video 2026-08-11 14:45:58 +00:00
gstreamer-good.appdata.xml +appdata.xml 2018-05-22 13:28:23 -05:00
sources Update to 1.26.7 2025-11-04 17:24:03 +01:00