rpms/gstreamer1-plugins-good
7
0
Fork 0
Code Issues Pull Requests Releases Activity
GStreamer plugins with good code and licensing
24 Commits 8 Branches 53 Tags 823 KiB
Diff 100%
67028be52b
Go to file
RHEL Packaging Agent 67028be52b Fix CVE-2026-18649: limit RTP H.264/H.265 fragmentation unit size 
Backport upstream MR 12234 to fix CVE-2026-18649 in
gstreamer1-plugins-good-1.22.12. Adds a max-fragmentation-unit-size
property (default 32MB) to both the H264 and H265 RTP depayloaders,
dropping fragmentation units that exceed this limit to prevent
excessive memory usage. Also properly resets internal state fields
when discarding data during fragmentation unit handling.

CVE: CVE-2026-18649
Upstream patches:
 - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12234.patch
Resolves: RHEL-224165

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-17 09:05:28 +00:00
.gitignore Update to 1.22.12 2024-08-27 12:26:04 +02:00
0001-qtdemux-Avoid-integer-overflow-when-parsing-Theora-e.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch Apply patches for CVE-2026-3083, CVE-2026-3085 2026-03-27 12:11:36 +01:00
0002-avisubtitle-Fix-size-checks-and-avoid-overflows-when.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0003-gdkpixbufdec-Check-if-initializing-the-video-info-ac.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0004-wavparse-Check-for-short-reads-when-parsing-headers-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0005-wavparse-Make-sure-enough-data-for-the-tag-list-tag-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0006-wavparse-Fix-parsing-of-acid-chunk.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0007-wavparse-Check-that-at-least-4-bytes-are-available-b.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0008-wavparse-Check-that-at-least-32-bytes-are-available-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0009-wavparse-Fix-clipping-of-size-to-the-file-size.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0010-wavparse-Check-size-before-reading-ds64-chunk.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0011-matroskademux-Only-unmap-GstMapInfo-in-WavPack-heade.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0012-matroskademux-Fix-off-by-one-when-parsing-multi-chan.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0013-matroskademux-Check-for-big-enough-WavPack-codec-pri.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0014-matroskademux-Don-t-take-data-out-of-an-empty-adapte.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0015-matroskademux-Skip-over-laces-directly-when-postproc.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0016-matroskademux-Skip-over-zero-sized-Xiph-stream-heade.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0017-matroskademux-Put-a-copy-of-the-codec-data-into-the-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0018-qtdemux-Fix-integer-overflow-when-allocating-the-sam.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0019-qtdemux-Check-sizes-of-stsc-stco-stts-before-trying-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0020-qtdemux-Make-sure-only-an-even-number-of-bytes-is-pr.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0021-qtdemux-Make-sure-enough-data-is-available-before-re.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0022-qtdemux-Fix-length-checks-and-offsets-in-stsd-entry-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0023-qtdemux-Fix-error-handling-when-parsing-cenc-sample-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0024-qtdemux-Make-sure-there-are-enough-offsets-to-read-w.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0025-qtdemux-Actually-handle-errors-returns-from-various-.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0026-qtdemux-Check-for-invalid-atom-length-when-extractin.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0027-qtdemux-Add-size-check-for-parsing-SMI-SEQH-atom.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
0028-jpegdec-Directly-error-out-on-negotiation-failures.patch Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 2024-12-13 17:30:57 +01:00
gating.yaml enabling gating for el9 2021-06-16 13:25:36 +02:00
gstreamer1-plugins-good-1.22.12-CVE-2026-18649.patch Fix CVE-2026-18649: limit RTP H.264/H.265 fragmentation unit size 2026-08-17 09:05:28 +00:00
gstreamer1-plugins-good-1.22.12-CVE-2026-53705.patch Fix integer overflow in wavpack decoder (CVE-2026-53705) 2026-07-29 08:44:18 +00:00
gstreamer1-plugins-good.spec Fix CVE-2026-18649: limit RTP H.264/H.265 fragmentation unit size 2026-08-17 09:05:28 +00:00
gstreamer-good.appdata.xml RHEL 9.0.0 Alpha bootstrap 2020-10-15 12:07:58 +02:00
sources Update to 1.22.12 2024-08-27 12:26:04 +02:00