GStreamer plugins with good code and licensing
Go to file
RHEL Packaging Agent 9b48c1cc9b Fix integer overflow in wavpack decoder (CVE-2026-53705)
Backport CVE-2026-53705 fix from upstream GStreamer MR #11797
(4 commits) to address integer overflow vulnerabilities in the
wavpack decoder. The patch uses g_size_checked_mul to avoid
integer overflow when calculating output buffer size, corrects
variable types to prevent overflow, fixes integer overflow in
input buffer size check, and unmaps input buffer earlier to
prevent use-after-free in error paths.

CVE: CVE-2026-53705
Upstream patches:
 - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11797.patch
Resolves: RHEL-184481

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-29 08:38:47 +00:00
.gitignore Update to 1.26.7 2025-11-04 17:24:03 +01:00
0001-jitterbuffer-Allow-rtp-caps-without-clock-rate.patch Don't force RTP jitterbuffer clock-rate 2015-03-06 16:57:25 +00:00
0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch Add patch for CVE-2026-3083 and CVE-2026-3085 2026-03-31 11:39:29 +02:00
gating.yaml Add gating.yaml via API 2024-04-30 10:22:18 +00:00
gstreamer1-plugins-good-1.26.7-CVE-2026-53705.patch Fix integer overflow in wavpack decoder (CVE-2026-53705) 2026-07-29 08:38:47 +00:00
gstreamer1-plugins-good.spec Fix integer overflow in wavpack decoder (CVE-2026-53705) 2026-07-29 08:38:47 +00:00
gstreamer-good.appdata.xml +appdata.xml 2018-05-22 13:28:23 -05:00
sources Update to 1.26.7 2025-11-04 17:24:03 +01:00