rpms/gstreamer1-plugins-good
7
0
Fork 0
Code Issues Pull Requests Releases Activity
GStreamer plugins with good code and licensing
14 Commits 8 Branches 53 Tags 823 KiB
Diff 100%
be69763989
Go to file
RHEL Packaging Agent be69763989 Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover 
Backport upstream commit 93fa4cd30ba4 to fix CVE-2026-18296.
The patch adds validation of box sizes and box versions in
atomsrecovery.c (qtmoovrecover), preventing potential security
issues. The upstream monorepo path prefix was stripped to fit
the standalone gst-plugins-good source tree used in RHEL 8.
Added as Patch14 following the existing CVE patch naming
convention.

CVE: CVE-2026-18296
Upstream patches:
 - 93fa4cd30b.patch
Resolves: RHEL-246549

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-22 13:01:55 +00:00
.gitignore re-import sources as agreed with the maintainer 2023-07-10 12:58:17 +02:00
0001-matroskademux-Fix-extraction-of-multichannel-WavPack.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch Add patch for CVE-2026-3083 and CVE-2026-3085 2026-03-31 13:22:08 +02:00
0002-matroskademux-Initialize-track-context-out-parameter.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0003-flacparse-Avoid-integer-overflow-in-available-data-c.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0004-qtdemux-Avoid-integer-overflow-when-parsing-Theora-e.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0005-gdkpixbufdec-Check-if-initializing-the-video-info-ac.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0006-matroskademux-Only-unmap-GstMapInfo-in-WavPack-heade.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0007-matroskademux-Fix-off-by-one-when-parsing-multi-chan.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0008-qtdemux-Fix-integer-overflow-when-allocating-the-sam.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0009-qtdemux-Make-sure-only-an-even-number-of-bytes-is-pr.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 10:43:14 -08:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18296.patch Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover 2026-08-22 13:01:55 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18649.patch Fix CVE-2026-18649 in H.264/H.265 RTP depayloaders 2026-08-13 14:43:28 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-53705.patch Fix CVE-2026-53705: integer overflow in wavpackdec 2026-06-19 14:55:03 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-73433.patch Fix multiple security issues in AVI demuxer (CVE-2026-73433) 2026-08-13 14:43:28 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-73434.patch Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling 2026-08-13 14:49:59 +00:00
gstreamer1-plugins-good.spec Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover 2026-08-22 13:01:55 +00:00
sources Auto sync2gitlab import of gstreamer1-plugins-good-1.16.1-2.el8.src.rpm 2022-05-26 09:17:30 -04:00