rpms/gstreamer1-plugins-good
7
0
Fork 0
Code Issues Pull Requests Releases Activity
GStreamer plugins with good code and licensing
16 Commits 8 Branches 53 Tags 823 KiB
Diff 100%
d22715362d
Go to file
RHEL Packaging Agent d22715362d Fix CVE-2026-18298: heap buffer overflow in GdkPixbuf image decoder 
Backport upstream commit cf4f7cbc081cde7769862b424c105f10c083171b
to fix CVE-2026-18298, a heap buffer overflow in the GdkPixbuf
image decoder (gstgdkpixbufdec.c) caused by dimension changes.
The fix moves the n_channels/format determination before the
conditional check and extends the condition to also verify format,
width, and height changes, ensuring the video info is properly
reinitialized when image properties change.

CVE: CVE-2026-18298
Upstream patches:
 - cf4f7cbc08.patch
Resolves: RHEL-246561

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-22 13:01:55 +00:00
.gitignore re-import sources as agreed with the maintainer 2023-07-10 12:58:17 +02:00
0001-matroskademux-Fix-extraction-of-multichannel-WavPack.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0001-rtpqdm2depay-error-out-if-anyone-tries-to-use-this-e.patch Add patch for CVE-2026-3083 and CVE-2026-3085 2026-03-31 13:22:08 +02:00
0002-matroskademux-Initialize-track-context-out-parameter.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0003-flacparse-Avoid-integer-overflow-in-available-data-c.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0004-qtdemux-Avoid-integer-overflow-when-parsing-Theora-e.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0005-gdkpixbufdec-Check-if-initializing-the-video-info-ac.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0006-matroskademux-Only-unmap-GstMapInfo-in-WavPack-heade.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0007-matroskademux-Fix-off-by-one-when-parsing-multi-chan.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0008-qtdemux-Fix-integer-overflow-when-allocating-the-sam.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
0009-qtdemux-Make-sure-only-an-even-number-of-bytes-is-pr.patch CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, 2024-12-16 16:13:39 +01:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 10:43:14 -08:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18296.patch Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover 2026-08-22 13:01:55 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18298.patch Fix CVE-2026-18298: heap buffer overflow in GdkPixbuf image decoder 2026-08-22 13:01:55 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18299.patch Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay 2026-08-22 13:01:55 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-18649.patch Fix CVE-2026-18649 in H.264/H.265 RTP depayloaders 2026-08-13 14:43:28 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-53705.patch Fix CVE-2026-53705: integer overflow in wavpackdec 2026-06-19 14:55:03 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-73433.patch Fix multiple security issues in AVI demuxer (CVE-2026-73433) 2026-08-13 14:43:28 +00:00
gstreamer1-plugins-good-1.16.1-CVE-2026-73434.patch Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling 2026-08-13 14:49:59 +00:00
gstreamer1-plugins-good.spec Fix CVE-2026-18298: heap buffer overflow in GdkPixbuf image decoder 2026-08-22 13:01:55 +00:00
sources Auto sync2gitlab import of gstreamer1-plugins-good-1.16.1-2.el8.src.rpm 2022-05-26 09:17:30 -04:00