[CLSA-2026:1793915124] gstreamer1-plugins-good: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-05 21:45:35 UTC
Description:
- wavparse: fix NULL pointer dereference when parsing an adtl LIST chunk in push mode (upstream work item 5177, GStreamer-SA-2026-0064) - rtph265depay: check for short packets before reading the NAL and FU headers to prevent out-of-bounds reads (upstream work item 5258, GStreamer-SA-2026-0086)
Updated packages:
  • gstreamer1-plugins-good-1.10.4-2.0.7.el7_9.tuxcare.els4.i686.rpm
    sha:e261699e782aea88ffc146e2dde696fcbcbd734663adf7bbb6f7652114066f76
  • gstreamer1-plugins-good-1.10.4-2.0.7.el7_9.tuxcare.els4.x86_64.rpm
    sha:d58c2e8a3b1155844232b8b0dc5a6d1d425aaec53652cf472250a24e3b8cbf08
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.