CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-good (CENTOS7:CLSA-2026:1792770102)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792770102 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps functi...

CLSA-2026-1790601978 gstreamer1-plugins-base: Fix of CVE-2026-18297

rebase onto Oracle 1.10.4-2.0.3.el7, which brings the vendor's own backports as Patch1001-Patch1005 - drop 3 of the 4 TuxCare CVE backports in favour of the vendor's copies - CVE-2024-47615: carry the two halves of our backport the vendor omits. Its Patch1003 adds the bounds guards to...

Amazon Linux 2023 : gstreamer1-plugins-good, gstreamer1-plugins-good-gtk (ALAS2023-2026-3276)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3276 advisory. A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The...

Amazon Linux 2 : gstreamer1-plugins-good (ALAS-2026-4024)

The version of gstreamer1-plugins-good installed on the remote host is prior to 1.18.4-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4024 advisory. A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur wh...

CLSA-2026-1792769449 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46469: fix division by zero in qtdemuxparsetrak when an MP4 signals 0 audio channels - CVE-2026-46470: fix division by zero in qtdemux audio sample description parsing when an MP4 signals 0 audio channels...

CLSA-2026-1792769310 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46470: qtdemux: fix division by zero in qtdemuxaudiocaps when an LPCM sound sample description signals 0 audio channels...

CLSA-2026-1792768971 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46470: qtdemux: fix division by zero in qtdemuxaudiocaps when an LPCM sound sample description signals 0 audio channels...

CLSA-2026-1792239628 gstreamer1-plugins-good: Fix of 2 CVEs

CVE-2026-73433: avidemux: fix unsigned integer underflow and out-of-bounds access when parsing FUJIFILM metadata in strd chunks - CVE-2026-73434: avidemux: fix out-of-bounds read by using the correct divisor when counting vprp video field descriptors...

CLSA-2026-1790603589 gstreamer1-plugins-base: Fix of CVE-2026-18297

rebase onto Oracle 1.10.4-2.0.3.el7, which brings the vendor's own backports as Patch1001-Patch1005 - drop 3 of the 4 TuxCare CVE backports in favour of the vendor's copies - CVE-2024-47615: carry the two halves of our backport the vendor omits. Its Patch1003 adds the bounds guards to...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.2:CLSA-2026:1792769449)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792769449 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-good Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792239628)

The CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792239628 advisory. - A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792562667)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792562667 advisory. - GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-good Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792533291)

The CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792533291 advisory. - GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

CLSA-2026-1792533291 gstreamer1-plugins-good: Fix of 4 CVEs

rebase onto Oracle 1.10.4-2.0.7.el79 - the vendor fixes in this build: CVE-2026-18295 and CVE-2026-18296 qtmoovrecover: validate box sizes, CVE-2026-18298 gdkpixbufdec: handle format and resolution changes correctly and CVE-2026-18299 rtpsbcdepay: check that enough data is available in the...

CLSA-2026-1792562667 gstreamer1-plugins-bad-free: Fix of 2 CVEs

CVE-2026-3082: jpegparser: fix heap buffer overflow by checking the Huffman table length against its storage before copying it - CVE-2026-59692: dtls: fix stack buffer overflow by allocating the buffer for the peer certificate subject DN to its printed length...

CLSA-2026-1792238729 gstreamer1-plugins-good: Fix of 4 CVEs

CVE-2026-73433: avidemux: fix unsigned integer underflow and out-of-bounds access when parsing FUJIFILM metadata in strd chunks - CVE-2026-73434: avidemux: fix out-of-bounds read by using the correct divisor when counting vprp video field descriptors...

CLSA-2026-1792572593 gstreamer1-plugins-good: Fix of 3 CVEs

CVE-2026-46469: avoid division by zero in qtdemuxparsetrak when zero audio channels are signalled - CVE-2026-46470: avoid division by zero in qtdemuxaudiocaps when zero audio channels are signalled for raw LPCM - CVE-2026-1940: fix out-of-bounds read in gstwavparseadtlchunk on odd-sized adtl...

CLSA-2026-1792532772 gstreamer1-plugins-good: Fix of 4 CVEs

rebase onto Oracle 1.10.4-2.0.7.el79 - the vendor fixes in this build: CVE-2026-18295 and CVE-2026-18296 qtmoovrecover: validate box sizes, CVE-2026-18298 gdkpixbufdec: handle format and resolution changes correctly and CVE-2026-18299 rtpsbcdepay: check that enough data is available in the...

CLSA-2026-1792532987 gstreamer1-plugins-good: Fix of 4 CVEs

rebase onto Oracle 1.10.4-2.0.7.el79 - the vendor fixes in this build: CVE-2026-18295 and CVE-2026-18296 qtmoovrecover: validate box sizes, CVE-2026-18298 gdkpixbufdec: handle format and resolution changes correctly and CVE-2026-18299 rtpsbcdepay: check that enough data is available in the...

CLSA-2026-1792562041 gstreamer1-plugins-bad-free: Fix of 2 CVEs

CVE-2026-3082: jpegparser: fix heap buffer overflow by checking the Huffman table length against its storage before copying it - CVE-2026-59692: dtls: fix stack buffer overflow by allocating the buffer for the peer certificate subject DN to its printed length...