CLSA-2026-1790730632 gstreamer1-plugins-base: Fix of 2 CVEs

CVE-2026-18297: opusdec: don't use channel positions for more than 64 channels, preventing an out-of-bounds write in gstopusdecnegotiate - CVE-2026-85150: rtsp/message: fix negative length passed to gstrndup when an auth param value starts with whitespace...

CLSA-2026-1790255794 gstreamer1-plugins-base: Fix of 2 CVEs

CVE-2026-18297: opusdec: don't use any channel positions for more than 64 channels, preventing out-of-bounds writes to the fixed-size 64-element channel position array in gstopusdecnegotiate - CVE-2026-85150: rtsp/message: use the end of the item after skipping whitespace when parsing an auth...

gstreamer1-plugins-base security update

1.22.12-8.2 - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves: RHEL-253753 1.22.12-8.1 - Sync with c9s release -5..-8: fix for CVE-2026-2921 in riff palette parsing Resolves: RHEL-156246...

openSUSE Security Update : ffmpeg (openSUSE-2015-821)

The ffmpeg package was updated to version 2.8.2 to fix the following security and non security issues : - CVE-2015-8216: Fixed the ljpegdecodeyuvscan function in libavcodec/mjpegdec.c which could cause a denial of service out-of-bounds array access bnc955346. - CVE-2015-8217: Fixed the...