[CLSA-2026:1793015456] gstreamer1-plugins-bad-free: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-26 11:51:09 UTC
Description:
- CVE-2026-19387: adpcmdec: fix heap out-of-bounds write when decoding multi-channel IMA ADPCM - CVE-2026-59691: rfbsrc: fix heap buffer overflow by using the decoder bytes per pixel when reading and filling rectangle colors
Updated packages:
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:adc8bfceb9812039896fa00d97ac2dbf3913b663c1b4bfd54b2a1a4d0078a7c7
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:f2c77b1718dff4d20d2c43cf0e6766c0abffa2b536cfec1393f96daf3c42240b
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:42ca7b2f4e37eb12baf5a433b6065d4aae27c4f8794e1f6fd1d768899a7cccb3
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:651d655133535f723b9d4860f0f313a23b6378a2e08df35f942b3255e371b859
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:034c904e804b3e45d847f51b8988a735085c5a91f2ac460e2354d387f1fcceb2
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:73cd946e32b01b7608459fe2822da1189b3a4c3accae4c167ee7a2fe888bc9d9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.