{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "rebase onto Oracle 1.10.4-2.0.3.el7, which brings the vendor's own backports\n as Patch1001-Patch1005\n- drop 3 of the 4 TuxCare CVE backports in favour of the vendor's copies\n- CVE-2024-47615: carry the two halves of our backport the vendor omits. Its\n Patch1003 adds the bounds guards to gst_parse_vorbis_setup_packet() but\n leaves the function declared void, so the five `return -1` statements it\n writes are discarded and is_header_vorbis() still reports a malformed vorbis\n setup packet as a valid header; and it guards only against underrunning the\n ogg packet, where ours also stopped both advance loops from running past\n op->packet + op->bytes\n- CVE-2024-47607: the vendor's Patch1001 bounds the write into the caller's\n pos[64] but not the two memcpys in gst_opus_dec_negotiate(), which copy\n n_channels entries - up to 255 from the Opus ID header - into the 64-entry\n dec->opus_pos; take upstream 178ae5ac, which drops the positions above 64\n channels\n- 1004-video-info-Sanity-check-the-frame-size-to.patch carries no CVE reference\n in the vendor's commit message; it is taken as a hardening change, with\n upstream 3d7a5666 on top so its overflow guard stops overflowing itself", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792736990", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792736990" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/advisories/2026/clsa-2026_1792736990.json" } ], "tracking": { "current_release_date": "2026-10-24T09:22:13Z", "generator": { "date": "2026-10-24T09:22:13Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792736990", "initial_release_date": "2026-10-23T06:29:52Z", "revision_history": [ { "date": "2026-10-23T06:29:52Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-24T09:22:13Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "gstreamer1-plugins-base: Fix of CVE-2026-18297" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "CloudLinux 7", "product": { "name": "CloudLinux 7", "product_id": "CloudLinux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "CloudLinux" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "product": { "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "product_id": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base-tools@1.10.4-2.0.3.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "product": { "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "product_id": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base@1.10.4-2.0.3.el7.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "product": { "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "product_id": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base-devel@1.10.4-2.0.3.el7.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "product": { "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "product_id": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base-tools@1.10.4-2.0.3.el7.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "product": { "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "product_id": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base@1.10.4-2.0.3.el7.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "product": { "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "product_id": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base-devel@1.10.4-2.0.3.el7.tuxcare.els1?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch", "product": { "name": "gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch", "product_id": "gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base-devel-docs@1.10.4-2.0.3.el7.tuxcare.els1?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64" }, "product_reference": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686" }, "product_reference": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686" }, "product_reference": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64" }, "product_reference": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch as a component of CloudLinux 7", "product_id": "CloudLinux-7:gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch" }, "product_reference": "gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686" }, "product_reference": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64" }, "product_reference": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CloudLinux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-18297", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29584.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "CloudLinux-7:gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch", "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-18297" }, { "category": "external", "summary": "https://gstreamer.freedesktop.org/security/sa-2026-0053.html", "url": "https://gstreamer.freedesktop.org/security/sa-2026-0053.html" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-465/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-465/" } ], "release_date": "2026-08-20T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T06:29:52.041346Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792736990", "product_ids": [ "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64", "CloudLinux-7:gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch", "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686", "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792736990" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }