[CLSA-2026:1793016750] gstreamer1-plugins-bad-free: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-26 17:48:50 UTC
Description:
- CVE-2026-19387: adpcmdec: fix heap out-of-bounds write when decoding multi-channel IMA ADPCM - CVE-2026-59691: rfbsrc: fix heap buffer overflow by using the decoder bytes per pixel when reading and filling rectangle colors
Updated packages:
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els3.aarch64.rpm
    sha:e1b789c3f28579c8ba23e7bd8d6861b097833d44539169e72b0472df8c584cff
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:c8c0796304d99dbea98854d1398540bc34870216f9691900c09e5d8ba11b3b62
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:77756c685c126f06095cf061c13135150a7d7de8c45a0ae80b7c13b6bb1d22ba
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els3.aarch64.rpm
    sha:b4cad6fe5e0191063d018a21fa196080b9013eb01a4011d1e9a5d662dc70e21b
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:bfd669ee92eeaeb35e06423c63c87f4f36a25aee3cfdd9398124b014afd0b47f
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:504aaa06990ebd6ce0b069c315a487fa2dbe13ea7c29358bd8d96cc1b4583844
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els3.aarch64.rpm
    sha:068d5c396149f48354fa5cfb772f3d6e406c9227c2ff5d6ec2140277d9b60a57
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:8d1da84a25415e814dc3e209d8d0731a2a0f951bab45764aac0cf52ec8a2446d
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:035d6d7b89d8926b22a9ea7824eaa105cc8dccf4ba0689765bbe28ac60ea55ee
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.