[CLSA-2026:1793017119] gstreamer1-plugins-bad-free: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-26 16:28:23 UTC
Description:
- CVE-2026-19387: adpcmdec: fix heap out-of-bounds write when decoding multi-channel IMA ADPCM - CVE-2026-59691: rfbsrc: fix heap buffer overflow by using the decoder bytes per pixel when reading and filling rectangle colors
Updated packages:
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:e5bcc46853bdfce330687d95251afacea8bbeccd18df53a727a57456e61ad716
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:1af24acc173d837c2804000818eaac3151bd64a9a073dac07a7256320723c59c
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:ba78f865f406e22f3b89f1737d1a46b7cee7a93ae082c9b057971a3a8e764dc4
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:c13afbc13034d61fea917c121b72cc4af1025f56caf0a3aa8ab40ee38c828fe7
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:cc9639a6be88d025b6ae085cc8a399a8f49d4e23d608520258dae207aedeb584
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:5ee6778ca93fe01b855feeaa749cc9ed82665ee89e99f7985ed3bf1141aedad5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.