[CLSA-2026:1793015641] gstreamer1-plugins-bad-free: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-26 11:54:13 UTC
Description:
- CVE-2026-19387: adpcmdec: fix heap out-of-bounds write when decoding multi-channel IMA ADPCM - CVE-2026-59691: rfbsrc: fix heap buffer overflow by using the decoder bytes per pixel when reading and filling rectangle colors
Updated packages:
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:7fdd807949b214b56901321670b390f6176c1a846896d9c8bcc22e5a317c7ccd
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:dfba395dd216171a788439ddbc24a807135e6d958a36bdd24b2b8f799fc8254e
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:4660eb67686c67a720c0fa2866a8164f2643147420c02c009049382878f0f759
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:d74ed9a83ca0fb49a884215cb156354552ceebfce4de625b688e1a12114f9b1e
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els3.i686.rpm
    sha:84982789dc1946acc1800b7aa7088fc3ad195d7f9257ee7224dc94fefd21ede7
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els3.x86_64.rpm
    sha:b44ba25b499d47f90f9f71b05ab382b34980b95418ef520eb911a506d116c2f2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.