Debian Patches
Status for gst-plugins-good1.0/1.22.0-5+deb12u4
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| CVE-2026-3083.patch | rtpqdm2depay: remove element There is no plausible reason anyone should need this element in 2026 seeing that this was a streaming format produced by Darwin Streaming Server ca 2009 which hasn't been in active use for well over a decade. It is a maintenance burden and a security liability and there's no good reason to keep it around. Fixes ZDI-CAN-28850, ZDI-CAN-28851, CVE-2026-3083, CVE-2026-3085, GST-SA-2026-0008. (cherry picked from commit 8349cdd35f85246e113b18e55fd11abf9cb248bf) |
Tim-Philipp Müller <tim@centricular.com> | no | 2026-02-08 | ||
| CVE-2026-17072.patch | matroskademux: Make sure enough data is available when parsing FLAC headers Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5206 (cherry picked from commit f93d7f5081236d5ae3a277c68884611ca7fba7f3) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-07-14 | ||
| CVE-2026-18298-1.patch | gdkpixbufdec: Drop rank to NONE gdk-pixbuf is not mean to be used on untrusted inputs so let's not ask for problems here. For the common image formats we have specialized elements with higher ranks and for a proper replacement follow this issue: https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/issues/764 (cherry picked from commit b399811826a352da6d90a1fd6c230cfdbc1e7b56) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-06-19 | ||
| CVE-2026-18298-2.patch | gdkpixbufdec: Handle format and resolution changes correctly Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5121 (cherry picked from commit 96173accdbd4970c7b6aeb7d5c3890104c4bd263) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-06-19 | ||
| CVE-2026-18299-1.patch | rtpsbcdepay: Check for available data in the adapter before getting data Consider empty packets with the last flag as bad packets. Also reset buffers to NULL after giving away ownership of them to avoid returning an already freed buffer. Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5119 (cherry picked from commit d3abc9f5140a524c05e71153fb4584f970063be2) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-06-19 | ||
| CVE-2026-18299-2.patch | rtpsbcdepay: Check that enough data is available for the payload header (cherry picked from commit 223becb0e39d6178c215cb8a2b956686b701c314) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-06-19 | ||
| CVE-2026-18299-3.patch | rtpsbcdepay: Remove wrong variable shadowing `samples` is expected to be set in the outer scope at a later time. (cherry picked from commit 3745e22c706054822d9e25fa2b3cdfb83127e40c) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-06-19 | ||
| CVE-2026-39043.patch | matroskademux: Add missing parenthesis when calculating bz2 buffer sizes This fixes a heap buffer overflow. Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5009 (cherry picked from commit 6db6dd058ebc3607452311b7dc47b0359b40b293) |
Cameron O'Neal <tzusec@gmail.com> | no | 2026-04-01 | ||
| CVE-2026-39044-1.patch | wavparse: Use prepend+reverse instead of append when building the cues list append has quadratic behaviour and this can matter if there are a lot of cues. (cherry picked from commit 0d819ceb654b06bbdd54381da5363c16751758a2) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-04-01 | ||
| CVE-2026-39044-2.patch | wavparse: Fix integer overflow when checking available buffer size for reading cues See https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5009 (cherry picked from commit 35a905a92f4cfc85941c6c820009ac9219f755b2) |
Cameron O'Neal <tzusec@gmail.com> | no | 2026-04-01 | ||
| CVE-2026-73433-1.patch | avidemux: Make sure enough data is available when parsing FUJIFILM strd Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5213 (cherry picked from commit e7532e5fe967f83c865bea3bbbf363a6d80884a0) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-07-14 | ||
| CVE-2026-73433-2.patch | avidemux: Don't modify read-only mapped buffer data And improve const-correctness in many places. (cherry picked from commit 6caf1b70cebdcd0fc0bbeb4ba626a5e60c1004a4) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-07-14 | ||
| CVE-2026-73433-3.patch | avidemux: Check that at least 1 byte is available before dereferencing tag pointer (cherry picked from commit 91a9ba7d13ebd5ca4b994e27bb86d900590498e5) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-07-14 | ||
| CVE-2026-73433-4.patch | avidemux: Use correct divisor for calculating available number of vprp field infos Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5213 (cherry picked from commit 178ce3841f47c14d2acd7fbca153b738eddc488e) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-07-14 | ||
| CVE-2026-73433-5.patch | avidemux: Avoid integer overflow in bounds checks when parsing the index (cherry picked from commit 9ea9ae4837efc4b105438c4e6c10c2ab2be1b270) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-07-14 | ||
| CVE-2026-73433-6.patch | avidemux: Don't read a subindex with too many items (cherry picked from commit c429d2a33496b54b8e6c00dbf1fdc4e3f52d8481) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-07-14 | ||
| CVE-2026-88914-1.patch | qtdemux: Ensure enough data is available for reading closed caption boxes Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5235 (cherry picked from commit a2a14d1b23d4a74d388f43745f000ea4999bf1d3) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-08-07 | ||
| CVE-2026-88914-2.patch | qtdemux: Don't try splitting CEA608 samples without known framerate Splitting them would lead to invalid sized buffers and divisions by zero for the timestamp calculations. (cherry picked from commit c297f67b20d6284e58ebb2bcd61a1a3ffa0eedab) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-08-07 | ||
| CVE-2026-53705-1.patch | wavpackdec: Avoid integer overflow when calculating output buffer size Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5069 (cherry picked from commit ed09b692755e251e730f35126ff6eab27cb8edc5) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-06-05 | ||
| CVE-2026-53705-2.patch | wavpackdec: Use correctly-sized variable types (cherry picked from commit e9ded43316bfe6c381a17f971c7097421a4ae201) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-06-05 | ||
| CVE-2026-53705-3.patch | wavpackdec: Avoid integer overflow when checking input buffer size (cherry picked from commit 9326c636a22a678952a6cae6518465d35d441a87) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-06-05 | ||
| CVE-2026-53705-4.patch | wavpackdec: Unmap input buffer directly after decoding In case of decoder errors we would otherwise unmap the buffer after finish_frame(), which potentially invalidates the input buffer already. (cherry picked from commit f7cb3e0288627cce919e656584b852ac8605c922) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-06-05 | ||
| Bonus-CVE-2026-85150.patch | rtspsrc: Fix handling of missing control attribute with multiple media sections Issue reported and fix suggested by Jeremiah Morrill. https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5270 (cherry picked from commit 000006fcfcc89d3ed7b9a84d5363f550e094cbd3) |
Sanchayan Maity <sanchayan@centricular.com> | no | 2026-09-14 | ||
| Skip-failing-tests.patch | Skip failing tests The rtpvp8 test is new for 1.20 but fails. The rtpstorage test isn't new but started failing with 1.20 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1220 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1221 |
Jeremy Bicha <jeremy.bicha@canonical.com> | no | 2022-05-16 | ||
| GST-2023-0001.patch | GST-2023-0001 | Maintainers of GStreamer packages | no | 2026-10-15 | ||
| qtdemux-Avoid-integer-overflow-when-parsing-Theora-e.patch | qtdemux: Avoid integer overflow when parsing Theora extension Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-166 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3851 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2d7a11f5e6be5c323b2fed8158bc9df37752e495 | 2024-09-26 | |
| CVE-2025-47183-0.patch | qtdemux: Use mvhd transform matrix and support for flipping The mvhd matrix is now combined with the tkhd matrix. The combined matrix is then checked if it matches one of the standard values for GST_TAG_IMAGE_ORIENTATION. This check now includes matrices with flipping. Fixes #4064 (cherry picked from commit c4d0f4bbd9a8e97f119a4528b9f4662a6b80922c) |
Jochen Henneberg <jochen@centricular.com> | no | 2024-12-10 | ||
| jpegdec-Directly-error-out-on-negotiation-failures.patch | jpegdec: Directly error out on negotiation failures Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-247 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3862 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8b1c866e93749fd42d1908ec77a4f339343acbb2 | 2024-09-30 | |
| CVE-2025-47183-1.patch | qtdemux: Use byte reader to parse mvhd box This avoids OOB reads. Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/4394 Fixes CVE-2025-47183 (cherry picked from commit d76cae74dad89994bfcdad83da6ef1ad69074332) |
Sebastian Dröge <sebastian@centricular.com> | no | 2025-04-29 | ||
| CVE-2026-1940-1.patch | wavparse: Remove pointless duplicated GST_ROUND_UP_2() (cherry picked from commit d785c115c8ca9e68b165440933d307c02c69ee53) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-01-12 | ||
| CVE-2026-1940-2.patch | wavparse: Use unsigned integers for data sizes (cherry picked from commit 961586ce317c6cd9ddb28eec2cabd243418a662a) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-01-12 | ||
| gdkpixbufdec-Check-if-initializing-the-video-info-ac.patch | gdkpixbufdec: Check if initializing the video info actually succeeded Otherwise a 0-byte buffer would be allocated, which gives NULL memory when mapped. Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-118 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3876 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/5106dc94fb9b2d8bd0db547e2c325244b7c1f32c | 2024-10-02 | |
| wavparse-Check-for-short-reads-when-parsing-headers-.patch | wavparse: Check for short reads when parsing headers in pull mode And also return the actual flow return to the caller instead of always returning GST_FLOW_ERROR. Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-258, GHSL-2024-260 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3886 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3888 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c627f3a28bc792580f9a9ebcbb309b2256e4a895 | 2024-10-04 | |
| wavparse-Make-sure-enough-data-for-the-tag-list-tag-.patch | wavparse: Make sure enough data for the tag list tag is available before parsing Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-258 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3886 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f5fa594695e5a9b347e88719b487d9779f80926a | 2024-10-04 | |
| wavparse-Fix-parsing-of-acid-chunk.patch | wavparse: Fix parsing of acid chunk Simply casting the bytes to a struct can lead to crashes because of unaligned reads, and is also missing the endianness swapping that is necessary on big endian architectures. |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8911020ae3da65b224dd1c87de3437a532e9efa4 | 2024-10-04 | |
| wavparse-Check-that-at-least-4-bytes-are-available-b.patch | wavparse: Check that at least 4 bytes are available before parsing cue chunks | Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8f04506d7e68a653c8d7c5e2fb0a19ef93c6ea35 | 2024-10-04 | |
| wavparse-Check-that-at-least-32-bytes-are-available-.patch | wavparse: Check that at least 32 bytes are available before parsing smpl chunks Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-259 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3887 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/3d2a5841d777dd95afdea30ad134f96c876f84ab | 2024-10-04 | |
| wavparse-Fix-clipping-of-size-to-the-file-size.patch | wavparse: Fix clipping of size to the file size The size does not include the 8 bytes tag and length, so an additional 8 bytes must be removed here. 8 bytes are always available at this point because otherwise the parsing of the tag and length right above would've failed. Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-260 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3888 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/34cfd6b82c3ae6772b9b43b3f6243f85cea35c38 | 2024-10-04 | |
| wavparse-Check-size-before-reading-ds64-chunk.patch | wavparse: Check size before reading ds64 chunk Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-261 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3889 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ba8476d3448eeaf016345ae0697b8447c0f62636 | 2024-10-04 | |
| avisubtitle-Fix-size-checks-and-avoid-overflows-when.patch | avisubtitle: Fix size checks and avoid overflows when checking sizes Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-262 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3890 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/98c2175d255bd2459d7645ac6aee50be5cb57fe3 | 2024-10-04 | |
| matroskademux-Only-unmap-GstMapInfo-in-WavPack-heade.patch | matroskademux: Only unmap GstMapInfo in WavPack header extraction error paths if previously mapped Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-197 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3863 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/a16851ebf34a9f9be4285b2c0d75fe7844354efe | 2024-09-30 | |
| matroskademux-Fix-off-by-one-when-parsing-multi-chan.patch | matroskademux: Fix off-by-one when parsing multi-channel WavPack | Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/816a970a042c96669da25b7a046f0ab8311a78d9 | 2024-09-30 | |
| matroskademux-Check-for-big-enough-WavPack-codec-pri.patch | matroskademux: Check for big enough WavPack codec private data before accessing it Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-250 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3866 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eec4043430d30956ad4aea02a7b67a5758d99f11 | 2024-09-30 | |
| matroskademux-Don-t-take-data-out-of-an-empty-adapte.patch | matroskademux: Don't take data out of an empty adapter when processing WavPack frames Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-249 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3865 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2dcb071d4995032ed9242bb863189939b211f5cc | 2024-09-30 | |
| matroskademux-Skip-over-laces-directly-when-postproc.patch | matroskademux: Skip over laces directly when postprocessing the frame fails Otherwise NULL buffers might be handled afterwards. Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-249 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3865 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e5ffa9c9778454457665c1ee1c5bcc17ed3537ac | 2024-09-30 | |
| matroskademux-Skip-over-zero-sized-Xiph-stream-heade.patch | matroskademux: Skip over zero-sized Xiph stream headers Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-251 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3867 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/09803e225de515c8881fd13ed464c23771a4d1a6 | 2024-09-30 | |
| matroskademux-Put-a-copy-of-the-codec-data-into-the-.patch | matroskademux: Put a copy of the codec data into the A_MS/ACM caps The original codec data buffer is owned by matroskademux and does not necessarily live as long as the caps. Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-280 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3894 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2c9abe111bd9122967784ef2b55c9017dc2682b8 | 2024-10-09 | |
| qtdemux-Fix-integer-overflow-when-allocating-the-sam.patch | qtdemux: Fix integer overflow when allocating the samples table for fragmented MP4 This can lead to out of bounds writes and NULL pointer dereferences. Fixes GHSL-2024-094, GHSL-2024-237, GHSL-2024-241 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3839 |
Antonio Morales <antonio-morales@github.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c3a2af94c652513ac1b1858295688ac88c5cc737 | 2024-09-26 | |
| qtdemux-Fix-debug-output-during-trun-parsing.patch | qtdemux: Fix debug output during trun parsing Various integers are unsigned so print them as such. Also print the actual allocation size if allocation fails, not only parts of it. |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/812f175c580a2e702581859fd481c8f51d633508 | 2024-09-26 | |
| qtdemux-Don-t-iterate-over-all-trun-entries-if-none-.patch | qtdemux: Don't iterate over all trun entries if none of the flags are set Nothing would be printed anyway. |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eb7f9331c2294bc28a549b79c9f931c3e6c6bc44 | 2024-09-26 | |
| qtdemux-Check-sizes-of-stsc-stco-stts-before-trying-.patch | qtdemux: Check sizes of stsc/stco/stts before trying to merge entries Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-246 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3854 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1def2965d8da8cc74ab0036d7f8d59e81e676cad | 2024-09-27 | |
| CVE-2026-1940-3.patch | wavparse: Use GST_ROUND_UP_2() in two more places instead of a manual implementation (cherry picked from commit 20749ec7baa3e30376f6dde3029c531e2d396a27) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-01-12 | ||
| qtdemux-Make-sure-only-an-even-number-of-bytes-is-pr.patch | qtdemux: Make sure only an even number of bytes is processed when handling CEA608 data An odd number of bytes would lead to out of bound reads and writes, and doesn't make any sense as CEA608 comes in byte pairs. Strip off any leftover bytes and assume everything before that is valid. Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-195 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3841 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/314945426c7105ad90f44a188037bc43bb3b0300 | 2024-09-26 | |
| CVE-2026-1940-4.patch | wavparse: Define maximum chunk size in a single place (cherry picked from commit ff79ffc4488acbc30e5af78195fe2d321bed991b) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-01-12 | ||
| qtdemux-Make-sure-enough-data-is-available-before-re.patch | qtdemux: Make sure enough data is available before reading wave header node Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-236 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3843 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8ef08a7a41da987aa630082df355ea651aa09132 | 2024-09-26 | |
| qtdemux-Fix-length-checks-and-offsets-in-stsd-entry-.patch | qtdemux: Fix length checks and offsets in stsd entry parsing Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-242 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3845 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/fe9d5d37234aca04fef7248184177168905a7a69 | 2024-09-27 | |
| qtdemux-Fix-error-handling-when-parsing-cenc-sample-.patch | qtdemux: Fix error handling when parsing cenc sample groups fails Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-238, GHSL-2024-239, GHSL-2024-240 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3846 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8e884e4e31649a9fc19095d6501a1143b074aba8 | 2024-09-27 | |
| qtdemux-Make-sure-there-are-enough-offsets-to-read-w.patch | qtdemux: Make sure there are enough offsets to read when parsing samples While this specific case is also caught when initializing co_chunk, the error is ignored in various places and calling into the function would lead to out of bounds reads if the error message doesn't cause the pipeline to be shut down fast enough. To avoid this, no matter what, make sure enough offsets are available when parsing them. While this is potentially slower, the same is already done in the non-chunks_are_samples case. Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-245 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3847 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7f8f280555201f51898727919831259e68271868 | 2024-09-27 | |
| CVE-2026-1940-5.patch | wavparse: Avoid integer overflow and out-of-bounds read when parsing adtl chunks Fixes GST-SA-2026-0001, CVE-2026-1940. Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/4854 (cherry picked from commit 62d390f499a21ef8b42f8b7a51300373fcebfee3) |
Sebastian Dröge <sebastian@centricular.com> | no | 2026-01-12 | ||
| qtdemux-Actually-handle-errors-returns-from-various-.patch | qtdemux: Actually handle errors returns from various functions instead of ignoring them Ignoring them might cause the element to continue as if all is fine despite the internal state being inconsistent. This can lead to all kinds of follow-up issues, including memory safety issues. Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-245 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3847 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/83056792a8bd179d7e4ba4b3d234ab75205e47d2 | 2024-09-27 | |
| qtdemux-Check-for-invalid-atom-length-when-extractin.patch | qtdemux: Check for invalid atom length when extracting Closed Caption data Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-243 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3849 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f31dbbc1bcc00096ab863ee6aaecad493c71c333 | 2024-09-26 | |
| qtdemux-Add-size-check-for-parsing-SMI-SEQH-atom.patch | qtdemux: Add size check for parsing SMI / SEQH atom Thanks to Antonio Morales for finding and reporting the issue. Fixes GHSL-2024-244 Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3853 |
Sebastian Dröge <sebastian@centricular.com> | no | https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8603e78a07a307139fd45ee11e7623de01494bf3 | 2024-09-27 | |
| CVE-2025-47219.patch | qtdemux: Check if enough bytes are available for each stsd entry There must be at least 8 bytes for the length / fourcc of each entry. After reading those, the length is already validated against the remaining available bytes. Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/4407 Fixes CVE-2025-47219 |
Sebastian Dröge <sebastian@centricular.com> | no | 2025-05-03 |
All known versions for source package 'gst-plugins-good1.0'
- 1.29.2-1 (experimental)
- 1.28.8-1 (sid, forky)
- 1.26.2-1+deb13u2 (trixie, trixie-security)
- 1.22.0-5+deb12u4 (bookworm-security)
- 1.22.0-5+deb12u3 (bookworm)