Описание
ELSA-2026-47179: gstreamer1-plugins-bad-free security update (IMPORTANT)
[1.22.12-7.3]
- Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557
[1.22.12-7.2]
- Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
gstreamer1-plugins-bad-free
1.22.12-7.el9_8.3
gstreamer1-plugins-bad-free-devel
1.22.12-7.el9_8.3
gstreamer1-plugins-bad-free-libs
1.22.12-7.el9_8.3
Oracle Linux x86_64
gstreamer1-plugins-bad-free
1.22.12-7.el9_8.3
gstreamer1-plugins-bad-free-devel
1.22.12-7.el9_8.3
gstreamer1-plugins-bad-free-libs
1.22.12-7.el9_8.3
Связанные CVE
Связанные уязвимости
ELSA-2026-47180: gstreamer1-plugins-bad-free security update (IMPORTANT)
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc p ...