[CLSA-2026:1787222051] gstreamer1-plugins-bad-free: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-22 10:36:24 UTC
Description:
- CVE-2026-52720: fix heap buffer overflow in librfb by clipping framebuffer update rectangles to the framebuffer size - CVE-2026-52722: fix signed integer overflow in VMnc decoder cursor payload size arithmetic, preventing out-of-bounds reads
Updated packages:
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els1.i686.rpm
    sha:4332e01c4f3f2b4823ac4da105338583d87211c8967a2e3454b231f247f81d52
  • gstreamer1-plugins-bad-free-1.10.4-4.el7_9.tuxcare.els1.x86_64.rpm
    sha:67b0932957a5aa1e99b46e4fdb788487368eb6ca5ecd35a04c2ee0c6e55a592d
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els1.i686.rpm
    sha:bfe4236a6942be07d3da2ecf273e5356c5e7bb9c9cae0083c0103de124becf1b
  • gstreamer1-plugins-bad-free-devel-1.10.4-4.el7_9.tuxcare.els1.x86_64.rpm
    sha:38120289b54e36cdc66affc0dea80962dcd04f03a106f7005ee6394d577accdf
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els1.i686.rpm
    sha:19c78d49f6c5b8d7f185f895cb9599010c2d1c86fcd3e09639391754aae0328e
  • gstreamer1-plugins-bad-free-gtk-1.10.4-4.el7_9.tuxcare.els1.x86_64.rpm
    sha:d750784c068b78000f6f586e401f2843cd391c1b2fda27b161ab194bdafa408c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.