Release date:
2026-09-23 14:58:27 UTC
Description:
- CVE-2026-59691: rfbsrc: write pixels at the negotiated bytes-per-pixel in
rfb_decoder_fill_rectangle and read colour values through the new
rfb_decoder_get_pixel helper, instead of always using 32-bit accesses
- CVE-2026-59692: dtlsconnection: heap-allocate the peer certificate subject DN
buffer from the X509_NAME_print_ex length in openssl_verify_callback, instead
of printing into a fixed 2048-byte stack buffer
Updated packages:
-
gstreamer1-plugins-bad-free-1.22.12-4.el9_6.tuxcare.els4.i686.rpm
sha:eb81b3e96363ccba3fca1f0d4b77ae83892d5976b67410e12c7ed90758988456
-
gstreamer1-plugins-bad-free-1.22.12-4.el9_6.tuxcare.els4.x86_64.rpm
sha:43c50dd73cf3ca7dd4436e476bf282712e4ed845de765858ae4763776cd2e2f9
-
gstreamer1-plugins-bad-free-devel-1.22.12-4.el9_6.tuxcare.els4.i686.rpm
sha:08ea33e362ba8051e39e54cffc3affe686952f1df697ed5c51fc7ee709350501
-
gstreamer1-plugins-bad-free-devel-1.22.12-4.el9_6.tuxcare.els4.x86_64.rpm
sha:85f845bd6c205f304626d845e3b238fb5cfcec2dbffa12e38404d610142f7003
-
gstreamer1-plugins-bad-free-libs-1.22.12-4.el9_6.tuxcare.els4.i686.rpm
sha:1d7b761ddb3f3724c117eadc2144be41db07e429d83d918aa517aba428c8f180
-
gstreamer1-plugins-bad-free-libs-1.22.12-4.el9_6.tuxcare.els4.x86_64.rpm
sha:a4efb474a14e6c171bcb97dc4532329dcde1c3059b5795de1523c852b6b3f16f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
