Release date:
2026-09-24 13:16:46 UTC
Description:
- CVE-2026-18297: opusdec: don't use any channel positions for more than 64
channels, preventing out-of-bounds writes to the fixed-size 64-element
channel position array in gst_opus_dec_negotiate()
- CVE-2026-85150: rtsp/message: use the end of the item after skipping
whitespace when parsing an auth credential value, preventing a negative
length being passed to g_strndup() in parse_auth_credentials()
Updated packages:
-
gstreamer1-plugins-base-1.22.12-4.el9.tuxcare.els2.aarch64.rpm
sha:9fa1c30a5cf33a623d974a4154ed84aa11ff2b2bd294c69b046173b9c42ee7e3
-
gstreamer1-plugins-base-1.22.12-4.el9.tuxcare.els2.i686.rpm
sha:e6523007f14315239eec1aa85846cec2c3ca00ee5e45f09e262d20b27324f785
-
gstreamer1-plugins-base-1.22.12-4.el9.tuxcare.els2.x86_64.rpm
sha:2e4b804a05422c592c3d0f768d45fda004d0ebeccd91842cb8c9979b91071347
-
gstreamer1-plugins-base-devel-1.22.12-4.el9.tuxcare.els2.aarch64.rpm
sha:052e145d4ba28a568fa1da7c0e8d7cf92765455cee6c8f9f645b88fd0e52e873
-
gstreamer1-plugins-base-devel-1.22.12-4.el9.tuxcare.els2.i686.rpm
sha:0bf6c0de65c1f694839dbd3f8c4839c896596932b461c7c156ccafe777b9c7a6
-
gstreamer1-plugins-base-devel-1.22.12-4.el9.tuxcare.els2.x86_64.rpm
sha:c437440927fb2ecd672a32fd91b2f9eea6ddd85684321c771a281969c023fb46
-
gstreamer1-plugins-base-tools-1.22.12-4.el9.tuxcare.els2.aarch64.rpm
sha:ef0b17587455f7eb166d8fd22d53c8da15a1eeb02363553171dfb38d0d6bfb58
-
gstreamer1-plugins-base-tools-1.22.12-4.el9.tuxcare.els2.i686.rpm
sha:8e2771730776dadcc4ea171a9f154cd687311910d1281cd059ca4a87be8ab360
-
gstreamer1-plugins-base-tools-1.22.12-4.el9.tuxcare.els2.x86_64.rpm
sha:db72944d8a8ba4598e5a3cc86259cb725afb5fd0391f7fc792b0b81d78e3a9d3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
