[CLSA-2026:1792600733] gstreamer1-plugins-good: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 17:26:04 UTC
Description:
- CVE-2026-46469: avoid division by zero in qtdemux_parse_trak when zero audio channels are signalled - CVE-2026-46470: avoid division by zero in qtdemux_audio_caps when zero audio channels are signalled for raw LPCM - CVE-2026-1940: fix out-of-bounds read in gst_wavparse_adtl_chunk on odd-sized adtl sub-chunks
Updated packages:
  • gstreamer1-plugins-good-1.22.12-7.el9_8.8.tuxcare.els2.aarch64.rpm
    sha:e861e8087bfc9c31c805736f195487aeb4d6c4219cc67dbbf81b5d63b95a7967
  • gstreamer1-plugins-good-1.22.12-7.el9_8.8.tuxcare.els2.i686.rpm
    sha:5c3982179ae64f0ebd5b6a99eea723b91568f36b44fca3630d24019837fcf062
  • gstreamer1-plugins-good-1.22.12-7.el9_8.8.tuxcare.els2.x86_64.rpm
    sha:e46bfef60879cc2bc66b266cb07cc16b9482532449848c5de1a8e4b00ffe8724
  • gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.tuxcare.els2.aarch64.rpm
    sha:cbb1db83514f0f09a3a7025d786e4426c241b7da7d0c64ee3f5ffe7fae3ad6b6
  • gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.tuxcare.els2.i686.rpm
    sha:a863078dede990b9823ebc884bd0b251464f1a1479adea6623cae1f592a30899
  • gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.tuxcare.els2.x86_64.rpm
    sha:d7d2fe971c81f04474642150b0981af2f58f19ba3fa73ab81b1020996ea58a83
  • gstreamer1-plugins-good-qt-1.22.12-7.el9_8.8.tuxcare.els2.aarch64.rpm
    sha:c218d7adeb0d909c1e4d7ac5bc882837c4b219a6488ca07c632db913a4306218
  • gstreamer1-plugins-good-qt-1.22.12-7.el9_8.8.tuxcare.els2.i686.rpm
    sha:e85e99a8b0ba75c360cbe8dec38191aa5cd6191b45fb985812e9b51cc236ff11
  • gstreamer1-plugins-good-qt-1.22.12-7.el9_8.8.tuxcare.els2.x86_64.rpm
    sha:3bcae33151c49e0c3e8c5d86c9d767485e0680a010050d0bd770fedb91d43776
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.