Summary
[0.10.23-22]
- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400838
[0.10.23-21]
- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400838
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | gstreamer-plugins-bad-free | 0:0.10.23-22.el7_3 |
| Oracle Linux · 7 | gstreamer-plugins-bad-free-devel | 0:0.10.23-22.el7_3 |
| Oracle Linux · 7 | gstreamer-plugins-bad-free-devel-docs | 0:0.10.23-22.el7_3 |
Vulnerabilities 3
-
Unscored —
Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via …
-
Unscored —
The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bou…
-
Unscored —
Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have uns…