Summary
[1.22.12-7.3]
- Fix incorrect bytes-per-pixel handling in rfbsrc plugin
(CVE-2026-59691)
Resolves: RHEL-193557
[1.22.12-7.2]
- Fix buffer overflow in DTLS connection peer certificate
subject DN handling (CVE-2026-59692)
Resolves: RHEL-193572
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | gstreamer1-plugins-bad-free | 0:1.22.12-7.el9_8.3 |
| Oracle Linux · 9 | gstreamer1-plugins-bad-free-devel | 0:1.22.12-7.el9_8.3 |
| Oracle Linux · 9 | gstreamer1-plugins-bad-free-libs | 0:1.22.12-7.el9_8.3 |
Vulnerabilities 2
-
High 7.5
Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback
A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker…
-
High 7.1
Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel value…