Summary
[1.16.1-9.0.1.el8_10.1]
- Update origin URL [Orabug: 36209826]
[1.16.1-9.1]
- Fix buffer overflow in DTLS certificate subject DN handling
(CVE-2026-59692)
Resolves: RHEL-193570
[1.16.1-9]
- Fix rfbsrc/librfb vulnerabilities in rfbdecoder.c (CVE-2026-59691)
Resolves: RHEL-193559
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | gstreamer1-plugins-bad-free | 0:1.16.1-9.0.1.el8_10.1 |
| Oracle Linux · 8 | gstreamer1-plugins-bad-free-devel | 0:1.16.1-9.0.1.el8_10.1 |
Vulnerabilities 2
-
High 7.5
Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback
A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker…
-
High 7.1
Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel value…