Summary
[1.10.4-2.0.5]
- Fix CVE-2026-53705 [Orabug: 39822536]
[1.10.4-2.0.3]
- Security update for CVE-2026-3083 CVE-2026-3085 [Orabug: 39199326]
[1.10.4-2.0.1]
- Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613 and
- CVE-2024-47607 [Orabug: 37407070]
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | gstreamer1-plugins-good | 0:1.10.4-2.0.5.el7_9 |
Vulnerabilities 1
-
High 7.6
Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow
A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in gst_wavpack_dec_handle_frame() causes a very smal…