Summary
[1.10.4-4.0.7]
- Backport fix for CVE-2026-19387 [Orabug: 40030729]
[1.10.4-4.0.5]
- Security update for CVE-2026-59691 CVE-2026-59692 [Orabug: 39878399]
[1.10.4-4.0.3]
- Security update for CVE-2026-52720 CVE-2026-52722 [Orabug: 39799399]
[1.10.4-4.0.1]
- Security update for CVE-2026-3082 [Orabug: 39199326]
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | gstreamer1-plugins-bad-free | 0:1.10.4-4.0.7.el7_9 |
| Oracle Linux · 7 | gstreamer1-plugins-bad-free-devel | 0:1.10.4-4.0.7.el7_9 |
| Oracle Linux · 7 | gstreamer1-plugins-bad-free-gtk | 0:1.10.4-4.0.7.el7_9 |
Vulnerabilities 1
-
High 7.6
Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes b…