Summary
[1.16.1-8.0.1]
- Update origin URL [Orabug: 36209826]
[1.16.1-8]
- CVE-2026-125712 gstreamer1-plugins-base: gst-plugins-base: Missing bounds checks in RTCP SDES packet parsing
Resolves: RHEL-304269
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | gstreamer1-plugins-base | 0:1.16.1-8.0.1.el8_10 |
| Oracle Linux · 8 | gstreamer1-plugins-base-devel | 0:1.16.1-8.0.1.el8_10 |
Vulnerabilities 1
-
High 7.5
Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing
A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiv…