[CLSA-2026:1776438517] gstreamer1-plugins-bad-free: Fix of CVE-2026-3082
Type:
security
Severity:
('Important', ['ELSCVE-86651'])
Release date:
2026-04-17 15:08:42 UTC
Description:
- CVE-2026-3082: fix heap-based buffer overflow in JPEG parser READ_BYTES macro by adding sizeof(buf) bounds check
Updated packages:
  • gstreamer1-plugins-bad-free-1.18.4-6.el9_2.tuxcare.els5.i686.rpm
    sha:cd467742dd5651314c69142a78b88a60c0b2997e7dabf43be43db1f6e58eb875
  • gstreamer1-plugins-bad-free-1.18.4-6.el9_2.tuxcare.els5.x86_64.rpm
    sha:d640dc8264c10bfa2d46bbc7f4466657393dc29c052f88b6cba6c2fee7be7a60
  • gstreamer1-plugins-bad-free-devel-1.18.4-6.el9_2.tuxcare.els5.i686.rpm
    sha:c52ed8dccd41975e2d44f9670e127253c8302275d000682f8e70de9e6b704d7e
  • gstreamer1-plugins-bad-free-devel-1.18.4-6.el9_2.tuxcare.els5.x86_64.rpm
    sha:1d8566f66be368188a364821968069f09ce18e9d76d6899c3843761e29e3041a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.