summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Carlos Bentzen [Fri, 20 Feb 2026 16:40:24 +0000 (17:40 +0100)]
[PATCH] h266parser: Fix APS ID bounds check in APS parsing
Gbp-Pq: Name CVE-2026-3086.patch
Carlos Bentzen [Fri, 20 Feb 2026 12:34:50 +0000 (13:34 +0100)]
[PATCH] h266parser: Fix out of bounds write when parsing pic_timing SEI
Gbp-Pq: Name CVE-2026-3081.patch
Carlos Bentzen [Fri, 20 Feb 2026 16:10:04 +0000 (17:10 +0100)]
[PATCH] h266parser: Validate tile index bounds in picture partition parsing
Gbp-Pq: Name CVE-2026-3084.patch
He Junyan [Tue, 24 Jun 2025 13:40:26 +0000 (21:40 +0800)]
[PATCH 1/3] h266parser: Fix overflow when parsing subpic_level_info
1. non_subpic_layers_fraction, ref_level_idc and ref_level_fraction_minus1
fields should not have the GST_H266_MAX_SUBLAYERS limitation.
2. Should check max_sublayers_minus1, no more than GST_H266_MAX_SUBLAYERS-1
Fixes ZDI-CAN-27381, CVE-2025-6663
Closes: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/4503
Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/9295>
Gbp-Pq: Name 0001-h266parser-Fix-overflow-when-parsing-subpic_level_in.patch
Marc Leeman [Tue, 19 Dec 2023 10:59:24 +0000 (11:59 +0100)]
[PATCH] Skip failing tests
camerabin:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1244
netsim:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3000
Gbp-Pq: Name Skip-failing-tests.patch
Sebastian Dröge [Thu, 17 Jan 2019 15:02:43 +0000 (17:02 +0200)]
opencv data path
Gbp-Pq: Name 02_opencv-data-path.patch
Moritz Mühlenhoff [Mon, 30 Mar 2026 21:57:55 +0000 (23:57 +0200)]
gst-plugins-bad1.0 (1.26.2-3+deb13u1) trixie-security; urgency=medium
* CVE-2026-2923
* CVE-2026-3081
* CVE-2026-3082
* CVE-2026-3084
* CVE-2026-3086
[dgit import unpatched gst-plugins-bad1.0 1.26.2-3+deb13u1]
Moritz Mühlenhoff [Mon, 30 Mar 2026 21:57:55 +0000 (23:57 +0200)]
Import gst-plugins-bad1.0_1.26.2-3+deb13u1.debian.tar.xz
[dgit import tarball gst-plugins-bad1.0 1.26.2-3+deb13u1 gst-plugins-bad1.0_1.26.2-3+deb13u1.debian.tar.xz]
Marc Leeman [Fri, 30 May 2025 07:28:42 +0000 (09:28 +0200)]
Import gst-plugins-bad1.0_1.26.2.orig.tar.xz
[dgit import orig gst-plugins-bad1.0_1.26.2.orig.tar.xz]