{"id":"CLSA-2026-1790601978","summary":"gstreamer1-plugins-base: Fix of CVE-2026-18297","details":"- rebase onto Oracle 1.10.4-2.0.3.el7, which brings the vendor's own backports\n  as Patch1001-Patch1005\n- drop 3 of the 4 TuxCare CVE backports in favour of the vendor's copies\n- CVE-2024-47615: carry the two halves of our backport the vendor omits. Its\n  Patch1003 adds the bounds guards to gst_parse_vorbis_setup_packet() but\n  leaves the function declared void, so the five `return -1` statements it\n  writes are discarded and is_header_vorbis() still reports a malformed vorbis\n  setup packet as a valid header; and it guards only against underrunning the\n  ogg packet, where ours also stopped both advance loops from running past\n  op-\u003epacket + op-\u003ebytes\n- CVE-2024-47607: the vendor's Patch1001 bounds the write into the caller's\n  pos[64] but not the two memcpys in gst_opus_dec_negotiate(), which copy\n  n_channels entries - up to 255 from the Opus ID header - into the 64-entry\n  dec-\u003eopus_pos; take upstream 178ae5ac, which drops the positions above 64\n  channels\n- 1004-video-info-Sanity-check-the-frame-size-to.patch carries no CVE reference\n  in the vendor's commit message; it is taken as a hardening change, with\n  upstream 3d7a5666 on top so its overflow guard stops overflowing itself","modified":"2026-10-26T09:43:19.470924773Z","published":"2026-10-25T22:42:18Z","upstream":["CVE-2024-47607","CVE-2024-47615","CVE-2026-18297"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790601978.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18297"}],"affected":[{"package":{"name":"gstreamer1-plugins-base","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/gstreamer1-plugins-base?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-2.0.3.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790601978.json"}},{"package":{"name":"gstreamer1-plugins-base-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/gstreamer1-plugins-base-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-2.0.3.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790601978.json"}},{"package":{"name":"gstreamer1-plugins-base-devel-docs","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/gstreamer1-plugins-base-devel-docs?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-2.0.3.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790601978.json"}},{"package":{"name":"gstreamer1-plugins-base-tools","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/gstreamer1-plugins-base-tools?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-2.0.3.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790601978.json"}}],"schema_version":"1.9.0"}