openSUSE-SU-2026:21204-1

Details

Description of the patch:

This update for gstreamer-plugins-bad fixes the following issue

CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (bsc#1268401).

Affected Packages(46 packages)

gstreamer-plugins-bad

openSUSE Leap 16.0

Fixed in:

1.26.7-160000.2.1

gstreamer-plugins-bad-chromaprint

openSUSE Leap 16.0

Fixed in:

1.26.7-160000.2.1

gstreamer-plugins-bad-devel

openSUSE Leap 16.0

Fixed in:

1.26.7-160000.2.1

gstreamer-plugins-bad-lang

openSUSE Leap 16.0

Fixed in:

1.26.7-160000.2.1

gstreamer-transcoder

openSUSE Leap 16.0

Fixed in:

1.26.7-160000.2.1

gstreamer-transcoder-devel

openSUSE Leap 16.0

Fixed in:

1.26.7-160000.2.1

libgstadaptivedemux-1_0-0

openSUSE Leap 16.0

Fixed in:

1.26.7-160000.2.1

libgstanalytics-1_0-0

openSUSE Leap 16.0

Fixed in:

1.26.7-160000.2.1

libgstbadaudio-1_0-0

openSUSE Leap 16.0

Fixed in:

1.26.7-160000.2.1

libgstbasecamerabinsrc-1_0-0

openSUSE Leap 16.0

Fixed in:

1.26.7-160000.2.1

References

ADVISORY

https://bugzilla.suse.com/1268401

ADVISORY

https://www.suse.com/security/cve/CVE-2026-52719/

WEB

https://www.suse.com/support/security/rating/