-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 24 Dec 2025 14:25:32 +0530
Source: gst-plugins-good1.0
Built-For-Profiles: noudeb
Architecture: source
Version: 1.18.4-2+deb11u4
Distribution: bullseye-security
Urgency: high
Maintainer: Maintainers of GStreamer packages <gst-plugins-good1.0@packages.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
gst-plugins-good1.0 (1.18.4-2+deb11u4) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Add patch to check if enough bytes are available for each
stsd entry. (Fixes: CVE-2025-47219)
* Add patch to use byte reader to parse mvhd box.
(Fixes: CVE-2025-47183)
Checksums-Sha1:
dc3f7042cc08060b009a01b718de6bf24613f8f2 3613 gst-plugins-good1.0_1.18.4-2+deb11u4.dsc
aaf8f2aa0bb58cad638b32d0d44a183ed7e7f8b0 3277572 gst-plugins-good1.0_1.18.4.orig.tar.xz
937b123f351b84abce24c847ab6e59bdb38dd2d0 53496 gst-plugins-good1.0_1.18.4-2+deb11u4.debian.tar.xz
5c622f67244e3edfe56e242c555dbdcf37ccd4fa 9427 gst-plugins-good1.0_1.18.4-2+deb11u4_source.buildinfo
Checksums-Sha256:
b389bc411e52a3b7ed1fdd13db8b9dbe6b7e3a649a449647a2be5105890847f5 3613 gst-plugins-good1.0_1.18.4-2+deb11u4.dsc
b6e50e3a9bbcd56ee6ec71c33aa8332cc9c926b0c1fae995aac8b3040ebe39b0 3277572 gst-plugins-good1.0_1.18.4.orig.tar.xz
91747bfba15d7b718d3a30114a4dfbd0de72a37cbd28127d2c4a72d24eadc5df 53496 gst-plugins-good1.0_1.18.4-2+deb11u4.debian.tar.xz
ad56d558a8f6d32422fc6ae91957a33026d85ffbcb54bb264948d123a91b0f6a 9427 gst-plugins-good1.0_1.18.4-2+deb11u4_source.buildinfo
Files:
e9562efdbd476346b34a97a2f282a984 3613 libs optional gst-plugins-good1.0_1.18.4-2+deb11u4.dsc
4ecf1ac5cd422d9c13fe05dbf5e3df26 3277572 libs optional gst-plugins-good1.0_1.18.4.orig.tar.xz
6385d2d88995c04ab05b4b1081c98744 53496 libs optional gst-plugins-good1.0_1.18.4-2+deb11u4.debian.tar.xz
9dfde51cd1a0bbf83207ffad0c9315f5 9427 libs optional gst-plugins-good1.0_1.18.4-2+deb11u4_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Wy/E
-----END PGP SIGNATURE-----
