-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 28 Mar 2026 13:42:24 +0530
Source: gst-plugins-base1.0
Built-For-Profiles: noudeb
Architecture: source
Version: 1.18.4-2+deb11u5
Distribution: bullseye-security
Urgency: high
Maintainer: Maintainers of GStreamer packages <gst-plugins-base1.0@packages.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
gst-plugins-base1.0 (1.18.4-2+deb11u5) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS Security team.
* Add patch to correctly check that enough RGB palette data is
available. (Fixes: CVE-2026-2921)
Checksums-Sha1:
25cfd937ab2feb2761d2402025c63da0a8a0b950 3742 gst-plugins-base1.0_1.18.4-2+deb11u5.dsc
879dc96692609ac079cd9d05b359882fb9cf7108 3169512 gst-plugins-base1.0_1.18.4.orig.tar.xz
dac3586c6664f663e5753d401b9709d222acb8bc 56064 gst-plugins-base1.0_1.18.4-2+deb11u5.debian.tar.xz
4fb4adca241697c01596b5318ba87420f0f42fa4 10662 gst-plugins-base1.0_1.18.4-2+deb11u5_source.buildinfo
Checksums-Sha256:
0c3ecccf95aaee32f10c0b101234fead00ecad9a535cb924efa98222f0480eea 3742 gst-plugins-base1.0_1.18.4-2+deb11u5.dsc
29e53229a84d01d722f6f6db13087231cdf6113dd85c25746b9b58c3d68e8323 3169512 gst-plugins-base1.0_1.18.4.orig.tar.xz
2247ee3c95f7bcacba6d40dc0dcc9aa1b8f83fe707d5aae3cf804e03db618262 56064 gst-plugins-base1.0_1.18.4-2+deb11u5.debian.tar.xz
aceff081e6ad774afe2eb3f2714051abf3b31b3047ce1a714eb467afaaddbd41 10662 gst-plugins-base1.0_1.18.4-2+deb11u5_source.buildinfo
Files:
276462cdb28ab395ca4eb69b25ed643f 3742 libs optional gst-plugins-base1.0_1.18.4-2+deb11u5.dsc
523336ed6938b8b1004847cbbd5e31cb 3169512 libs optional gst-plugins-base1.0_1.18.4.orig.tar.xz
ca0ec0efc15b5ff2e5d3e896dc246dc7 56064 libs optional gst-plugins-base1.0_1.18.4-2+deb11u5.debian.tar.xz
6c2ee74e8e5ebfef2f0d2c9c8769c48c 10662 libs optional gst-plugins-base1.0_1.18.4-2+deb11u5_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmnIMP0THHV0a2Fyc2hA
ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlrE0EACdZXAYKB64S4TRkiHqJrCWO5HUUGqN
vsI+nygNf0uMJbZWignbR4INjXecPyxtWkbkrrUe3MZ4OwWqpN9PX7wUuycRJZzB
/z3qVQdOUTMc2m1ZVWNRinMNazr8/NKxeXUu06VIiKC48M5GUIkNoy6oKmSTnKGw
cmKmA5GCP1euBZRnBT52EOfJYTi/yCs28l6xZDvlXGqafbedzX6epFWDub3yIGJZ
w1ZwEd6BjYzA7D+pBhLdjHekJbFOYn5RAF74cvuOb8AqPteXbZeUumWpPuVIP94L
z9YK+rt9beH87+5f63tJzcA5XAmvyL4Cs0DDtu4sEp8B9W2kCKYFffMasv/g9rkZ
1gFbAQUNWExBQbSwUHmBUblLTSUI6DDppOukEqCz2mWZrpAbbcpMy6FAVD9FHBRb
o7dac3j/rtZWhlylq8kirzeTdEwUkLeQdsQGQZNG9AyKsFhl8E0pkmMSusPK+7pB
3HNj1SQqWWKii9NzAmLgJxXWxZAqDgnCGBcp18nEnYiCM1p48pOePqb2uyAqgcAn
oAPgK6PlWNzQLih6o2r2VUG7mtWm59wJTZzYzxpmpVhKkdy4VU31uQ7EWoS5ke3l
dsDvIuMuMZ8p0flkUoxBEqbR5pc5gi5/GoC/3YVf1iMOitBi212sPr0oxQeO8Md1
HfjZ89OmYGfy0A==
=xY/V
-----END PGP SIGNATURE-----