-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 29 Mar 2026 18:09:02 +0530
Source: gst-plugins-ugly1.0
Built-For-Profiles: noudeb
Architecture: source
Version: 1.18.4-2+deb11u2
Distribution: bullseye-security
Urgency: high
Maintainer: Maintainers of GStreamer packages <gst-plugins-ugly1.0@packages.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
gst-plugins-ugly1.0 (1.18.4-2+deb11u2) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Add patch to check if new video fragment overflows the fragment
storage before storing it. (Fixes: CVE-2026-2922)
* Add patch to error out on files with more than 32 streams.
(Fixes: CVE-2026-2920)
Checksums-Sha1:
49e30239e0f7de726b9e7aebfbc549449ec6d001 2656 gst-plugins-ugly1.0_1.18.4-2+deb11u2.dsc
50ad07fe636d866afb0fb8fcee52f19c7ef7f08e 509920 gst-plugins-ugly1.0_1.18.4.orig.tar.xz
9dd99fbca5d290eee46cdfaeb684fef7114d0973 24700 gst-plugins-ugly1.0_1.18.4-2+deb11u2.debian.tar.xz
3bd7ed321dacbd128f624cb5d39cb1ceae478acc 13134 gst-plugins-ugly1.0_1.18.4-2+deb11u2_source.buildinfo
Checksums-Sha256:
ab4a68bc64b649f5dd1f4115595b83d683b5ca57cb01df898be7d693a012ed21 2656 gst-plugins-ugly1.0_1.18.4-2+deb11u2.dsc
218df0ce0d31e8ca9cdeb01a3b0c573172cc9c21bb3d41811c7820145623d13c 509920 gst-plugins-ugly1.0_1.18.4.orig.tar.xz
dda504be4fc789827e4a910eabd4cdb6db70bfa02c1eaa99a8a5d545eb409226 24700 gst-plugins-ugly1.0_1.18.4-2+deb11u2.debian.tar.xz
ce112c97608ac6214c7b59790d73c7af1813160ba31ade763b040148150f5bf3 13134 gst-plugins-ugly1.0_1.18.4-2+deb11u2_source.buildinfo
Files:
c9b20c8184d8c3ede202b7ad62e77a7a 2656 libs optional gst-plugins-ugly1.0_1.18.4-2+deb11u2.dsc
e5fbd9a8a05632cfb9d0afd0ad856d52 509920 libs optional gst-plugins-ugly1.0_1.18.4.orig.tar.xz
6bf7e33a11658eec3f67ce3bb9c14702 24700 libs optional gst-plugins-ugly1.0_1.18.4-2+deb11u2.debian.tar.xz
b632b4e3680aa6b7d9d305fa46edf76c 13134 libs optional gst-plugins-ugly1.0_1.18.4-2+deb11u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=GhLQ
-----END PGP SIGNATURE-----
