[ubuntu/resolute-updates] gst-plugins-bad1.0 1.28.2-1ubuntu1.2 (Accepted)

[Ubuntu Archive Robot]

gst-plugins-bad1.0 (1.28.2-1ubuntu1.2) resolute-security; urgency=medium

  * SECURITY UPDATE: heap out-of-bounds write
    - debian/patches/CVE-2026-19387_1.patch: fail negotiation if
      block_align is not provided in gst/adpcmdec/adpcmdec.c.
    - debian/patches/CVE-2026-19387_2.patch: fix IMA ADPCM input size
      check to account for the number of channels in
      gst/adpcmdec/adpcmdec.c.
    - CVE-2026-19387

Date: 2026-09-30 09:31:13.943709+00:00
Changed-By: Nick Galanis <nick.galanis at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/gst-plugins-bad1.0/1.28.2-1ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.