From 76daa99a7b4363ca8bd8bbc8223693e4e7e34033 Mon Sep 17 00:00:00 2001 From: wangshuo Date: Mon, 21 Apr 2025 18:05:36 +0800 Subject: [PATCH] Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed (cherry picked from commit 77ba8c995d89d039bf04df866594c0a0395b8bdc) --- ...emux-Initialize-track-context-out-parameter.patch | 0 ...emux-Fix-extraction-of-multichannel-WavPack.patch | 0 gstreamer1-plugins-good.spec | 12 +++++++++--- 3 files changed, 9 insertions(+), 3 deletions(-) rename backport-CVE-2021-3498.patch => backport-CVE-2021-3497-matroskademux-Initialize-track-context-out-parameter.patch (100%) rename backport-CVE-2021-3497.patch => backport-CVE-2021-3498-matroskademux-Fix-extraction-of-multichannel-WavPack.patch (100%) diff --git a/backport-CVE-2021-3498.patch b/backport-CVE-2021-3497-matroskademux-Initialize-track-context-out-parameter.patch similarity index 100% rename from backport-CVE-2021-3498.patch rename to backport-CVE-2021-3497-matroskademux-Initialize-track-context-out-parameter.patch diff --git a/backport-CVE-2021-3497.patch b/backport-CVE-2021-3498-matroskademux-Fix-extraction-of-multichannel-WavPack.patch similarity index 100% rename from backport-CVE-2021-3497.patch rename to backport-CVE-2021-3498-matroskademux-Fix-extraction-of-multichannel-WavPack.patch diff --git a/gstreamer1-plugins-good.spec b/gstreamer1-plugins-good.spec index 7f46dac..4f0156a 100644 --- a/gstreamer1-plugins-good.spec +++ b/gstreamer1-plugins-good.spec @@ -3,15 +3,18 @@ Name: gstreamer1-plugins-good Version: 1.16.2 -Release: 8 +Release: 9 Summary: GStreamer plugins with good code and licensing License: LGPLv2+ URL: http://gstreamer.freedesktop.org/ Source0: http://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-good-%{version}.tar.xz Source1: gstreamer-good.appdata.xml -Patch6000: backport-CVE-2021-3497.patch -Patch6001: backport-CVE-2021-3498.patch +#https://gitlab.freedesktop.org/gstreamer/gst-plugins-good/-/issues/858 +Patch6000: backport-CVE-2021-3497-matroskademux-Initialize-track-context-out-parameter.patch +#https://gitlab.freedesktop.org/gstreamer/gst-plugins-good/-/issues/859 +Patch6001: backport-CVE-2021-3498-matroskademux-Fix-extraction-of-multichannel-WavPack.patch + #https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1226 Patch6002: CVE-2022-1920.patch #https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1224 @@ -131,6 +134,9 @@ echo "%{_libdir}" > %{buildroot}/etc/ld.so.conf.d/%{name}-%{_arch}.conf %doc %{_datadir}/gtk-doc/html/* %changelog +* Mon Apr 21 2025 wangshuo - 1.16.2-9 +- Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed + * Fri Dec 20 2024 yaoxin - 1.16.2-8 - Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603 -- Gitee