已合并
fix CVE-2026-59692 #115
zhangwenyi0929创建于 8月14日
fix CVE-2026-59692 #115
已合并
共 2 个文件变更+61-1
| @@ -0,0 +1,53 @@ | |||
| 1 | +From 67ad927b1bef598ce1587b55a2eae949241f10cd Mon Sep 17 00:00:00 2001 | ||
| 2 | +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= <sebastian@centricular.com> | ||
| 3 | +Date: Thu, 25 Jun 2026 11:47:44 +0300 | ||
| 4 | +Subject: [PATCH] dtlsconnection: Allocate large enough buffer for the peer | ||
| 5 | + certificate subject DN | ||
| 6 | + | ||
| 7 | +Fix provided by Clouditera Security. | ||
| 8 | + | ||
| 9 | +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5172 | ||
| 10 | + | ||
| 11 | +Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12076> | ||
| 12 | +--- | ||
| 13 | + ext/dtls/gstdtlsconnection.c | 21 +++++++++++++++++---- | ||
| 14 | + 1 file changed, 17 insertions(+), 4 deletions(-) | ||
| 15 | + | ||
| 16 | +diff --git a/ext/dtls/gstdtlsconnection.c b/ext/dtls/gstdtlsconnection.c | ||
| 17 | +index 244ec99..9202f3c 100644 | ||
| 18 | +--- a/ext/dtls/gstdtlsconnection.c | ||
| 19 | ++++ b/ext/dtls/gstdtlsconnection.c | ||
| 20 | + openssl_verify_callback (int preverify_ok, X509_STORE_CTX * x509_ctx) | ||
| 21 | + } else { | ||
| 22 | + bio = BIO_new (BIO_s_mem ()); | ||
| 23 | + if (bio) { | ||
| 24 | +- gchar buffer[2048]; | ||
| 25 | + gint len; | ||
| 26 | ++ gint read_len; | ||
| 27 | + | ||
| 28 | + len = | ||
| 29 | + X509_NAME_print_ex (bio, | ||
| 30 | + X509_get_subject_name (X509_STORE_CTX_get0_cert (x509_ctx)), 1, | ||
| 31 | + XN_FLAG_MULTILINE); | ||
| 32 | +- BIO_read (bio, buffer, len); | ||
| 33 | +- buffer[len] = '\0'; | ||
| 34 | +- GST_DEBUG_OBJECT (self, "Peer certificate received:\n%s", buffer); | ||
| 35 | ++ | ||
| 36 | ++ if (len > 0) { | ||
| 37 | ++ gchar *buffer; | ||
| 38 | ++ | ||
| 39 | ++ buffer = g_new (gchar, (gsize) len + 1); | ||
| 40 | ++ read_len = BIO_read (bio, buffer, len); | ||
| 41 | ++ if (read_len > 0) { | ||
| 42 | ++ buffer[read_len] = '\0'; | ||
| 43 | ++ GST_DEBUG_OBJECT (self, "Peer certificate received:\n%s", buffer); | ||
| 44 | ++ } else { | ||
| 45 | ++ GST_DEBUG_OBJECT (self, "failed to read certificate subject"); | ||
| 46 | ++ } | ||
| 47 | ++ g_free (buffer); | ||
| 48 | ++ } else { | ||
| 49 | ++ GST_DEBUG_OBJECT (self, "failed to read certificate subject"); | ||
| 50 | ++ } | ||
| 51 | + BIO_free (bio); | ||
| 52 | + } else { | ||
| 53 | + GST_DEBUG_OBJECT (self, "failed to create certificate print membio"); | ||
| @@ -3,7 +3,7 @@ | |||
| 3 | 3 | ||
| 4 | Name: gstreamer1-plugins-bad-free | 4 | Name: gstreamer1-plugins-bad-free |
| 5 | Version: 1.16.2 | 5 | Version: 1.16.2 |
| 6 | -Release: 17 | 6 | +Release: 18 |
| 7 | Summary: Not well tested plugins for GStreamer framework | 7 | Summary: Not well tested plugins for GStreamer framework |
| 8 | License: LGPLv2+ and LGPLv2 | 8 | License: LGPLv2+ and LGPLv2 |
| 9 | URL: http://gstreamer.freedesktop.org/ | 9 | URL: http://gstreamer.freedesktop.org/ |
| @@ -33,6 +33,7 @@ Patch0013: CVE-2026-2923.patch | |||
| 33 | # https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f3b66928a194b32b27fac3c3379d3d20e5966442 | 33 | # https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f3b66928a194b32b27fac3c3379d3d20e5966442 |
| 34 | Patch0014: CVE-2026-52720.patch | 34 | Patch0014: CVE-2026-52720.patch |
| 35 | Patch0015: CVE-2026-14935.patch | 35 | Patch0015: CVE-2026-14935.patch |
| 36 | +Patch0016: CVE-2026-59692.patch | ||
| 36 | 37 | ||
| 37 | BuildRequires: gstreamer1-devel >= %{version} autoconf | 38 | BuildRequires: gstreamer1-devel >= %{version} autoconf |
| 38 | BuildRequires: gstreamer1-plugins-base-devel >= %{version} | 39 | BuildRequires: gstreamer1-plugins-base-devel >= %{version} |
| @@ -284,6 +285,12 @@ EOF | |||
| 284 | %{_libdir}/pkgconfig/gstreamer*-%{majorminor}.pc | 285 | %{_libdir}/pkgconfig/gstreamer*-%{majorminor}.pc |
| 285 | %{_includedir}/gstreamer-%{majorminor}/gst/* | 286 | %{_includedir}/gstreamer-%{majorminor}/gst/* |
| 286 | %changelog | 287 | %changelog |
| 288 | +* Fri Aug 14 2026 zhangwenyi <zhangwenyi@xfusion.com> - 1.16.2-18 | ||
| 289 | +- Type:CVE | ||
| 290 | +- CVE:CVE-2026-59692 | ||
| 291 | +- SUG:NA | ||
| 292 | +- DESC:fix CVE-2026-59692 | ||
| 293 | + | ||
| 287 | * Sat Jul 29 2026 zhangwenyi <zhangwenyi@xfusion.com> - 1.16.2-17 | 294 | * Sat Jul 29 2026 zhangwenyi <zhangwenyi@xfusion.com> - 1.16.2-17 |
| 288 | - Type:CVE | 295 | - Type:CVE |
| 289 | - CVE:CVE-2026-14935 | 296 | - CVE:CVE-2026-14935 |