gst-plugins-good0.10.8 is not affected despite oCERT advisory. From ChangeLog:
2008-04-11 Jan Schmidt <email address hidden>
* ext/speex/gstspeexdec.c: (speex_dec_chain_parse_header):
Fix bounds checking of mode in Speex header, which may
produce negative numbers in speex <= 1.1.12
gst-plugins- good0.10. 8 is not affected despite oCERT advisory. From ChangeLog:
2008-04-11 Jan Schmidt <email address hidden>
* ext/speex/ gstspeexdec. c: (speex_ dec_chain_ parse_header) :
Fix bounds checking of mode in Speex header, which may
produce negative numbers in speex <= 1.1.12
I also verified the source.