diff --git a/0001-mxfdemux-Set-stream-tags-to-NULL-after-unreffing.patch b/0001-mxfdemux-Set-stream-tags-to-NULL-after-unreffing.patch
new file mode 100644
index 0000000..608242b
--- /dev/null
+++ b/0001-mxfdemux-Set-stream-tags-to-NULL-after-unreffing.patch
@@ -0,0 +1,24 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= <sebastian@centricular.com>
+Date: Fri, 20 Jan 2017 07:51:09 +0200
+Subject: [PATCH] mxfdemux: Set stream tags to NULL after unreffing
+
+Otherwise we might try to unref them a second time a little bit later.
+
+https://bugzilla.gnome.org/show_bug.cgi?id=777503
+---
+ gst/mxf/mxfdemux.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/gst/mxf/mxfdemux.c b/gst/mxf/mxfdemux.c
+index a380f6d..54ceec1 100644
+--- a/gst/mxf/mxfdemux.c
++++ b/gst/mxf/mxfdemux.c
+@@ -835,6 +835,7 @@ gst_mxf_demux_update_essence_tracks (GstMXFDemux * demux)
+         etrack->mapping_data = NULL;
+         if (etrack->tags)
+           gst_tag_list_unref (etrack->tags);
++        etrack->tags = NULL;
+         goto next;
+       } else if (!caps) {
+         GST_WARNING_OBJECT (demux, "Couldn't create updated caps for stream");
diff --git a/mingw-gstreamer1-plugins-bad-free.spec b/mingw-gstreamer1-plugins-bad-free.spec
index ec5a93d..d038821 100644
--- a/mingw-gstreamer1-plugins-bad-free.spec
+++ b/mingw-gstreamer1-plugins-bad-free.spec
@@ -18,6 +18,8 @@ URL:            http://gstreamer.freedesktop.org/
 Source0:        gst-plugins-bad-free-%{version}.tar.xz
 Source1:        gst-p-bad-cleanup.sh
 
+Patch0001:      0001-mxfdemux-Set-stream-tags-to-NULL-after-unreffing.patch
+
 BuildArch:      noarch
 
 BuildRequires:  autoconf automake
@@ -109,6 +111,7 @@ well enough, or the code is not of good enough quality.
 
 %prep
 %setup -q -n gst-plugins-bad-%{version}
+%patch0001 -p1
 
 
 %build
@@ -439,6 +442,7 @@ find $RPM_BUILD_ROOT -name '*.la' -delete
 - Add audiobuffersplit
 - Dataurisrc was moved to core
 - Add ttmlsubs plugin
+- Fix CVE-2017-5843
 
 * Sat Nov  5 2016 Victor Toso <victortoso@redhat.com> - 1.10.0-1
 - Update to 1.10.0