RLSA-2026:36834

Synopsis

Important: gstreamer1-plugins-bad-free security update

Description

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tile_list_obu parser byte/bit confusion (CVE-2026-52718)

* gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (CVE-2026-52719)

* gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb (CVE-2026-52720)

* gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling (CVE-2026-52722)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2486328 2486353 2486731 2486733

CVEs

CVE-2026-52718 CVE-2026-52719 CVE-2026-52720 CVE-2026-52722

Affected packages

Rocky Linux 9 aarch64 - AppStream

gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.1.aarch64.rpm gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.1.src.rpm gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-7.el9_8.1.aarch64.rpm gstreamer1-plugins-bad-free-debugsource-0:1.22.12-7.el9_8.1.aarch64.rpm gstreamer1-plugins-bad-free-libs-0:1.22.12-7.el9_8.1.aarch64.rpm gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.1.aarch64.rpm

Rocky Linux 9 x86_64 - AppStream

gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.1.i686.rpm gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.1.src.rpm gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.1.x86_64.rpm gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-7.el9_8.1.i686.rpm gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-7.el9_8.1.x86_64.rpm gstreamer1-plugins-bad-free-debugsource-0:1.22.12-7.el9_8.1.i686.rpm gstreamer1-plugins-bad-free-debugsource-0:1.22.12-7.el9_8.1.x86_64.rpm gstreamer1-plugins-bad-free-libs-0:1.22.12-7.el9_8.1.i686.rpm gstreamer1-plugins-bad-free-libs-0:1.22.12-7.el9_8.1.x86_64.rpm gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.1.i686.rpm gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.1.x86_64.rpm

Rocky Linux 9 ppc64le - AppStream

gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.1.ppc64le.rpm gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.1.src.rpm gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-7.el9_8.1.ppc64le.rpm gstreamer1-plugins-bad-free-debugsource-0:1.22.12-7.el9_8.1.ppc64le.rpm gstreamer1-plugins-bad-free-libs-0:1.22.12-7.el9_8.1.ppc64le.rpm gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.1.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.1.s390x.rpm gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.1.src.rpm gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-7.el9_8.1.s390x.rpm gstreamer1-plugins-bad-free-debugsource-0:1.22.12-7.el9_8.1.s390x.rpm gstreamer1-plugins-bad-free-libs-0:1.22.12-7.el9_8.1.s390x.rpm gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.1.s390x.rpm

Rocky Linux 9 aarch64 - CRB

gstreamer1-plugins-bad-free-devel-0:1.22.12-7.el9_8.1.aarch64.rpm

Rocky Linux 9 x86_64 - CRB

gstreamer1-plugins-bad-free-devel-0:1.22.12-7.el9_8.1.i686.rpm gstreamer1-plugins-bad-free-devel-0:1.22.12-7.el9_8.1.x86_64.rpm

Rocky Linux 9 ppc64le - CRB

gstreamer1-plugins-bad-free-devel-0:1.22.12-7.el9_8.1.ppc64le.rpm

Rocky Linux 9 s390x - CRB

gstreamer1-plugins-bad-free-devel-0:1.22.12-7.el9_8.1.s390x.rpm