[Apollo] Advisories Statistics light light Login

RLSA-2026:55865

Security Mirrored from RHSA-2026:55865
Issued at: 2026-08-18
Updated at: 2026-08-18

Advisory content derived from Red Hat RHSA-2026:55865, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update



Description

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387)

* gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2513015 2513016

CVEs

CVE-2026-19387 CVE-2026-19389

Affected packages

Rocky Linux 9 aarch64 - AppStream

gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.4.aarch64.rpm gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.4.src.rpm gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-7.el9_8.4.aarch64.rpm gstreamer1-plugins-bad-free-debugsource-0:1.22.12-7.el9_8.4.aarch64.rpm gstreamer1-plugins-bad-free-libs-0:1.22.12-7.el9_8.4.aarch64.rpm gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.4.aarch64.rpm gstreamer1-plugins-ugly-free-0:1.22.12-6.el9_8.2.aarch64.rpm gstreamer1-plugins-ugly-free-0:1.22.12-6.el9_8.2.src.rpm gstreamer1-plugins-ugly-free-debuginfo-0:1.22.12-6.el9_8.2.aarch64.rpm gstreamer1-plugins-ugly-free-debugsource-0:1.22.12-6.el9_8.2.aarch64.rpm

Rocky Linux 9 x86_64 - AppStream

gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.4.i686.rpm gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.4.src.rpm gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.4.x86_64.rpm gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-7.el9_8.4.i686.rpm gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-7.el9_8.4.x86_64.rpm gstreamer1-plugins-bad-free-debugsource-0:1.22.12-7.el9_8.4.i686.rpm gstreamer1-plugins-bad-free-debugsource-0:1.22.12-7.el9_8.4.x86_64.rpm gstreamer1-plugins-bad-free-libs-0:1.22.12-7.el9_8.4.i686.rpm gstreamer1-plugins-bad-free-libs-0:1.22.12-7.el9_8.4.x86_64.rpm gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.4.i686.rpm gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.4.x86_64.rpm gstreamer1-plugins-ugly-free-0:1.22.12-6.el9_8.2.i686.rpm gstreamer1-plugins-ugly-free-0:1.22.12-6.el9_8.2.src.rpm gstreamer1-plugins-ugly-free-0:1.22.12-6.el9_8.2.x86_64.rpm gstreamer1-plugins-ugly-free-debuginfo-0:1.22.12-6.el9_8.2.i686.rpm gstreamer1-plugins-ugly-free-debuginfo-0:1.22.12-6.el9_8.2.x86_64.rpm gstreamer1-plugins-ugly-free-debugsource-0:1.22.12-6.el9_8.2.i686.rpm gstreamer1-plugins-ugly-free-debugsource-0:1.22.12-6.el9_8.2.x86_64.rpm

Rocky Linux 9 ppc64le - AppStream

gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.4.ppc64le.rpm gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.4.src.rpm gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-7.el9_8.4.ppc64le.rpm gstreamer1-plugins-bad-free-debugsource-0:1.22.12-7.el9_8.4.ppc64le.rpm gstreamer1-plugins-bad-free-libs-0:1.22.12-7.el9_8.4.ppc64le.rpm gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.4.ppc64le.rpm gstreamer1-plugins-ugly-free-0:1.22.12-6.el9_8.2.ppc64le.rpm gstreamer1-plugins-ugly-free-0:1.22.12-6.el9_8.2.src.rpm gstreamer1-plugins-ugly-free-debuginfo-0:1.22.12-6.el9_8.2.ppc64le.rpm gstreamer1-plugins-ugly-free-debugsource-0:1.22.12-6.el9_8.2.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.4.s390x.rpm gstreamer1-plugins-bad-free-0:1.22.12-7.el9_8.4.src.rpm gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-7.el9_8.4.s390x.rpm gstreamer1-plugins-bad-free-debugsource-0:1.22.12-7.el9_8.4.s390x.rpm gstreamer1-plugins-bad-free-libs-0:1.22.12-7.el9_8.4.s390x.rpm gstreamer1-plugins-bad-free-libs-debuginfo-0:1.22.12-7.el9_8.4.s390x.rpm gstreamer1-plugins-ugly-free-0:1.22.12-6.el9_8.2.src.rpm

Rocky Linux 9 aarch64 - CRB

gstreamer1-plugins-bad-free-devel-0:1.22.12-7.el9_8.4.aarch64.rpm

Rocky Linux 9 x86_64 - CRB

gstreamer1-plugins-bad-free-devel-0:1.22.12-7.el9_8.4.i686.rpm gstreamer1-plugins-bad-free-devel-0:1.22.12-7.el9_8.4.x86_64.rpm

Rocky Linux 9 ppc64le - CRB

gstreamer1-plugins-bad-free-devel-0:1.22.12-7.el9_8.4.ppc64le.rpm

Rocky Linux 9 s390x - CRB

gstreamer1-plugins-bad-free-devel-0:1.22.12-7.el9_8.4.s390x.rpm