[ALSA-2026:6750] Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update
Type:
security
Severity:
important
Release date:
2026-04-09
Description:
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920) * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082) * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085) * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921) * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083) * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 gstreamer1-plugins-good-gtk-1.16.1-6.el8_10.aarch64.rpm 11ac104ccd924dc90c3e753f6636244f68ee4252382638b15fb093d6136cb3ae
aarch64 gstreamer1-plugins-bad-free-devel-1.16.1-6.el8_10.aarch64.rpm 32c984ba3ca097e4499f05783479ed8e5de548dcff95edcc1d514782b698b905
aarch64 gstreamer1-plugins-bad-free-1.16.1-6.el8_10.aarch64.rpm 34ec54b45e03b6331a18b46792a0d98fe6fd03e530eafab2bc88afc33071335d
aarch64 gstreamer1-plugins-good-1.16.1-6.el8_10.aarch64.rpm b38006b32c6efabf4ab53034f258105b6679267bd763e3042febf51da2e64f1e
aarch64 gstreamer1-plugins-base-1.16.1-6.el8_10.aarch64.rpm bd9f8b2e222f52651d9c580d33d042d69c0410c484c99c272ed9a2751a122fe2
aarch64 gstreamer1-plugins-base-devel-1.16.1-6.el8_10.aarch64.rpm f0355a4d31131f5313fb5f00c0c1783e6a2b0551852bb74693c568a9d0c167b5
i686 gstreamer1-plugins-good-gtk-1.16.1-6.el8_10.i686.rpm 01d8fab21b927ab3638d59834e89852b7914fc5459f450f0aa732bc2ec1c6de3
i686 gstreamer1-plugins-base-devel-1.16.1-6.el8_10.i686.rpm 0a0ec761dbcf0cbd6ada67a5ca55741a04c3e1b9f833f9b284cb29299f15f8db
i686 gstreamer1-plugins-bad-free-devel-1.16.1-6.el8_10.i686.rpm 4837d4163ffe01bcc1d0f7947e7cb59278e957c3e1e7be5ed9f6efebefdabd79
i686 gstreamer1-plugins-base-1.16.1-6.el8_10.i686.rpm 7c669efcd254e3a8a4ffcad3bc403cd961d786a9fd89182966c268f17a1d0b3e
i686 gstreamer1-plugins-good-1.16.1-6.el8_10.i686.rpm c16af5f448d0d13c30e1c46d92f4a9e77099d27797d9d31537484a9c45a8b392
i686 gstreamer1-plugins-bad-free-1.16.1-6.el8_10.i686.rpm d29e0124be6c1a7514c539758c60340603983dd61db93e18f1e05600d4c0dd04
ppc64le gstreamer1-plugins-bad-free-1.16.1-6.el8_10.ppc64le.rpm 2edcdab4315734cb56d88b8c6c7f9751593a5c4578ba321578e8e73e7e93ca3f
ppc64le gstreamer1-plugins-base-1.16.1-6.el8_10.ppc64le.rpm 47d4770b1f4aaefdaa79b242f6d2ed799aac606eccf5fa94c8cd42dc444e70de
ppc64le gstreamer1-plugins-base-devel-1.16.1-6.el8_10.ppc64le.rpm 48d105cf3d27c9eac8d6e6175712b537dbf16ed20b69dc9ffadb0d3da5315461
ppc64le gstreamer1-plugins-bad-free-devel-1.16.1-6.el8_10.ppc64le.rpm aa68fdc57250b7673716dd48e5e0e125f3acc07bbfb41777a33f492329fcd21d
ppc64le gstreamer1-plugins-good-1.16.1-6.el8_10.ppc64le.rpm cefab37679be74952f260be9460ce8d1a6b36dec3c8873502d298f8c3cb6e74e
ppc64le gstreamer1-plugins-good-gtk-1.16.1-6.el8_10.ppc64le.rpm d8834cbcde0e682cd0261b3b486cfc159738a7f1f4900a638cb9661eef38ca0f
s390x gstreamer1-plugins-good-1.16.1-6.el8_10.s390x.rpm 77b780b3f1f766f8e8b795b36613e0579a2d8dd430c57b97fb28ff569af47a76
s390x gstreamer1-plugins-good-gtk-1.16.1-6.el8_10.s390x.rpm 8cb449bef34e80d233db80117c2cd5841ada2bdf2afea4ec017533c5c4e434f4
s390x gstreamer1-plugins-base-devel-1.16.1-6.el8_10.s390x.rpm 94c553ef20de7529601655f57a32fe101b9e82e5b8de18de6f297f032745f9c4
s390x gstreamer1-plugins-bad-free-devel-1.16.1-6.el8_10.s390x.rpm aef6f5a65e457aaf86bb57cf4a979017558054000b6718eb30c43786433cb84c
s390x gstreamer1-plugins-base-1.16.1-6.el8_10.s390x.rpm eb9b5ab01458085a68a48421e2b807a2deffd91711ac0e78c65e81a785db62a2
s390x gstreamer1-plugins-bad-free-1.16.1-6.el8_10.s390x.rpm f3e34c92a7c3bd051e8e4778981f34b8eb8fbcd0e075651d2e98b12c6e481421
x86_64 gstreamer1-plugins-base-1.16.1-6.el8_10.x86_64.rpm 0154922d08ccdcae6588d5613b9e155d06a53012a35af5fceb64557e473f9e6d
x86_64 gstreamer1-plugins-good-gtk-1.16.1-6.el8_10.x86_64.rpm 23b8a4a020ce700c5470b9b0f7572a7fe4c3a4406148eb8d3a66b7d5d24007a5
x86_64 gstreamer1-plugins-good-1.16.1-6.el8_10.x86_64.rpm 3321ee7bfe2e2d07c291e68a70a55dc0518327ff5bb61587333637a64466f4c3
x86_64 gstreamer1-plugins-base-devel-1.16.1-6.el8_10.x86_64.rpm 9d1b64ff1a364a5a566c32402d6eb9a1b1c101b33bb2546d1c094274f92d4907
x86_64 gstreamer1-plugins-bad-free-devel-1.16.1-6.el8_10.x86_64.rpm af6520ead10f121e133355d31deaa305d914d6f23bebf63cc60afc3567a8ab5e
x86_64 gstreamer1-plugins-bad-free-1.16.1-6.el8_10.x86_64.rpm fe999346a73e6c61817fcb0150d18d2e29957df0862d2343bee6f3f7599ec64b
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.