[ALSA-2026:55865] Important: gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update
Type:
security
Severity:
important
Release date:
2026-08-18
Description:
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387) * gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2.aarch64.rpm 5e0d94ea8e19cc67445cd4b6554be7e4db25850b7782c4c55b821ec2e9504976
aarch64 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.aarch64.rpm cb0c2fbece078c0c4e294f7df1c264725708500e0bae9690044f0af21fee2aa0
aarch64 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.aarch64.rpm ea4fc2f89ac113cd751d1ef06cb5183f221c2db737490690ec0effc932a716f5
aarch64 gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4.aarch64.rpm f08a0d2efbce5cd73c96221d9be6d73494a4c64e6134ebbef11084c218d1ffa7
i686 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.i686.rpm 1a30c7e8c3e7d855d63cf4460203f6ab45b449958d5df7903022bcff947b3ccb
i686 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.i686.rpm 49ea5ccdddfc5cd3fd49c1ea8ffdf63b74ba53048f685938aecc807780ae4a91
i686 gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2.i686.rpm a66cdc8b6a2bab0313fb855f339b920de333aa30d960e285ad8fe7ac41127887
i686 gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4.i686.rpm bc0a72d6ab7ef678d99d42a0bf44fc418a18a238faa085f4144a948cbb41c9df
ppc64le gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.ppc64le.rpm 1fef97204d05581e2a6dc9feba1ee1b4b7673521f6cb3ab3a95e3a34695c7346
ppc64le gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2.ppc64le.rpm 2065fb755c70a17b4fab809946927ab777cd794d62de7566a6249783f6c6fb4d
ppc64le gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4.ppc64le.rpm 8375d8be6e01cbdbdff487d89477f4b3e1f406861bb0801337d2b83a02c0cccc
ppc64le gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.ppc64le.rpm b7128ad16a32dbb50f17c1de4ce1686d57d8807babd7ec9d0c4363e1608948e4
s390x gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4.s390x.rpm 1ad9246c6ea61a4b69076d843f4b1fb367984a171663a50f7a331ab0cc48629f
s390x gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.s390x.rpm 940d9a2573c31b2877fe4983970e54e5a8f183bbcdcd0c798a91bb61d0663df0
s390x gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.s390x.rpm c285b57329bf9cdf38ca649e8d3b8e4f49d4fc509cc0d65358028831f56f145e
x86_64 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.x86_64.rpm 29e44fb3676ef36bc31e62670399e555d18ac9aa1c7dd7f8111bf0c6f4055463
x86_64 gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4.x86_64.rpm 8837a61c65a3c372111744a77c2604239ab397d0aac782a072c11bdac9f05138
x86_64 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.x86_64.rpm 8b9123ebacbcafef4b94392861fa08fc8ffb02b2fd7968a948471260426b94ae
x86_64 gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2.x86_64.rpm dd25e1aeeeeb2ced132b0284387c66925b0a7305150a9247760a25e24e592223
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.