Red Hat Product Errata RHSA-2026:7673 - Security Advisory
Issued:
2026-04-13
Updated:
2026-04-13

RHSA-2026:7673 - Security Advisory

Synopsis

Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for multiple packages is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

  • GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082)
  • GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)
  • GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)
  • GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2447492 - CVE-2026-3082 GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser
  • BZ - 2447495 - CVE-2026-3085 GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay
  • BZ - 2447496 - CVE-2026-2921 GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling
  • BZ - 2447498 - CVE-2026-3083 GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.src.rpm SHA-256: a6cb7862937a17caee59bd118e28e87fc5a0407c6d0dd2e479feb23afa05f8b1
gstreamer1-plugins-base-1.10.4-4.el7_9.src.rpm SHA-256: 5b40cec24a29b095fb3063ea8813b198971b826033f49dbdc84ca4930448e77e
gstreamer1-plugins-good-1.10.4-4.el7_9.src.rpm SHA-256: 6cd603a7edd60e42150c51da6c2ed2a31b8f6bf6cd7b94494388ef8c02dad5fe
x86_64
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.i686.rpm SHA-256: 07b6c887d45812a06e4e5d39bcca5939ace64e24e5e902dbb8c4dd00513d9a02
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.x86_64.rpm SHA-256: ffc4c5cc69b9cf041e4b9261adf479542a1141d249a0716a90e255821b306a25
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.i686.rpm SHA-256: a83aa6bed5b9a7c056d9987d147260ba225c1ec6ce2852ea84fdeccabea88ef5
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.i686.rpm SHA-256: a83aa6bed5b9a7c056d9987d147260ba225c1ec6ce2852ea84fdeccabea88ef5
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.x86_64.rpm SHA-256: d9dd93ea11b81b014fd3e61c610d6621f8b72275896cd5e84aa8fc7a27c87b2d
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.x86_64.rpm SHA-256: d9dd93ea11b81b014fd3e61c610d6621f8b72275896cd5e84aa8fc7a27c87b2d
gstreamer1-plugins-bad-free-devel-1.10.4-5.el7_9.i686.rpm SHA-256: 3e8a3082ea93b752e80312d068347478862c72a51d61dac1a0926c5b0aaf0a80
gstreamer1-plugins-bad-free-devel-1.10.4-5.el7_9.x86_64.rpm SHA-256: 2fdd8e48ad65226865b72a7602e6286c614c30e4203d42642537c37c88719844
gstreamer1-plugins-bad-free-gtk-1.10.4-5.el7_9.i686.rpm SHA-256: 0c2923baa57490f45d26921bb5e11524a095dde5f34161a82c47d410a344f002
gstreamer1-plugins-bad-free-gtk-1.10.4-5.el7_9.x86_64.rpm SHA-256: caa6c2ff03019a918bc15a6d0847d9504ce6978fb7bae880c5d8b596cf0bdeb0
gstreamer1-plugins-base-1.10.4-4.el7_9.i686.rpm SHA-256: ef0211d1e7e45821300f7aea647fcffa7d11586efdfb0390ae164dde6bf7ab5b
gstreamer1-plugins-base-1.10.4-4.el7_9.x86_64.rpm SHA-256: c87ac545d3f511640fb484d20c8b4cdd66b46066d510ecf9ed7361ff9795a523
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.i686.rpm SHA-256: c81268d5d36fe117e2cc5271ec33e228021020487af3d0a16b13d5ffa1010c20
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.x86_64.rpm SHA-256: 7bb67c4f5a3c0ae3d48fad2ce2c074550849a5c0e6ab9949608dff969fa33e7f
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.x86_64.rpm SHA-256: 7bb67c4f5a3c0ae3d48fad2ce2c074550849a5c0e6ab9949608dff969fa33e7f
gstreamer1-plugins-base-devel-1.10.4-4.el7_9.i686.rpm SHA-256: f34fe65057085236e461e74a17d00f81159f060003b5843361da073879d8b4ad
gstreamer1-plugins-base-devel-1.10.4-4.el7_9.x86_64.rpm SHA-256: 55bc8b2c09fa765a073eec60386e0ac606d16ee0609d384256d3d6a00f18efdf
gstreamer1-plugins-base-devel-docs-1.10.4-4.el7_9.noarch.rpm SHA-256: 9832d371614ab5aec2739d5e9a1b4e011ca0d9b996c6f66650709264595b3629
gstreamer1-plugins-base-tools-1.10.4-4.el7_9.x86_64.rpm SHA-256: fbadf8259ebec1220cbd38abc5385f0003d4cf228628021b468af1f578d617ca
gstreamer1-plugins-good-1.10.4-4.el7_9.i686.rpm SHA-256: 94a5e853c95cc60f34f08a06397df53e02717044232e02e1970d9826238aa70d
gstreamer1-plugins-good-1.10.4-4.el7_9.x86_64.rpm SHA-256: 11f40ff84a9e9b3c7855f391bf284b7e877d8fe79bae87532ac87bb412797d21
gstreamer1-plugins-good-debuginfo-1.10.4-4.el7_9.i686.rpm SHA-256: 4362eb62979cea197227885bcdaf7e09567473bc52c18d97f0657706093924cc
gstreamer1-plugins-good-debuginfo-1.10.4-4.el7_9.x86_64.rpm SHA-256: 184a2937600ad26fd83b04d9a5eebd0ad23bca26ab1da9a78a0ef4dce722a4df

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.src.rpm SHA-256: a6cb7862937a17caee59bd118e28e87fc5a0407c6d0dd2e479feb23afa05f8b1
gstreamer1-plugins-base-1.10.4-4.el7_9.src.rpm SHA-256: 5b40cec24a29b095fb3063ea8813b198971b826033f49dbdc84ca4930448e77e
gstreamer1-plugins-good-1.10.4-4.el7_9.src.rpm SHA-256: 6cd603a7edd60e42150c51da6c2ed2a31b8f6bf6cd7b94494388ef8c02dad5fe
s390x
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.s390.rpm SHA-256: c07d0a0740d4d4b9dc04300984c42e53ad826454793a70c098392ff3d6fed581
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.s390x.rpm SHA-256: eca4ffd49863903ca1a60c610a0afcdd5e236238f1ccdbdcd43d42767a2e11d7
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.s390.rpm SHA-256: bc00433ca785b1bbd6084fdec7976bd42a843d2ed28fd913831cd988bccb169c
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.s390.rpm SHA-256: bc00433ca785b1bbd6084fdec7976bd42a843d2ed28fd913831cd988bccb169c
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.s390x.rpm SHA-256: 1d7e5be8fb8ce03d44c62e665919cc3e680ffb795754f1f0fca58dc935226aa0
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.s390x.rpm SHA-256: 1d7e5be8fb8ce03d44c62e665919cc3e680ffb795754f1f0fca58dc935226aa0
gstreamer1-plugins-bad-free-devel-1.10.4-5.el7_9.s390.rpm SHA-256: 7ba3b7a3c4e1909aa405bd9aebc1b5f777c566d4ef76b90ea0576449c04e421c
gstreamer1-plugins-bad-free-devel-1.10.4-5.el7_9.s390x.rpm SHA-256: 47333d8e17a517e888cb6bd2149a447ac117600dd584e8ca3b8df98dada898ed
gstreamer1-plugins-bad-free-gtk-1.10.4-5.el7_9.s390.rpm SHA-256: ed98e6cc677ede5b136e70f84a94453637eae848be861115d22ae2d6d1333aff
gstreamer1-plugins-bad-free-gtk-1.10.4-5.el7_9.s390x.rpm SHA-256: caf196a9cd941dcacdca473a84974b7278c6686adc190bf6b14038714cbc7795
gstreamer1-plugins-base-1.10.4-4.el7_9.s390.rpm SHA-256: 5a10ca188341f1978d2a7efde36b9d2563fdd455e9aee7a413c34026bd38d43c
gstreamer1-plugins-base-1.10.4-4.el7_9.s390x.rpm SHA-256: 160725339819b595277d2535cac95e2c511a9ee5df7680882766ff6fa74773e6
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.s390.rpm SHA-256: 23fe36ac8b6c89ebbd8ec04cac6cebed05f767f471388b40050126a6715d318f
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.s390x.rpm SHA-256: 43b3aab4832cb5e8837b7d757219e5ece67938d473260648c409b0308ecb73cd
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.s390x.rpm SHA-256: 43b3aab4832cb5e8837b7d757219e5ece67938d473260648c409b0308ecb73cd
gstreamer1-plugins-base-devel-1.10.4-4.el7_9.s390.rpm SHA-256: eff6276795aa6e71c615b95c8a0bacb1f30b48b18d1435fb746efbe8f558fd12
gstreamer1-plugins-base-devel-1.10.4-4.el7_9.s390x.rpm SHA-256: 4e58a2a64c2f396351df7d516f721254961d4894801c099e383994808a16f46b
gstreamer1-plugins-base-devel-docs-1.10.4-4.el7_9.noarch.rpm SHA-256: 9832d371614ab5aec2739d5e9a1b4e011ca0d9b996c6f66650709264595b3629
gstreamer1-plugins-base-tools-1.10.4-4.el7_9.s390x.rpm SHA-256: 57135dd00bd315b5209b6d548c09f13b5648649d58bb6ad29ce794ea5cd95947
gstreamer1-plugins-good-1.10.4-4.el7_9.s390.rpm SHA-256: 622719cc329b7daa9dab91e454adf84ef1a266678a6d86a4a7b15da524c4a1ad
gstreamer1-plugins-good-1.10.4-4.el7_9.s390x.rpm SHA-256: e44c29da5181063379ebddf4ef4fcb05cd44e18e4ea865b398515a70405ee8ec
gstreamer1-plugins-good-debuginfo-1.10.4-4.el7_9.s390.rpm SHA-256: c1c2d6fb9b81b9e540e3c16f052ff0794a4d399ba742dad79ced0d2f45cfc0b8
gstreamer1-plugins-good-debuginfo-1.10.4-4.el7_9.s390x.rpm SHA-256: 8f5a9c16929c2479f7383cb5c86d76cd9ba0761191611d5f4b3efea7c2b4e26c

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.src.rpm SHA-256: a6cb7862937a17caee59bd118e28e87fc5a0407c6d0dd2e479feb23afa05f8b1
gstreamer1-plugins-base-1.10.4-4.el7_9.src.rpm SHA-256: 5b40cec24a29b095fb3063ea8813b198971b826033f49dbdc84ca4930448e77e
gstreamer1-plugins-good-1.10.4-4.el7_9.src.rpm SHA-256: 6cd603a7edd60e42150c51da6c2ed2a31b8f6bf6cd7b94494388ef8c02dad5fe
ppc64
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.ppc.rpm SHA-256: 18ee358f494a6871f9ae88457a6f6274b0714f50d90b6f2532e4c3096a362217
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.ppc64.rpm SHA-256: 2753e162a1b7af6e52f16bdf2de6b1d3776b5cbf23271858066aef42852d5db8
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.ppc.rpm SHA-256: acd9f8a4077a6e376169fc077af416e329b8d8dd6b197d0085a20009f6297317
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.ppc.rpm SHA-256: acd9f8a4077a6e376169fc077af416e329b8d8dd6b197d0085a20009f6297317
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.ppc64.rpm SHA-256: d13242e6b2d173ee06782c6c30432822c36ea378ecbe112acd89ece03de01c9b
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.ppc64.rpm SHA-256: d13242e6b2d173ee06782c6c30432822c36ea378ecbe112acd89ece03de01c9b
gstreamer1-plugins-bad-free-devel-1.10.4-5.el7_9.ppc.rpm SHA-256: e001e21400223d47dd08b5c2eddcf516829d071005d56d31b3f97bd8dab53c1e
gstreamer1-plugins-bad-free-devel-1.10.4-5.el7_9.ppc64.rpm SHA-256: e671b492040d3b2b73bfc9a9f41e7bfb89721d80eca6e053930a98b792944140
gstreamer1-plugins-bad-free-gtk-1.10.4-5.el7_9.ppc.rpm SHA-256: 4090a5cc29b46f1d59ff3407a30ffe47ee6511708505b06c5fbfdbca3872dd0e
gstreamer1-plugins-bad-free-gtk-1.10.4-5.el7_9.ppc64.rpm SHA-256: 811d3c7964db6a18eb8020bfceb03a33b80f64243b915e8ec62163a83bbe432b
gstreamer1-plugins-base-1.10.4-4.el7_9.ppc.rpm SHA-256: 3447d5be8112205ab95d6c11c5dec7b6e3a0ac4aa4475ac4d42970f92c616390
gstreamer1-plugins-base-1.10.4-4.el7_9.ppc64.rpm SHA-256: 32edbbdf2f70d057e98b7ac6bf760d072cc01d0b88581eca25dce87ea590a7f4
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.ppc.rpm SHA-256: 638b5e22eccf0ba1cb75873e1fbd5dfc104108132946df2dd9623f9a8e43736f
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.ppc64.rpm SHA-256: d3521c9611a2a82c2347ddf73b0cfd03ddefc9fc93f4a60f7650828a0a793ffb
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.ppc64.rpm SHA-256: d3521c9611a2a82c2347ddf73b0cfd03ddefc9fc93f4a60f7650828a0a793ffb
gstreamer1-plugins-base-devel-1.10.4-4.el7_9.ppc.rpm SHA-256: c0e9f4a2e3b0dc17ce166b58a2b842f5b983253154720fe7576d7a67399ffcfe
gstreamer1-plugins-base-devel-1.10.4-4.el7_9.ppc64.rpm SHA-256: c0f44a8b74ecde86f1c160ab1173dfd32ba411ca9243dd21315955d38de54240
gstreamer1-plugins-base-devel-docs-1.10.4-4.el7_9.noarch.rpm SHA-256: 9832d371614ab5aec2739d5e9a1b4e011ca0d9b996c6f66650709264595b3629
gstreamer1-plugins-base-tools-1.10.4-4.el7_9.ppc64.rpm SHA-256: 57c2161ea1ede94b37107d8c5ca2f1ed820d84f204602729e6e77a4865cd73bb
gstreamer1-plugins-good-1.10.4-4.el7_9.ppc.rpm SHA-256: c6ae5d5cf7481c83af2fbb9eecdfd16bdbe71a7f31a772da387e7bcf3bb92d13
gstreamer1-plugins-good-1.10.4-4.el7_9.ppc64.rpm SHA-256: 379a61e410a54b39ff7ff551306536d31d9c3d346504fe2245ccd85d61b9545e
gstreamer1-plugins-good-debuginfo-1.10.4-4.el7_9.ppc.rpm SHA-256: 52938c78ee6abff0c28a667e6370cf222ccd36a807194a1f666c9701fb931f17
gstreamer1-plugins-good-debuginfo-1.10.4-4.el7_9.ppc64.rpm SHA-256: 6f163873189d041fc4139420c7af5b38f3929ab1ff6bfac414a24847000a214e

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.src.rpm SHA-256: a6cb7862937a17caee59bd118e28e87fc5a0407c6d0dd2e479feb23afa05f8b1
gstreamer1-plugins-base-1.10.4-4.el7_9.src.rpm SHA-256: 5b40cec24a29b095fb3063ea8813b198971b826033f49dbdc84ca4930448e77e
gstreamer1-plugins-good-1.10.4-4.el7_9.src.rpm SHA-256: 6cd603a7edd60e42150c51da6c2ed2a31b8f6bf6cd7b94494388ef8c02dad5fe
ppc64le
gstreamer1-plugins-bad-free-1.10.4-5.el7_9.ppc64le.rpm SHA-256: 02a2fcbc09b713b307663f98561b27a927fadb93261157b95bcca2bfba907082
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.ppc64le.rpm SHA-256: 4fa03434cdaf26556386702fbf4df26c258e77c3242770d05b933e7067125886
gstreamer1-plugins-bad-free-debuginfo-1.10.4-5.el7_9.ppc64le.rpm SHA-256: 4fa03434cdaf26556386702fbf4df26c258e77c3242770d05b933e7067125886
gstreamer1-plugins-bad-free-devel-1.10.4-5.el7_9.ppc64le.rpm SHA-256: 06b993fecd30446fd09c5df7a12ebf487469d50c41ffd5a4ac958ef5295fcd45
gstreamer1-plugins-bad-free-gtk-1.10.4-5.el7_9.ppc64le.rpm SHA-256: 56523ab0123a5f845e83845ed1df6a62a0ea488fc020657f10c81c0d59e0f452
gstreamer1-plugins-base-1.10.4-4.el7_9.ppc64le.rpm SHA-256: 9b596b4df071bf5b06ac46bfad76a4e67a1a0d1c8caf165f81b264a8137c548a
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.ppc64le.rpm SHA-256: 1e9939a0553c3207891d9120ce1a17159d9ff1586b36ff299fd171607d02b437
gstreamer1-plugins-base-debuginfo-1.10.4-4.el7_9.ppc64le.rpm SHA-256: 1e9939a0553c3207891d9120ce1a17159d9ff1586b36ff299fd171607d02b437
gstreamer1-plugins-base-devel-1.10.4-4.el7_9.ppc64le.rpm SHA-256: a6b4f029296f5fc82921945bd6c35259e842a792c1a695f81383f868a3cfdad0
gstreamer1-plugins-base-devel-docs-1.10.4-4.el7_9.noarch.rpm SHA-256: 9832d371614ab5aec2739d5e9a1b4e011ca0d9b996c6f66650709264595b3629
gstreamer1-plugins-base-tools-1.10.4-4.el7_9.ppc64le.rpm SHA-256: c2d410c6f5d7100a288a3466cba0a2c7d9a1d8c58f89722f942ea8f5e5a32823
gstreamer1-plugins-good-1.10.4-4.el7_9.ppc64le.rpm SHA-256: 7e8c2c33a6dc4f82b09d66a936ba3798eb356d89fb3cb1a0922d4997a8cbab36
gstreamer1-plugins-good-debuginfo-1.10.4-4.el7_9.ppc64le.rpm SHA-256: cb96d82284650b755695138c0a506b0db1e44fc68476756fa91ac6ac31a9c346

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.