Red Hat Product Errata RHSA-2026:7850 - Security Advisory
Issued:
2026-04-13
Updated:
2026-04-13

RHSA-2026:7850 - Security Advisory

Synopsis

Important: gstreamer-plugins-base and gstreamer-plugins-good security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for multiple packages is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plug-ins. GStreamer Good Plug-ins is a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

  • GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)
  • GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)
  • GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2447495 - CVE-2026-3085 GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay
  • BZ - 2447496 - CVE-2026-2921 GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling
  • BZ - 2447498 - CVE-2026-3083 GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
gstreamer-plugins-base-0.10.36-11.el7_9.src.rpm SHA-256: 915d5d94e026002974bd2e9420ce540df7c178fa6e0548e886af3785355bd7c7
gstreamer-plugins-good-0.10.31-14.el7_9.src.rpm SHA-256: c714b29860fb0cee16207020d210ac8991dfdab736fa77a2c9969574fcb7b9ea
x86_64
gstreamer-plugins-base-0.10.36-11.el7_9.i686.rpm SHA-256: 30068142ab5e62693110d8c438d5a57b3838a75f6ca87cee7a975dbd86b1749d
gstreamer-plugins-base-0.10.36-11.el7_9.x86_64.rpm SHA-256: 52dfc79ba706465dba3ed75ec660c24fc2b9f3292b49d7de7ac08092efead785
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.i686.rpm SHA-256: 3f2230ff46dbcc736307be9e1811f0e88e2cf39177ace5443b1aeb553e3baeb7
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.i686.rpm SHA-256: 3f2230ff46dbcc736307be9e1811f0e88e2cf39177ace5443b1aeb553e3baeb7
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.x86_64.rpm SHA-256: e985f310e6b27fd5b2bf9a161e74f96ba19fac21f84850581cfabb612fe9faf9
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.x86_64.rpm SHA-256: e985f310e6b27fd5b2bf9a161e74f96ba19fac21f84850581cfabb612fe9faf9
gstreamer-plugins-base-devel-0.10.36-11.el7_9.i686.rpm SHA-256: 747f105e9c7f7e969a947e02840a57a42a87082599c90865ca1f9cb019438690
gstreamer-plugins-base-devel-0.10.36-11.el7_9.x86_64.rpm SHA-256: 7b693b097fb74e2016a0cd32d8e0e94e2e0eb60bcfcc223470a198d23f4ed15f
gstreamer-plugins-base-devel-docs-0.10.36-11.el7_9.noarch.rpm SHA-256: cdf847768a9947e31848d49469bb5d7417f855f2db8d9c3ef2049b8ff57fb16f
gstreamer-plugins-base-tools-0.10.36-11.el7_9.x86_64.rpm SHA-256: e3579b760763efe265a51632275de4a7350e87fb1d7db18909bfc856f423ca4c
gstreamer-plugins-good-0.10.31-14.el7_9.i686.rpm SHA-256: 261ae55b75c0aec6a8285886554b9f79d96cf3077af57258dfe4f1fbf060bb84
gstreamer-plugins-good-0.10.31-14.el7_9.x86_64.rpm SHA-256: 6bf504ffbe041087ad508943ebbf30132f76ae074e598d3e8290ec204d134dd9
gstreamer-plugins-good-debuginfo-0.10.31-14.el7_9.i686.rpm SHA-256: f73b071675f7e27ed3f0c0f16b847fb005975d7527a11762da783f54c6e4bf5f
gstreamer-plugins-good-debuginfo-0.10.31-14.el7_9.x86_64.rpm SHA-256: bf83974334bfdbc275032afae5a1707428eb99f91dcfe07b42e99753b41c2d2b
gstreamer-plugins-good-devel-docs-0.10.31-14.el7_9.noarch.rpm SHA-256: dd14090077614404800177ed9baae0e8d6b00a6a5fa5c803b2eded7d82606894

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
gstreamer-plugins-base-0.10.36-11.el7_9.src.rpm SHA-256: 915d5d94e026002974bd2e9420ce540df7c178fa6e0548e886af3785355bd7c7
gstreamer-plugins-good-0.10.31-14.el7_9.src.rpm SHA-256: c714b29860fb0cee16207020d210ac8991dfdab736fa77a2c9969574fcb7b9ea
s390x
gstreamer-plugins-base-0.10.36-11.el7_9.s390.rpm SHA-256: c9a487e598e80d1436ee227b560e3381fd248c9171ccc46d593d9f85c5444ce6
gstreamer-plugins-base-0.10.36-11.el7_9.s390x.rpm SHA-256: d927b1a2a1ef47f653642a499052eed08cf9a13c8be12b6120b9fd80ee00749c
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.s390.rpm SHA-256: a2e1f9756b1fa684f43734d16d9d8ac7f0570e5eb4d7357be6e6a5d4494b4bb0
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.s390.rpm SHA-256: a2e1f9756b1fa684f43734d16d9d8ac7f0570e5eb4d7357be6e6a5d4494b4bb0
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.s390x.rpm SHA-256: 227d95da3c4a3c8da55c592b7cfdc0c51f07cd3d6a520d388973f2109dbc03f9
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.s390x.rpm SHA-256: 227d95da3c4a3c8da55c592b7cfdc0c51f07cd3d6a520d388973f2109dbc03f9
gstreamer-plugins-base-devel-0.10.36-11.el7_9.s390.rpm SHA-256: 222f8e3afb7a7603a67ec98a09fdf3bb4c6a097c5da1ec79a5f846d054699261
gstreamer-plugins-base-devel-0.10.36-11.el7_9.s390x.rpm SHA-256: 4b5196f125e38b783e1dbc59d189e76de9b16fd17919dd29dcc277594cf1f822
gstreamer-plugins-base-devel-docs-0.10.36-11.el7_9.noarch.rpm SHA-256: cdf847768a9947e31848d49469bb5d7417f855f2db8d9c3ef2049b8ff57fb16f
gstreamer-plugins-base-tools-0.10.36-11.el7_9.s390x.rpm SHA-256: c3b2917d8adead23aff1d7cfb27aa3b993fa49d341fd1ab6ea078ff3db406e22
gstreamer-plugins-good-0.10.31-14.el7_9.s390.rpm SHA-256: abbaee7ca450fa65ddf14c470ca0e2ed2584e9361f4b0a08d6cec77e4784d7e8
gstreamer-plugins-good-0.10.31-14.el7_9.s390x.rpm SHA-256: adec35edd3b9043c334d9fc3c5b97c274535d8887e1dd4f866d51a14880350b2
gstreamer-plugins-good-debuginfo-0.10.31-14.el7_9.s390.rpm SHA-256: 19c9438df3b4298e8d7c5a719d2c7543d268866b90f52875c5e3c389a63a1085
gstreamer-plugins-good-debuginfo-0.10.31-14.el7_9.s390x.rpm SHA-256: b177f245ac744b4f89f078886e599190fe470726797e4eb6830c9cf799f1d500
gstreamer-plugins-good-devel-docs-0.10.31-14.el7_9.noarch.rpm SHA-256: dd14090077614404800177ed9baae0e8d6b00a6a5fa5c803b2eded7d82606894

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
gstreamer-plugins-base-0.10.36-11.el7_9.src.rpm SHA-256: 915d5d94e026002974bd2e9420ce540df7c178fa6e0548e886af3785355bd7c7
gstreamer-plugins-good-0.10.31-14.el7_9.src.rpm SHA-256: c714b29860fb0cee16207020d210ac8991dfdab736fa77a2c9969574fcb7b9ea
ppc64
gstreamer-plugins-base-0.10.36-11.el7_9.ppc.rpm SHA-256: f04908adb2aa10a397ba33d278e28d39ad0ec77e41b5d5f46afc1f004b47a0bb
gstreamer-plugins-base-0.10.36-11.el7_9.ppc64.rpm SHA-256: 782c1105a840f506b1ebb40072d200df14ae7ced950fd81a1896ae59462c1232
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.ppc.rpm SHA-256: c236fce79c93b1b6469ecc69b02d3195148dc8fb8aa0a5a935cb6e1abbdbe346
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.ppc.rpm SHA-256: c236fce79c93b1b6469ecc69b02d3195148dc8fb8aa0a5a935cb6e1abbdbe346
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.ppc64.rpm SHA-256: 9abc735fc67c7aa009b9b57fcd300e19f1f539a5d2d10b1c498463b570976a98
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.ppc64.rpm SHA-256: 9abc735fc67c7aa009b9b57fcd300e19f1f539a5d2d10b1c498463b570976a98
gstreamer-plugins-base-devel-0.10.36-11.el7_9.ppc.rpm SHA-256: 966170a2d03f603d89154ae58ab65f8092b68bc0586e2bad04a511f7e3a478b3
gstreamer-plugins-base-devel-0.10.36-11.el7_9.ppc64.rpm SHA-256: 8a70883622967bb6347b6498b696b56dc753548f370e721bc2dbe3530fa6af06
gstreamer-plugins-base-devel-docs-0.10.36-11.el7_9.noarch.rpm SHA-256: cdf847768a9947e31848d49469bb5d7417f855f2db8d9c3ef2049b8ff57fb16f
gstreamer-plugins-base-tools-0.10.36-11.el7_9.ppc64.rpm SHA-256: dfc2dc28b1a7dc73d173c8f890dc21495e665130d2ce8fe64680f8f1cc03bf3b
gstreamer-plugins-good-0.10.31-14.el7_9.ppc.rpm SHA-256: 62a55740e1123010fe37b749d03778e4b9ca9264f87e80916d06a26613c4f1f5
gstreamer-plugins-good-0.10.31-14.el7_9.ppc64.rpm SHA-256: 8449df950ab775c7e10b2198cd837f73aaa6c905c65d8e0019467f8ff8e1d149
gstreamer-plugins-good-debuginfo-0.10.31-14.el7_9.ppc.rpm SHA-256: 8992be4ea6c0707ff98338a5feca19eb634092d9814b254f46c2b054b99e2aac
gstreamer-plugins-good-debuginfo-0.10.31-14.el7_9.ppc64.rpm SHA-256: 6f3049d61327fbaeeaffe2f16d64d565093e640e0bf00335aa3036357fbee51f
gstreamer-plugins-good-devel-docs-0.10.31-14.el7_9.noarch.rpm SHA-256: dd14090077614404800177ed9baae0e8d6b00a6a5fa5c803b2eded7d82606894

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
gstreamer-plugins-base-0.10.36-11.el7_9.src.rpm SHA-256: 915d5d94e026002974bd2e9420ce540df7c178fa6e0548e886af3785355bd7c7
gstreamer-plugins-good-0.10.31-14.el7_9.src.rpm SHA-256: c714b29860fb0cee16207020d210ac8991dfdab736fa77a2c9969574fcb7b9ea
ppc64le
gstreamer-plugins-base-0.10.36-11.el7_9.ppc64le.rpm SHA-256: 043409be37d469748ce6c55e512d686e58a68fc3e6b98c9e4643742798dbfdad
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.ppc64le.rpm SHA-256: 1ec91cc67d3cf6bfe9bfc414467ae5b70a82519fdb9471a3bdc70e03dd5236e1
gstreamer-plugins-base-debuginfo-0.10.36-11.el7_9.ppc64le.rpm SHA-256: 1ec91cc67d3cf6bfe9bfc414467ae5b70a82519fdb9471a3bdc70e03dd5236e1
gstreamer-plugins-base-devel-0.10.36-11.el7_9.ppc64le.rpm SHA-256: 04565ef18d6aa33e34acd96c993b0a6d81f0aafd84ba2dcd86aa180e02437e24
gstreamer-plugins-base-devel-docs-0.10.36-11.el7_9.noarch.rpm SHA-256: cdf847768a9947e31848d49469bb5d7417f855f2db8d9c3ef2049b8ff57fb16f
gstreamer-plugins-base-tools-0.10.36-11.el7_9.ppc64le.rpm SHA-256: eff08e1695e521fd7fe2b09349b60087d3edeffd8de921702993292b2435d49c
gstreamer-plugins-good-0.10.31-14.el7_9.ppc64le.rpm SHA-256: d9b8a630c7eecb0abf1e66af661da1aedff37dc5b6c1b249662f8fab5bdf8dd6
gstreamer-plugins-good-debuginfo-0.10.31-14.el7_9.ppc64le.rpm SHA-256: 4b8c2598ec652cfd3a4e5a1aa1956d897eb2808e8b290e77d5fb16cbb8758f44
gstreamer-plugins-good-devel-docs-0.10.31-14.el7_9.noarch.rpm SHA-256: dd14090077614404800177ed9baae0e8d6b00a6a5fa5c803b2eded7d82606894

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.