Red Hat Product Errata RHSA-2026:99033 - Security Advisory
Issued:
2026-11-11
Updated:
2026-11-11

RHSA-2026:99033 - Security Advisory

Synopsis

Important: gstreamer1-plugins-base security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 10.2 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

  • gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize (CVE-2026-86476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x

Fixes

  • BZ - 2529510 - CVE-2026-86476 gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
x86_64
gstreamer1-plugins-base-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: 3fb9ca6934222a4bc7e4c05fd1cd14d05352e7b30316c36a539136a5cc04e56b
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: d4e0c7cdfc216c2e517aa94062b80089a8d6bc2969b6412751e82a721f1d1f50
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: 00f82ab25802b4f2e9e859a9f29a472572f0ed69e1dff1a50504801aa6920b90
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: 4d7bc911b3b6409435716578cd7fa122549bda95c88d06eca65e4b54a7f42687
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: bb20c8dbbd5f2a18dc675fc7566353522e33975f17f3253b3020e7035b2302d2
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: b27a0e6f2ab7827db03db9d6c729c666d2b6fe4fa7669e58f7a965af53fdfc50

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
s390x
gstreamer1-plugins-base-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 50310ac2bba173451839a241e1e5231859e0368cb4f6329dd6e3ff11bd0c0df2
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.s390x.rpm SHA-256: de8afd78f16bffdbf3a07150b01c2a977aed824c96c5d092c27b4f5d1e1306ad
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 35bbb07b6894644d259259a7ec47fea07605e956efd3a55ccae0fcc2dec9ebf6
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 503d95bf18fe002c66de2bf58c689e42bba4ff27a391e4b65b888d37479f0783
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 3fc955b1668d4ef54e637103da2c7f9139898c28f4530a9a7d0a7b0339fcef27
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 57a40817c2e4cdca820b7bec9e9a675692f18f70b319ee5811234dee89d8ed4b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
ppc64le
gstreamer1-plugins-base-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 4769e812019f032ec616f43de5bd96b3a11ce50310ccf6443f5f89a2e3405b76
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: a992406d88b991b4a2c52a8531ddf892da42058763845ff22445877a61a083e2
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 0325142ea4a6af13f0803d9041af8075f713e2ca5b0a024717668bc8574b5399
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 42d65be343fefe684c87504c53b2c4a29c2fd06df2ce0a2b3338250ee1d2cfbf
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 74d6f248afd40a45091e11c1f7d38969524de61141c4c1f84d9e75b9584fac86
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 8b880a471a84a8ad84d24fb9ccd852fe7f813711ea45afe1d05f9c305775e89d

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
aarch64
gstreamer1-plugins-base-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 6c2b1378afaf13da9984bbfe3e09ed34d3c08e00dccbb95b7a9cc63244acbbe4
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 65a50dcc0d45828b83caeebad50bcd21ed1525b133c05aba21e3745bc5c4c121
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: d341426a6a1eac003ea0babf4968803a3088b95f8adfd45e1b9859fb281fce67
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 195f58b45704c4895e767c2ca1155f27b73ca04fec3e6858fce395667e5ec3b1
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 9e0273a9af9416356230d028af66de2ac31d3b18e38fccb50f353b45489f09ca
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: b13997b123624f272797db7aeb9e66255f509e59cf94610c36324aa4cfe5d346

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
aarch64
gstreamer1-plugins-base-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 6c2b1378afaf13da9984bbfe3e09ed34d3c08e00dccbb95b7a9cc63244acbbe4
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 65a50dcc0d45828b83caeebad50bcd21ed1525b133c05aba21e3745bc5c4c121
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: d341426a6a1eac003ea0babf4968803a3088b95f8adfd45e1b9859fb281fce67
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 195f58b45704c4895e767c2ca1155f27b73ca04fec3e6858fce395667e5ec3b1
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 9e0273a9af9416356230d028af66de2ac31d3b18e38fccb50f353b45489f09ca
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: b13997b123624f272797db7aeb9e66255f509e59cf94610c36324aa4cfe5d346

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
s390x
gstreamer1-plugins-base-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 50310ac2bba173451839a241e1e5231859e0368cb4f6329dd6e3ff11bd0c0df2
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.s390x.rpm SHA-256: de8afd78f16bffdbf3a07150b01c2a977aed824c96c5d092c27b4f5d1e1306ad
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 35bbb07b6894644d259259a7ec47fea07605e956efd3a55ccae0fcc2dec9ebf6
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 503d95bf18fe002c66de2bf58c689e42bba4ff27a391e4b65b888d37479f0783
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 3fc955b1668d4ef54e637103da2c7f9139898c28f4530a9a7d0a7b0339fcef27
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 57a40817c2e4cdca820b7bec9e9a675692f18f70b319ee5811234dee89d8ed4b

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
ppc64le
gstreamer1-plugins-base-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 4769e812019f032ec616f43de5bd96b3a11ce50310ccf6443f5f89a2e3405b76
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: a992406d88b991b4a2c52a8531ddf892da42058763845ff22445877a61a083e2
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 0325142ea4a6af13f0803d9041af8075f713e2ca5b0a024717668bc8574b5399
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 42d65be343fefe684c87504c53b2c4a29c2fd06df2ce0a2b3338250ee1d2cfbf
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 74d6f248afd40a45091e11c1f7d38969524de61141c4c1f84d9e75b9584fac86
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 8b880a471a84a8ad84d24fb9ccd852fe7f813711ea45afe1d05f9c305775e89d

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
x86_64
gstreamer1-plugins-base-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: 3fb9ca6934222a4bc7e4c05fd1cd14d05352e7b30316c36a539136a5cc04e56b
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: d4e0c7cdfc216c2e517aa94062b80089a8d6bc2969b6412751e82a721f1d1f50
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: 00f82ab25802b4f2e9e859a9f29a472572f0ed69e1dff1a50504801aa6920b90
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: 4d7bc911b3b6409435716578cd7fa122549bda95c88d06eca65e4b54a7f42687
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: bb20c8dbbd5f2a18dc675fc7566353522e33975f17f3253b3020e7035b2302d2
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: b27a0e6f2ab7827db03db9d6c729c666d2b6fe4fa7669e58f7a965af53fdfc50

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
x86_64
gstreamer1-plugins-base-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: 3fb9ca6934222a4bc7e4c05fd1cd14d05352e7b30316c36a539136a5cc04e56b
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: d4e0c7cdfc216c2e517aa94062b80089a8d6bc2969b6412751e82a721f1d1f50
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: 00f82ab25802b4f2e9e859a9f29a472572f0ed69e1dff1a50504801aa6920b90
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: 4d7bc911b3b6409435716578cd7fa122549bda95c88d06eca65e4b54a7f42687
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: bb20c8dbbd5f2a18dc675fc7566353522e33975f17f3253b3020e7035b2302d2
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.x86_64.rpm SHA-256: b27a0e6f2ab7827db03db9d6c729c666d2b6fe4fa7669e58f7a965af53fdfc50

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
aarch64
gstreamer1-plugins-base-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 6c2b1378afaf13da9984bbfe3e09ed34d3c08e00dccbb95b7a9cc63244acbbe4
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 65a50dcc0d45828b83caeebad50bcd21ed1525b133c05aba21e3745bc5c4c121
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: d341426a6a1eac003ea0babf4968803a3088b95f8adfd45e1b9859fb281fce67
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 195f58b45704c4895e767c2ca1155f27b73ca04fec3e6858fce395667e5ec3b1
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: 9e0273a9af9416356230d028af66de2ac31d3b18e38fccb50f353b45489f09ca
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.aarch64.rpm SHA-256: b13997b123624f272797db7aeb9e66255f509e59cf94610c36324aa4cfe5d346

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
ppc64le
gstreamer1-plugins-base-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 4769e812019f032ec616f43de5bd96b3a11ce50310ccf6443f5f89a2e3405b76
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: a992406d88b991b4a2c52a8531ddf892da42058763845ff22445877a61a083e2
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 0325142ea4a6af13f0803d9041af8075f713e2ca5b0a024717668bc8574b5399
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 42d65be343fefe684c87504c53b2c4a29c2fd06df2ce0a2b3338250ee1d2cfbf
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 74d6f248afd40a45091e11c1f7d38969524de61141c4c1f84d9e75b9584fac86
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.ppc64le.rpm SHA-256: 8b880a471a84a8ad84d24fb9ccd852fe7f813711ea45afe1d05f9c305775e89d

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2

SRPM
gstreamer1-plugins-base-1.26.7-2.el10_2.3.src.rpm SHA-256: 0b2ac250a1277b7e2be8f720b7401b263ffb9d1e4c026077cd85c82da7ac6d03
s390x
gstreamer1-plugins-base-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 50310ac2bba173451839a241e1e5231859e0368cb4f6329dd6e3ff11bd0c0df2
gstreamer1-plugins-base-debuginfo-1.26.7-2.el10_2.3.s390x.rpm SHA-256: de8afd78f16bffdbf3a07150b01c2a977aed824c96c5d092c27b4f5d1e1306ad
gstreamer1-plugins-base-debugsource-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 35bbb07b6894644d259259a7ec47fea07605e956efd3a55ccae0fcc2dec9ebf6
gstreamer1-plugins-base-devel-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 503d95bf18fe002c66de2bf58c689e42bba4ff27a391e4b65b888d37479f0783
gstreamer1-plugins-base-tools-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 3fc955b1668d4ef54e637103da2c7f9139898c28f4530a9a7d0a7b0339fcef27
gstreamer1-plugins-base-tools-debuginfo-1.26.7-2.el10_2.3.s390x.rpm SHA-256: 57a40817c2e4cdca820b7bec9e9a675692f18f70b319ee5811234dee89d8ed4b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.