ELSA-2026-36749

ELSA-2026-36749 - gstreamer1-plugins-bad-free security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-16

Description

[1.26.7-2.4]
- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
Resolves: RHEL-184391

[1.26.7-2.3]
- Fix for CVE-2026-52719
Resolves: RHEL-184406

[1.26.7-2.2]
- Fix integer overflows in VMnc decoder (CVE-2026-52722)
Resolves: RHEL-184425

[1.26.7-2.1]
- Fix for CVE-2026-52720: validate framebuffer update rectangles
in VNC source plugin's RFB decoder
Resolves: RHEL-184462

Related CVEs

CVE-2026-52718

CVE-2026-52719

CVE-2026-52720

CVE-2026-52722

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.4.src.rpm	4c6af453280928b42ff7a907263780a450728378570aa1908277f3f2903ccfb8	-	ol10_aarch64_appstream
	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.4.src.rpm	4c6af453280928b42ff7a907263780a450728378570aa1908277f3f2903ccfb8	-	ol10_aarch64_codeready_builder
	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.4.aarch64.rpm	51678baab63d3324669e8921bc9b0a9a0ea150169d4582abd6c6d11c1c2d8537	-	ol10_aarch64_appstream
	gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.4.aarch64.rpm	93b3febeb739d8b3d9af50c8cf28ddc39ba2088e607a82f07a4a78edf1b54192	-	ol10_aarch64_codeready_builder
	gstreamer1-plugins-bad-free-libs-1.26.7-2.el10_2.4.aarch64.rpm	ea16f626500704d7ae2001b5937efb1a7179a5df6ea96695b7a0f3a3def9ce16	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.4.src.rpm	4c6af453280928b42ff7a907263780a450728378570aa1908277f3f2903ccfb8	-	ol10_x86_64_appstream
	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.4.src.rpm	4c6af453280928b42ff7a907263780a450728378570aa1908277f3f2903ccfb8	-	ol10_x86_64_codeready_builder
	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.4.x86_64.rpm	cd593983b407f7cb75b82c4d6c2cefcf9f2cf850b89b95bf8c4472a19d9aa7e9	-	ol10_x86_64_appstream
	gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.4.x86_64.rpm	482ef5579faaaf7829bdaed196e15c9b61d0f4517d33e85dc570e33c92e54438	-	ol10_x86_64_codeready_builder
	gstreamer1-plugins-bad-free-libs-1.26.7-2.el10_2.4.x86_64.rpm	1a690aa645e22f10938be15a741c25014434f4aa1ca7d783e709a681acc04aae	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team