ELSA-2026-55433

ELSA-2026-55433 - gstreamer1-plugins-bad-free security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-17

Description

[1.26.7-2.7]
- Fix ADPCM decoder input validation (CVE-2026-19387)
Resolves: RHEL-235500

[1.26.7-2.5]
- Fix rfbsrc hextile and color read handling for non-32bpp
pixel formats (CVE-2026-59691)
Resolves: RHEL-193550

[1.26.7-2.4]
- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
Resolves: RHEL-184391

[1.26.7-2.3]
- Fix for CVE-2026-52719
Resolves: RHEL-184406

[1.26.7-2.2]
- Fix integer overflows in VMnc decoder (CVE-2026-52722)
Resolves: RHEL-184425

[1.26.7-2.1]
- Fix for CVE-2026-52720: validate framebuffer update rectangles
in VNC source plugin's RFB decoder
Resolves: RHEL-184462

Related CVEs

CVE-2026-19387

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.7.src.rpm	a1198d0626dc14cb35114a3663acca122641437839c4322ea28daf324e7f53e3	-	ol10_aarch64_appstream
	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.7.src.rpm	a1198d0626dc14cb35114a3663acca122641437839c4322ea28daf324e7f53e3	-	ol10_aarch64_codeready_builder
	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.7.aarch64.rpm	44d8fd7ea6e26cb4daf56b3e19f528b12c5a9e09dc279ef061e3b67b8ea13067	-	ol10_aarch64_appstream
	gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.7.aarch64.rpm	bf02ae3f8fb0ea862f9695d04cebde48618473b2427cd1931eba9222f17d437d	-	ol10_aarch64_codeready_builder
	gstreamer1-plugins-bad-free-libs-1.26.7-2.el10_2.7.aarch64.rpm	2f1f1b71037a03fa4dd0fbf6f5ba0745bca47c7968da7a5c6c150256b80a63c1	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.7.src.rpm	a1198d0626dc14cb35114a3663acca122641437839c4322ea28daf324e7f53e3	-	ol10_x86_64_appstream
	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.7.src.rpm	a1198d0626dc14cb35114a3663acca122641437839c4322ea28daf324e7f53e3	-	ol10_x86_64_codeready_builder
	gstreamer1-plugins-bad-free-1.26.7-2.el10_2.7.x86_64.rpm	6ecbae4d9a616575f6373b1f7e0e2e16d628f106bc555722b2c5f5eafdcb4509	-	ol10_x86_64_appstream
	gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.7.x86_64.rpm	adf9702732bc0db6ac0fd40f54e3c77bcef4a4537b0097ba47578ceccc46770a	-	ol10_x86_64_codeready_builder
	gstreamer1-plugins-bad-free-libs-1.26.7-2.el10_2.7.x86_64.rpm	9b0e3d2d19229bac0d1768cc41bbcdcf8f2cbbb83ecbefe767a60fcbac3883b8	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team