ALSA-2026:99090: Important: gstreamer1 security update
Published Nov 11, 2026
·Updated
The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data.
Security Fix(es):
gstreamer: gstreamer: Use-after-free in GStreamer core buffer value deserialization (CVE-2026-125704)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
2 affected componentsFixes available
almalinux/gstreamer1<1.16.1-3.el8_10
1.16.1-3.el8_10
almalinux/gstreamer1-devel<1.16.1-3.el8_10
1.16.1-3.el8_10
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/gstreamer1to a version that resolves this vulnerability.Fixed in 1.16.1-3.el8_10 - Upgrade
Upgrade
almalinux/gstreamer1-develto a version that resolves this vulnerability.Fixed in 1.16.1-3.el8_10
Event History
Nov 11, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software