RHSA-2026:54660: Important: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.Security Fix(es): gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691) gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in opensslverifycallback (CVE-2026-59692) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-freeto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6 - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-free-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6 - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-free-debugsourceto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6 - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-free-libsto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6 - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-free-libs-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6 - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-freeto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-free-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-free-debugsourceto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-free-libsto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-free-libs-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-free-develto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6 - Upgrade
Upgrade
redhat/gstreamer1-plugins-bad-free-develto a version that resolves this vulnerability.Fixed in 1.22.12-5.el9_6.6.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:54660?
The severity of RHSA-2026:54660 is rated as important.
What vulnerabilities are addressed in RHSA-2026:54660?
RHSA-2026:54660 addresses a security vulnerability in the gstreamer1-plugins-bad-free package related to a heap out-of-bounds write in the rfbsrc/librfb component.
How do I fix RHSA-2026:54660?
To fix RHSA-2026:54660, you need to update the gstreamer1-plugins-bad-free package to the latest version provided by Red Hat.
Which systems are affected by RHSA-2026:54660?
Systems running the gstreamer1-plugins-bad-free package are affected by RHSA-2026:54660.
Is RHSA-2026:54660 related to any specific CVE?
Yes, RHSA-2026:54660 is related to CVE identifiers associated with the heap out-of-bounds write vulnerability.