This security update addresses two high-severity vulnerabilities (CVE-2026-52720, CVSS 8.8, and CVE-2026-52722, CVSS 7.1) in the gstreamer1-plugins-bad-free package for GStreamer, involving a heap buffer overflow via a crafted VNC server rectangle and a signed integer overflow in VMnc decoder cursor payload handling. The update is rated Important and applies to Red Hat Enterprise Linux 7 Extended Lifecycle Support. Affected systems should apply the provided package update, specifically version 1.10.4-6.el7_9, to remediate the issues.
Red Hat Product Errata RHSA-2026:47176 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47176 - Security Advisory Overview Updated Packages Synopsis Important: gstreamer1-plugins-bad-free security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb (CVE-2026-52720) gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling (CVE-2026-52722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2486731 - CVE-2026-52720 gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb BZ - 2486733 - CVE-2026-52722 gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling CVEs CVE-2026-52720 CVE-2026-52722 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM gstreamer1-plugins-bad-free-1.10.4-6.el7_9.src.rpm SHA-256: f263e81a866b7d800a40a2535752b23dd1fbb25fc1bbed302d797f60f1477c92 x86_64 gstreamer1-plugins-bad-free-1.10.4-6.el7_9.i686.rpm SHA-256: 51df9306fa441cb590a1407f98ec4042861372488f781e63d803d9b72beb4284 gstreamer1-plugins-bad-free-1.10.4-6.el7_9.x86_64.rpm SHA-256: 5293df6b246926ac38d607944b67bf275c27aba12b3324a58e22819328fe396c gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.i686.rpm SHA-256: 801ef544cd5a0ece1b36eeb4649340331996de1a8fbd238d96277f97dc387d17 gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.i686.rpm SHA-256: 801ef544cd5a0ece1b36eeb4649340331996de1a8fbd238d96277f97dc387d17 gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.x86_64.rpm SHA-256: ba00d17fdc00c053d1816bad107a04a85313c91efb4eeb744e5088d86b966cb0 gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.x86_64.rpm SHA-256: ba00d17fdc00c053d1816bad107a04a85313c91efb4eeb744e5088d86b966cb0 gstreamer1-plugins-bad-free-devel-1.10.4-6.el7_9.i686.rpm SHA-256: 990c2d03b52db8885ae22ca64c5acad8dabe01882489cc24542755cc418e8209 gstreamer1-plugins-bad-free-devel-1.10.4-6.el7_9.x86_64.rpm SHA-256: 1873f5e349ead4d37508cfc07b5b7a929a696a38673fb589881b933317cab775 gstreamer1-plugins-bad-free-gtk-1.10.4-6.el7_9.i686.rpm SHA-256: 9c957830f35f2ea49188a96cc4d445469b7a209f62ba1128f74d84822cbe66fb gstreamer1-plugins-bad-free-gtk-1.10.4-6.el7_9.x86_64.rpm SHA-256: 02d94c790b1eb66f92ff55162c55a85b2638cc029e54d7ac189f9471ef19aba9 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM gstreamer1-plugins-bad-free-1.10.4-6.el7_9.src.rpm SHA-256: f263e81a866b7d800a40a2535752b23dd1fbb25fc1bbed302d797f60f1477c92 s390x gstreamer1-plugins-bad-free-1.10.4-6.el7_9.s390.rpm SHA-256: 4994b759eb2ed404b3361bf26c4ee69b03f759ad3b9b4e695591d431fa45be44 gstreamer1-plugins-bad-free-1.10.4-6.el7_9.s390x.rpm SHA-256: 342da8fefdc12706fb9f2258e7cd5bcdd748f9790e0d57718ee164ef40994851 gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.s390.rpm SHA-256: a3404ea865a602070c69c4ee2a91073125a243ee882cb74e3a9a9be70d1f8b4b gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.s390.rpm SHA-256: a3404ea865a602070c69c4ee2a91073125a243ee882cb74e3a9a9be70d1f8b4b gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.s390x.rpm SHA-256: 05f3b6096ec339c6ede1981c901600ea16742a04ba4d3fafd98b2ef30b70407c gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.s390x.rpm SHA-256: 05f3b6096ec339c6ede1981c901600ea16742a04ba4d3fafd98b2ef30b70407c gstreamer1-plugins-bad-free-devel-1.10.4-6.el7_9.s390.rpm SHA-256: 39e1cb65d4b3bc60cc21ffb7069b5fe3fec7e7086253740c82284d673f566278 gstreamer1-plugins-bad-free-devel-1.10.4-6.el7_9.s390x.rpm SHA-256: 255757efe059c7ab1687bb3ac04477e0d4c6a5f4b26bfdbb3e47bc6b86366103 gstreamer1-plugins-bad-free-gtk-1.10.4-6.el7_9.s390.rpm SHA-256: a3ffb50f94b1a5b0a4ff41dae48d56c9f39d26067e28deafce79fedbd642e46e gstreamer1-plugins-bad-free-gtk-1.10.4-6.el7_9.s390x.rpm SHA-256: f650bafbf638e4ba11da7af76cb8da3ddf92649791be9401d8dd1a834592b817 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM gstreamer1-plugins-bad-free-1.10.4-6.el7_9.src.rpm SHA-256: f263e81a866b7d800a40a2535752b23dd1fbb25fc1bbed302d797f60f1477c92 ppc64 gstreamer1-plugins-bad-free-1.10.4-6.el7_9.ppc.rpm SHA-256: e198924035974b0d959381707a079334b9767cfa0f5bc2beaf753ec5e496c1a2 gstreamer1-plugins-bad-free-1.10.4-6.el7_9.ppc64.rpm SHA-256: a3342ccfdafa6220e6ceee1f6dc9512dd3719656c7d7ef45b2f98dbcda5961f7 gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.ppc.rpm SHA-256: 586f9a588acd426f2b2d5c4048b4f96add9c8240641eb0eed9cff2bee8e7bd7f gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.ppc.rpm SHA-256: 586f9a588acd426f2b2d5c4048b4f96add9c8240641eb0eed9cff2bee8e7bd7f gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.ppc64.rpm SHA-256: 810d9a83df59461d7341a187e2726c9f83c3070da44a727f2a7bcf57dd4c0c45 gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.ppc64.rpm SHA-256: 810d9a83df59461d7341a187e2726c9f83c3070da44a727f2a7bcf57dd4c0c45 gstreamer1-plugins-bad-free-devel-1.10.4-6.el7_9.ppc.rpm SHA-256: 82acf767f8cd82fa25ddc2156549e9b283a5a4d6288943d317adc165f66a1aa1 gstreamer1-plugins-bad-free-devel-1.10.4-6.el7_9.ppc64.rpm SHA-256: 89a0388f0a1688951478afa8a08e4dd239729f5645dff75c2c62d49a69d2f8d6 gstreamer1-plugins-bad-free-gtk-1.10.4-6.el7_9.ppc.rpm SHA-256: e5847f7496a1e2f0ffe135c9f875e0937fd364dfe476893f2884b93a837f90bb gstreamer1-plugins-bad-free-gtk-1.10.4-6.el7_9.ppc64.rpm SHA-256: d7d78c86b4673843c440ce852a11f4c42c49e7c6d0731859967cd120120e29a2 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 SRPM gstreamer1-plugins-bad-free-1.10.4-6.el7_9.src.rpm SHA-256: f263e81a866b7d800a40a2535752b23dd1fbb25fc1bbed302d797f60f1477c92 ppc64le gstreamer1-plugins-bad-free-1.10.4-6.el7_9.ppc64le.rpm SHA-256: f7efe54c4b8f573b01fd93246f25234578cf51186db2605d2293d8ad21258337 gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.ppc64le.rpm SHA-256: 001fcb278c821f3a714800ba28cb59ae5fcfe6193df08fb585102556e3396693 gstreamer1-plugins-bad-free-debuginfo-1.10.4-6.el7_9.ppc64le.rpm SHA-256: 001fcb278c821f3a714800ba28cb59ae5fcfe6193df08fb585102556e3396693 gstreamer1-plugins-bad-free-devel-1.10.4-6.el7_9.ppc64le.rpm SHA-256: 368ab465259862d25f074bfd634899334842a10045ff0760dffed7b98ac5bc91 gstreamer1-plugins-bad-free-gtk-1.10.4-6.el7_9.ppc64le.rpm SHA-256: 306f69859c81d389bd27934d50081e4bec5d189d5a441ef2482e3aa55fdc82dc The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .