Red Hat Product Errata RHSA-2026:47179 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47179 - Security Advisory Overview Updated Packages Synopsis Important: gstreamer1-plugins-bad-free security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691) gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2497343 - CVE-2026-59691 gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer BZ - 2497344 - CVE-2026-59692 gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback CVEs CVE-2026-59691 CVE-2026-59692 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.src.rpm SHA-256: 1a406ef3a55a36574ff864b61332695537e62064ba683551f80d33aca945c05b x86_64 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.i686.rpm SHA-256: 1f084bdbdb6ea3969a9cb9526ec5774594ddb86fe11607ad8af19c4d1b463548 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.x86_64.rpm SHA-256: fdff5fc4a039752eb382e5b50a3e58c23f6fd909b122f9704865217f5bff5566 gstreamer1-plugins-bad-free-debuginfo-1.22.12-7.el9_8.3.i686.rpm SHA-256: 49639bde51bc73427ce5634ae00f84e53b5b821939681c1aaefa5c16a289d61e gstreamer1-plugins-bad-free-debuginfo-1.22.12-7.el9_8.3.x86_64.rpm SHA-256: 358192ba3cf5e6eee23b57b1706bddf40adc9fbd33093647f2e089f7d414dcd9 gstreamer1-plugins-bad-free-debugsource-1.22.12-7.el9_8.3.i686.rpm SHA-256: 5ce9bf9f1dee123aead497bdc1e2672d1a4c292021a87ebea68fdb2fcbbb47f7 gstreamer1-plugins-bad-free-debugsource-1.22.12-7.el9_8.3.x86_64.rpm SHA-256: d5d0c596b09e3c313b9158b3a78e67511260a16c44866ac1cef9920c208d6262 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.3.i686.rpm SHA-256: 46e71c982535f9f99b627eafeb88a332eeeab2025b3aab0a63dded35bbef58f6 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.3.x86_64.rpm SHA-256: 530beaa86e40f76bc7a06b85a48997c01d86484d55aadb0eb7a78bffff2ae5eb gstreamer1-plugins-bad-free-libs-debuginfo-1.22.12-7.el9_8.3.i686.rpm SHA-256: 4a040553e6b0fe366ff6cd5eb38b07f1f22a27d306f3e2b720b9e4ee8c00d7d2 gstreamer1-plugins-bad-free-libs-debuginfo-1.22.12-7.el9_8.3.x86_64.rpm SHA-256: 4e5e9938d62f9f8409b21adf3c82165360677ede922a173911f45ec4ab4259cf Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.src.rpm SHA-256: 1a406ef3a55a36574ff864b61332695537e62064ba683551f80d33aca945c05b x86_64 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.i686.rpm SHA-256: 1f084bdbdb6ea3969a9cb9526ec5774594ddb86fe11607ad8af19c4d1b463548 gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.x86_64.rpm SHA-256: fdff5fc4a039752eb382e5b50a3e58c23f6fd909b122f9704865217f5bff5566 gstreamer1-plugins-bad-free-debuginfo-1.22.12-7.el9_8.3.i686.rpm SHA-256: 49639bde51bc73427ce5634ae00f84e53b5b821939681c1aaefa5c16a289d61e gstreamer1-plugins-bad-free-debuginfo-1.22.12-7.el9_8.3.x86_64.rpm SHA-256: 358192ba3cf5e6eee23b57b1706bddf40adc9fbd33093647f2e089f7d414dcd9 gstreamer1-plugins-bad-free-debugsource-1.22.12-7.el9_8.3.i686.rpm SHA-256: 5ce9bf9f1dee123aead497bdc1e2672d1a4c292021a87ebea68fdb2fcbbb47f7 gstreamer1-plugins-bad-free-debugsource-1.22.12-7.el9_8.3.x86_64.rpm SHA-256: d5d0c596b09e3c313b9158b3a78e67511260a16c44866ac1cef9920c208d6262 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.3.i686.rpm SHA-256: 46e71c982535f9f99b627eafeb88a332eeeab2025b3aab0a63dded35bbef58f6 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.3.x86_64.rpm SHA-256: 530beaa86e40f76bc7a06b85a48997c01d86484d55aadb0eb7a78bffff2ae5eb gstreamer1-plugins-bad-free-libs-debuginfo-1.22.12-7.el9_8.3.i686.rpm SHA-256: 4a040553e6b0fe366ff6cd5eb38b07f1f22a27d306f3e2b720b9e4ee8c00d7d2 gstreamer1-plugins-bad-free-libs-debuginfo-1.22.12-7.el9_8.3.x86_64.rpm SHA-256: 4e5e9938d62f9f8409b21adf3c82165360677ede922a173911f45ec4ab4259cf Red Hat Enterprise Linux for IBM z Systems 9 SRPM gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.src.rpm SHA-256: 1a406ef3a55a36574ff864b61332695537e62064ba683551f80d33aca945c05b s390x gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.s390x.rpm SHA-256: 9f2961791a7640bcc2f65d56553a06a48be36c76293eb281c40231248875d63a gstreamer1-plugins-bad-free-debuginfo-1.22.12-7.el9_8.3.s390x.rpm SHA-256: 61e2266f6fb1e194c9f01330e29588c9e37438922c0075c8062c0bf35118d6df gstreamer1-plugins-bad-free-debugsource-1.22.12-7.el9_8.3.s390x.rpm SHA-256: 5a8f0fc58d6a0d812d3f95597d36550b18d5c82177ceac993eb40aa04046b08b gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.3.s390x.rpm SHA-256: fb85a3c2de00ad9e4dcec68687460461c3b8150124518ddb4c8995531e25b3d0 gstreamer1-plugins-bad-free-libs-debuginfo-1.22.12-7.el9_8.3.s390x.rpm SHA-256: c8a602b968cb15be75bef86fb9a7a6e9b21b25c703584eea9b7b7916e6aa9f28 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.src.rpm SHA-256: 1a406ef3a55a36574ff864b61332695537e62064ba683551f80d33aca945c05b s390x gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.s390x.rpm SHA-256: 9f2961791a7640bcc2f65d56553a06a48be36c76293eb281c40231248875d63a gstreamer1-plugins-bad-free-debuginfo-1.22.12-7.el9_8.3.s390x.rpm SHA-256: 61e2266f6fb1e194c9f01330e29588c9e37438922c0075c8062c0bf35118d6df gstreamer1-plugins-bad-free-debugsource-1.22.12-7.el9_8.3.s390x.rpm SHA-256: 5a8f0fc58d6a0d812d3f95597d36550b18d5c82177ceac993eb40aa04046b08b gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.3.s390x.rpm SHA-256: fb85a3c2de00ad9e4dcec68687460461c3b8150124518ddb4c8995531e25b3d0 gstreamer1-plugins-bad-free-libs-debuginfo-1.22.12-7.el9_8.3.s390x.rpm SHA-256: c8a602b968cb15be75bef86fb9a7a6e9b21b25c703584eea9b7b7916e6aa9f28 Red Hat Enterprise Linux for Power, little endian 9 SRPM gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.src.rpm SHA-256: 1a406ef3a55a36574ff864b61332695537e62064ba683551f80d33aca945c05b ppc64le gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.ppc64le.rpm SHA-256: 73eb82654b29c6a43c02a57735a99d3d699d837ea3b52d9130e4d36934312ad9 gstreamer1-plugins-bad-free-debuginfo-1.22.12-7.el9_8.3.ppc64le.rpm SHA-256: bcd31f27eff793b8704a95a1b59efb56d6207789c7973ee7a001f824e7cd9d26 gstreamer1-plugins-bad-free-debugsource-1.22.12-7.el9_8.3.ppc64le.rpm SHA-256: 21d875af1848e152783c4d6a638b6d3bc6d339446b177264c521a4f3fa960589 gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.3.ppc64le.rpm SHA-256: e9f1e961d61a14b632aebb722daf8af71defca8cd5ad333f3346fb8c79c6d770 gstreamer1-plugins-bad-free-libs-debuginfo-1.22.12-7.el9_8.3.ppc64le.rpm SHA-256: 133dfcbb21d721c226da81338f115c43a56d7b2a71e6e04162542a3c666d82e4 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.src.rpm SHA-256: 1a406ef3a55a36574ff864b61332695537e62064ba683551f80d33aca945c05b ppc64le gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.ppc64le.rpm SHA-256: 73eb82654b29c6a43c02a57735a99d3d699d837ea3b52d9130e4d36934312ad9 gstreamer1-plugins-bad-free-debuginfo-1.22.12-7.el9_8.3.ppc64le.rpm SHA-256: bcd31f27eff7