Red Hat Product Errata RHSA-2026:50691 - Security Advisory Issued: 2026-08-05 Updated: 2026-08-05 RHSA-2026:50691 - Security Advisory Overview Updated Packages Synopsis Moderate: gstreamer1-plugins-ugly-free security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-ugly-free is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL. Security Fix(es): gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header parser (CVE-2026-53703) gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer FILEINFO metadata parser (CVE-2026-53704) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Fixes BZ - 2487613 - CVE-2026-53703 gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header parser BZ - 2487614 - CVE-2026-53704 gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer FILEINFO metadata parser CVEs CVE-2026-53703 CVE-2026-53704 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.src.rpm SHA-256: 2674ddbb86a568c53b05a53ee801a9b3786078a45742dec0d255ee829884dc15 x86_64 gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.i686.rpm SHA-256: adfa4c70234beb582b2fd3cfb5e03e3c99cb95618f21357380cd362e3a11ab7c gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: b9e84f592a3b95f43dd49560475f053775453c01167084c4e961d861b197ebd4 gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.i686.rpm SHA-256: 107c453b726e58d87b881749f975ca12dc7aeaeb54c139eecad35b5e88f9df7b gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: 8ef6fb6f20e72af526ad7711bab06006151215993a5bb260c12ec56ed685a2b0 gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.i686.rpm SHA-256: a543680203034177a898cdead5396876a42fd12c3ce95b3c049f0cebaa4c957a gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: d3ae425e4c77baa8f8798621b08f907c75794fac10f7a68bbc355fbdb149d073 Red Hat Enterprise Linux Server - AUS 9.6 SRPM gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.src.rpm SHA-256: 2674ddbb86a568c53b05a53ee801a9b3786078a45742dec0d255ee829884dc15 x86_64 gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.i686.rpm SHA-256: adfa4c70234beb582b2fd3cfb5e03e3c99cb95618f21357380cd362e3a11ab7c gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: b9e84f592a3b95f43dd49560475f053775453c01167084c4e961d861b197ebd4 gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.i686.rpm SHA-256: 107c453b726e58d87b881749f975ca12dc7aeaeb54c139eecad35b5e88f9df7b gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: 8ef6fb6f20e72af526ad7711bab06006151215993a5bb260c12ec56ed685a2b0 gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.i686.rpm SHA-256: a543680203034177a898cdead5396876a42fd12c3ce95b3c049f0cebaa4c957a gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: d3ae425e4c77baa8f8798621b08f907c75794fac10f7a68bbc355fbdb149d073 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.src.rpm SHA-256: 2674ddbb86a568c53b05a53ee801a9b3786078a45742dec0d255ee829884dc15 ppc64le gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.ppc64le.rpm SHA-256: 852a1f69329c9f42873a4d0cea652c5e4b92d11faf48b943a6666e5d18e0ceaf gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.ppc64le.rpm SHA-256: 519815225549828dc57a8071b111f4270a770ad3fd11f535345ec1011942cb92 gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.ppc64le.rpm SHA-256: cc932a04aa1b4f352a31c64238818110edda70d9ef0734ce5fad9b5d367fad60 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.src.rpm SHA-256: 2674ddbb86a568c53b05a53ee801a9b3786078a45742dec0d255ee829884dc15 aarch64 gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.aarch64.rpm SHA-256: c9440aa7d54e255bf13cdd002acc8767465e0673ab49035f9f8494b45bd9c651 gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.aarch64.rpm SHA-256: c06dcd49d4aea81fae8d5aa23e884db90f3b5b7690d061109efd18c489c82ada gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.aarch64.rpm SHA-256: b8f48e2d3dbd41a1fab025a39242e64b5416fe58cd7e8d3b84ea46adeea95abd Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 SRPM gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.src.rpm SHA-256: 2674ddbb86a568c53b05a53ee801a9b3786078a45742dec0d255ee829884dc15 ppc64le gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.ppc64le.rpm SHA-256: 852a1f69329c9f42873a4d0cea652c5e4b92d11faf48b943a6666e5d18e0ceaf gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.ppc64le.rpm SHA-256: 519815225549828dc57a8071b111f4270a770ad3fd11f535345ec1011942cb92 gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.ppc64le.rpm SHA-256: cc932a04aa1b4f352a31c64238818110edda70d9ef0734ce5fad9b5d367fad60 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 SRPM gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.src.rpm SHA-256: 2674ddbb86a568c53b05a53ee801a9b3786078a45742dec0d255ee829884dc15 x86_64 gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.i686.rpm SHA-256: adfa4c70234beb582b2fd3cfb5e03e3c99cb95618f21357380cd362e3a11ab7c gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: b9e84f592a3b95f43dd49560475f053775453c01167084c4e961d861b197ebd4 gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.i686.rpm SHA-256: 107c453b726e58d87b881749f975ca12dc7aeaeb54c139eecad35b5e88f9df7b gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: 8ef6fb6f20e72af526ad7711bab06006151215993a5bb260c12ec56ed685a2b0 gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.i686.rpm SHA-256: a543680203034177a898cdead5396876a42fd12c3ce95b3c049f0cebaa4c957a gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: d3ae425e4c77baa8f8798621b08f907c75794fac10f7a68bbc355fbdb149d073 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 SRPM gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.src.rpm SHA-256: 2674ddbb86a568c53b05a53ee801a9b3786078a45742dec0d255ee829884dc15 aarch64 gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.aarch64.rpm SHA-256: c9440aa7d54e255bf13cdd002acc8767465e0673ab49035f9f8494b45bd9c651 gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.aarch64.rpm SHA-256: c06dcd49d4aea81fae8d5aa23e884db90f3b5b7690d061109efd18c489c82ada gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.aarch64.rpm SHA-256: b8f48e2d3dbd41a1fab025a39242e64b5416fe58cd7e8d3b84ea46adeea95abd Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 SRPM gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.src.rpm SHA-256: 2674ddbb86a568c53b05a53ee801a9b3786078a45742dec0d255ee829884dc15 x86_64 gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.i686.rpm SHA-256: adfa4c70234beb582b2fd3cfb5e03e3c99cb95618f21357380cd362e3a11ab7c gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: b9e84f592a3b95f43dd49560475f053775453c01167084c4e961d861b197ebd4 gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.i686.rpm SHA-256: 107c453b726e58d87b881749f975ca12dc7aeaeb54c139eecad35b5e88f9df7b gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: 8ef6fb6f20e72af526ad7711bab06006151215993a5bb260c12ec56ed685a2b0 gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.i686.rpm SHA-256: a543680203034177a898cdead5396876a42fd12c3ce95b3c049f0cebaa4c957a gstreamer1-plugins-ugly-free-debugsource-1.22.12-4.el9_6.1.x86_64.rpm SHA-256: d3ae425e4c77baa8f8798621b08f907c75794fac10f7a68bbc355fbdb149d073 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 SRPM gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.src.rpm SHA-256: 2674ddbb86a568c53b05a53ee801a9b3786078a45742dec0d255ee829884dc15 aarch64 gstreamer1-plugins-ugly-free-1.22.12-4.el9_6.1.aarch64.rpm SHA-256: c9440aa7d54e255bf13cdd002acc8767465e0673ab49035f9f8494b45bd9c651 gstreamer1-plugins-ugly-free-debuginfo-1.22.12-4.el9_6.1.aarch64.rpm SHA-256: c06dcd49d4aea81fae8d5aa23e884db90f3b5b7690d061109efd18c489c82ada gstre