Red Hat Product Errata RHSA-2026:50688 - Security Advisory Issued: 2026-08-05 Updated: 2026-08-05 RHSA-2026:50688 - Security Advisory Overview Updated Packages Synopsis Moderate: gstreamer1-plugins-ugly-free security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-ugly-free is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL. Security Fix(es): gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header parser (CVE-2026-53703) gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer FILEINFO metadata parser (CVE-2026-53704) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2487613 - CVE-2026-53703 gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header parser BZ - 2487614 - CVE-2026-53704 gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer FILEINFO metadata parser CVEs CVE-2026-53703 CVE-2026-53704 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.src.rpm SHA-256: 75bc6b8471e14d4f5fd90c3a570639d06fbd2e409ff2699526fe456e9f1fc600 x86_64 gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.x86_64.rpm SHA-256: e38b723ce2935d9b3b3579c8a03c92bde93e8eb027768b15c4975f6deaafc815 gstreamer1-plugins-ugly-free-debuginfo-1.24.11-1.el10_0.2.x86_64.rpm SHA-256: 8b785aab3cef10e5059a90c9efad20a33bd7a999c0d0420d695be696c39cb70c gstreamer1-plugins-ugly-free-debugsource-1.24.11-1.el10_0.2.x86_64.rpm SHA-256: 7eb65023e2b308bc671d3e3dd49e14168754bfaaae37a18a481aa8177bfb5834 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.src.rpm SHA-256: 75bc6b8471e14d4f5fd90c3a570639d06fbd2e409ff2699526fe456e9f1fc600 ppc64le gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.ppc64le.rpm SHA-256: 449b960ddcfb4a58b54e89ddc542784faaefd1475636ec8c7a692c13df07c830 gstreamer1-plugins-ugly-free-debuginfo-1.24.11-1.el10_0.2.ppc64le.rpm SHA-256: dd891c281c67318b569e7ed63fef87245359661f2fc14528614ed4157dfda3c9 gstreamer1-plugins-ugly-free-debugsource-1.24.11-1.el10_0.2.ppc64le.rpm SHA-256: 1adf44abd14253c4b04fdef4e320e06d730e5ed27c8164e7b4b2b0953ef6819f Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.src.rpm SHA-256: 75bc6b8471e14d4f5fd90c3a570639d06fbd2e409ff2699526fe456e9f1fc600 aarch64 gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.aarch64.rpm SHA-256: ff777a92f8e8f510ad84a36def5f8be1e78e73ced17f0cd65d225ca79896b382 gstreamer1-plugins-ugly-free-debuginfo-1.24.11-1.el10_0.2.aarch64.rpm SHA-256: 548e86afd0d84192ff53333c02054f3a448d27d13b33505c235a835a963e9b0b gstreamer1-plugins-ugly-free-debugsource-1.24.11-1.el10_0.2.aarch64.rpm SHA-256: 767f807fcac66e8a85bf80aa378225d38a6c84110ba8ff37508f24e1c5d4d62d Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.src.rpm SHA-256: 75bc6b8471e14d4f5fd90c3a570639d06fbd2e409ff2699526fe456e9f1fc600 aarch64 gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.aarch64.rpm SHA-256: ff777a92f8e8f510ad84a36def5f8be1e78e73ced17f0cd65d225ca79896b382 gstreamer1-plugins-ugly-free-debuginfo-1.24.11-1.el10_0.2.aarch64.rpm SHA-256: 548e86afd0d84192ff53333c02054f3a448d27d13b33505c235a835a963e9b0b gstreamer1-plugins-ugly-free-debugsource-1.24.11-1.el10_0.2.aarch64.rpm SHA-256: 767f807fcac66e8a85bf80aa378225d38a6c84110ba8ff37508f24e1c5d4d62d Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.src.rpm SHA-256: 75bc6b8471e14d4f5fd90c3a570639d06fbd2e409ff2699526fe456e9f1fc600 ppc64le gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.ppc64le.rpm SHA-256: 449b960ddcfb4a58b54e89ddc542784faaefd1475636ec8c7a692c13df07c830 gstreamer1-plugins-ugly-free-debuginfo-1.24.11-1.el10_0.2.ppc64le.rpm SHA-256: dd891c281c67318b569e7ed63fef87245359661f2fc14528614ed4157dfda3c9 gstreamer1-plugins-ugly-free-debugsource-1.24.11-1.el10_0.2.ppc64le.rpm SHA-256: 1adf44abd14253c4b04fdef4e320e06d730e5ed27c8164e7b4b2b0953ef6819f Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 SRPM gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.src.rpm SHA-256: 75bc6b8471e14d4f5fd90c3a570639d06fbd2e409ff2699526fe456e9f1fc600 x86_64 gstreamer1-plugins-ugly-free-1.24.11-1.el10_0.2.x86_64.rpm SHA-256: e38b723ce2935d9b3b3579c8a03c92bde93e8eb027768b15c4975f6deaafc815 gstreamer1-plugins-ugly-free-debuginfo-1.24.11-1.el10_0.2.x86_64.rpm SHA-256: 8b785aab3cef10e5059a90c9efad20a33bd7a999c0d0420d695be696c39cb70c gstreamer1-plugins-ugly-free-debugsource-1.24.11-1.el10_0.2.x86_64.rpm SHA-256: 7eb65023e2b308bc671d3e3dd49e14168754bfaaae37a18a481aa8177bfb5834 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .