Red Hat Product Errata RHSA-2026:51180 - Security Advisory Issued: 2026-08-06 Updated: 2026-08-06 RHSA-2026:51180 - Security Advisory Overview Updated Packages Synopsis Important: Backport fixes for CVE-2026-64835 and CVE-2026-58049 Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic Backport fixes for CVE-2026-64835 and CVE-2026-58049 Description CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files CVE-2026-58049 FFmpeg: Memory corruption via crafted RASC video stream Solution Backporting CVE Fixes from upstream ffmpeg-6.1.6-3.el9ai Affected Products Red Hat Enterprise Linux AI 3.3 x86_64 Red Hat Enterprise Linux AI 3.3 s390x Red Hat Enterprise Linux AI 3.3 ppc64le Red Hat Enterprise Linux AI 3.3 aarch64 Fixes (none) CVEs CVE-2026-58049 CVE-2026-64835 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux AI 3.3 SRPM ffmpeg-6.1.6-3.el9ai.src.rpm SHA-256: b8886067e01797d9d304621c30ecf3d7422d44b34ed8242d6fb693fc4befd143 x86_64 ffmpeg-debuginfo-6.1.6-3.el9ai.x86_64.rpm SHA-256: 8007fe395fef1cbb2ab7005b6b5b0643c31ab79a245a14cc8bf0bb149f14f456 ffmpeg-debugsource-6.1.6-3.el9ai.x86_64.rpm SHA-256: 86d6e2d36c432cdd342d7213b37fa001890be28ed14679e5ac42de5b4deafed9 ffmpeg-free-rhai-6.1.6-3.el9ai.x86_64.rpm SHA-256: 61f465cb7bd72d5d2f0e703955a01cfcd65f4d14051ad06061ad68259020839c ffmpeg-free-rhai-debuginfo-6.1.6-3.el9ai.x86_64.rpm SHA-256: 2d58f6ec908f7677ba699600d50e0c709d8df423cbde047bfe53a3c4329cecd8 ffmpeg-free-rhai-devel-6.1.6-3.el9ai.x86_64.rpm SHA-256: 9bd15253320b85ffd88c2e053821d18b82b9a99bd765a345e7dba177fcf67fc0 libavcodec-free-rhai-6.1.6-3.el9ai.x86_64.rpm SHA-256: 70729fd0f59973df487ba4f5277564e1dd392cecf1097124edcf8898cc602d08 libavcodec-free-rhai-debuginfo-6.1.6-3.el9ai.x86_64.rpm SHA-256: 5640ac9642b39c8cd5ba3d637d9506595b1c46d4c3be124ee2ccda47763b62d9 libavcodec-free-rhai-devel-6.1.6-3.el9ai.x86_64.rpm SHA-256: da8aad8c79c0a8337189a3e7d6e5dda2427f44da72571a4e7ee874be61a84a22 libavdevice-free-rhai-6.1.6-3.el9ai.x86_64.rpm SHA-256: fa48b379a8131ea5334c2f037ffa2fe1726dd0dbe481e8d156ac9d2c418fa1eb libavdevice-free-rhai-debuginfo-6.1.6-3.el9ai.x86_64.rpm SHA-256: 6a6990a448f01846f4ed41b0987556dad4600aad565e1cfc8eca9a35fb956686 libavdevice-free-rhai-devel-6.1.6-3.el9ai.x86_64.rpm SHA-256: 64a08ea3e0452d66e0da2fa536f1f25b1f3fde61984f7930e1615b56a6c4e262 libavfilter-free-rhai-6.1.6-3.el9ai.x86_64.rpm SHA-256: 3c9fa81a773a2029b15fb191b2ab15de0d64488e8025b3a75c3892d239e9b4f6 libavfilter-free-rhai-debuginfo-6.1.6-3.el9ai.x86_64.rpm SHA-256: e7876e3a2518238ddf2913d3f41eb36d8f9ecaedaa2d94d00eb9cd60df1c4007 libavfilter-free-rhai-devel-6.1.6-3.el9ai.x86_64.rpm SHA-256: 361028f29436d9dc03bb28962d09942acb14279f130ff374220af6b62c55c352 libavformat-free-rhai-6.1.6-3.el9ai.x86_64.rpm SHA-256: 461cd23c6f1bcb43a3bb00a7f7e0b6fb181e304f8dc842915f367e10073afbf4 libavformat-free-rhai-debuginfo-6.1.6-3.el9ai.x86_64.rpm SHA-256: 0250556244f2a01e924de038ad341fc88a62cdf05b4ead43270d1cec40d152a5 libavformat-free-rhai-devel-6.1.6-3.el9ai.x86_64.rpm SHA-256: efcf6a549ba7b259a697f7f5bc76e36f32a92bf02bec0429f3409ff66e38da4d libavutil-free-rhai-6.1.6-3.el9ai.x86_64.rpm SHA-256: 574594f5f8fc5680d88f667e09b7d4bbbd91e4b7ddb0d3ac625f6e3bf6214ec1 libavutil-free-rhai-debuginfo-6.1.6-3.el9ai.x86_64.rpm SHA-256: 6bebf65b30e019f14c647982a945104157f95e035616bf502eb252aed3629fb6 libavutil-free-rhai-devel-6.1.6-3.el9ai.x86_64.rpm SHA-256: ff070e3924500f6dd40975169a0a0f69c42e4aa41757db558482ba7f7dce4fbd libpostproc-free-rhai-6.1.6-3.el9ai.x86_64.rpm SHA-256: 605e871f4158353f648d2ae1f10b38a92c1588c61545ef289aef49226ac7aa1f libpostproc-free-rhai-debuginfo-6.1.6-3.el9ai.x86_64.rpm SHA-256: 1f22031e473564d386654b6eeb80c62d5bffa5489195716184b94d415933d43b libpostproc-free-rhai-devel-6.1.6-3.el9ai.x86_64.rpm SHA-256: 3f363c13034c9a6c726de7a1d521dbcfae941c6ee882ae293c309bf748907b53 libswresample-free-rhai-6.1.6-3.el9ai.x86_64.rpm SHA-256: 9c89dd3a54f36022c528536b99487f88b6d053fc74062d7c09fa9ff80aa41f09 libswresample-free-rhai-debuginfo-6.1.6-3.el9ai.x86_64.rpm SHA-256: f2c374ddc261648c10d0de9d6b02f59cc276264c41597d5ce9fd4b2dd52a8f84 libswresample-free-rhai-devel-6.1.6-3.el9ai.x86_64.rpm SHA-256: e8434c319b6b32a39a3bc953e53e52234011ed423864b1685ca84ba8e01659ba libswscale-free-rhai-6.1.6-3.el9ai.x86_64.rpm SHA-256: e7088bb0f413a4fccd5eee4db90ab1e801fe030269f56c28328373ed7603c2d2 libswscale-free-rhai-debuginfo-6.1.6-3.el9ai.x86_64.rpm SHA-256: 523b04c553babb1a63b5804d16d4936e5eb04a34188504b89bace0ef82d31580 libswscale-free-rhai-devel-6.1.6-3.el9ai.x86_64.rpm SHA-256: 94994963478b58f811f3577fc5686cd10039fc0ba04a37ec00cd57293ab11309 s390x ffmpeg-debuginfo-6.1.6-3.el9ai.s390x.rpm SHA-256: c4d83f0a35c8c331ca0e23b9e34e0bd33f231571fda2aa0895347ac8718a5203 ffmpeg-debugsource-6.1.6-3.el9ai.s390x.rpm SHA-256: 3394eb645c339b8d7178ea1e28b2f5de28e4f0557c15338ae12d90c3249ca706 ffmpeg-free-rhai-6.1.6-3.el9ai.s390x.rpm SHA-256: 0238ecb6a3b0faddec91af231e3538fc285e02b5a4a7c6ebe769fb9bab59bd7c ffmpeg-free-rhai-debuginfo-6.1.6-3.el9ai.s390x.rpm SHA-256: 9f6410e2e7605201bee555147a16e7bdff15158ec7ab05350768463396706460 ffmpeg-free-rhai-devel-6.1.6-3.el9ai.s390x.rpm SHA-256: c40c9de96c393942350a3883d9ad1b24a3d6da9226d049ec781f69d1d2324b22 libavcodec-free-rhai-6.1.6-3.el9ai.s390x.rpm SHA-256: ae26bb06133ba30046b8054133270806b32b4326d4047692a572b0536e5ec6a7 libavcodec-free-rhai-debuginfo-6.1.6-3.el9ai.s390x.rpm SHA-256: b348507750608449a9007765a6e312fcc9e2bc7932ddaebc5fce303aef640361 libavcodec-free-rhai-devel-6.1.6-3.el9ai.s390x.rpm SHA-256: 78d33f86f0b78b9a9b1fe2b426149456ee06429846cd9292a0ea4d504e8c904d libavdevice-free-rhai-6.1.6-3.el9ai.s390x.rpm SHA-256: 47536e9530847d04185d6c77868624bf59b3eeed1fa1dc5cb4439cc7becacf68 libavdevice-free-rhai-debuginfo-6.1.6-3.el9ai.s390x.rpm SHA-256: 2d85ee57ae4485722a85534bf72df1fbe3b4ee24a5f13c1383af1b08e1592fc2 libavdevice-free-rhai-devel-6.1.6-3.el9ai.s390x.rpm SHA-256: 95d214143120083ec85035cb73eae02c2ad34ce6808c02ca7521b91d3014a7d1 libavfilter-free-rhai-6.1.6-3.el9ai.s390x.rpm SHA-256: 351591ef45d369eee70b1b65eabf90750c79cb7d5c1d946776b153449453b262 libavfilter-free-rhai-debuginfo-6.1.6-3.el9ai.s390x.rpm SHA-256: 0d8c47fbb3fd230cde56a763747335cd9339138594287a633bcbde051d93a99c libavfilter-free-rhai-devel-6.1.6-3.el9ai.s390x.rpm SHA-256: 336466400d1c9c2ceb9ef251fc0ff3ebb7736765d1f9087af7abea0414d23e00 libavformat-free-rhai-6.1.6-3.el9ai.s390x.rpm SHA-256: f85aed7627e87c773016b778124b643c5d82a4e22ed1e36dd4ad7aa963fb1f1e libavformat-free-rhai-debuginfo-6.1.6-3.el9ai.s390x.rpm SHA-256: 4d142b20066526010372dc81056b9025cb1d22ea3a85498877e9aafa211d4d1c libavformat-free-rhai-devel-6.1.6-3.el9ai.s390x.rpm SHA-256: f14733c4e56f209594119ee9d210e6ccfb81647c77e497f31c95de27234ac9b8 libavutil-free-rhai-6.1.6-3.el9ai.s390x.rpm SHA-256: 23eb8505f31b8fa08b1bb3209c7e75e656bf3658bedb9cdeb02ec951926b8300 libavutil-free-rhai-debuginfo-6.1.6-3.el9ai.s390x.rpm SHA-256: b87f7487321e9f4b8b098b14b36f4120b2b05dd2f48d54540aeb8fab5d0668a3 libavutil-free-rhai-devel-6.1.6-3.el9ai.s390x.rpm SHA-256: adda387c832531382e859a65ba02220d114095e7977463fb05747f49665e7d8e libpostproc-free-rhai-6.1.6-3.el9ai.s390x.rpm SHA-256: 6c72dfe11d015c2fda9f716dee00730cb70c98aff283489c5c7c13e1a28a563f libpostproc-free-rhai-debuginfo-6.1.6-3.el9ai.s390x.rpm SHA-256: 4f042685af6ccfdb30083d747c6d2a4ea5150d25805a717b7d2af1b09e258750 libpostproc-free-rhai-devel-6.1.6-3.el9ai.s390x.rpm SHA-256: dc3532c49ac1fb0363c2d13e344f9ca060b04d52dde382381ca9ba00ff7798ee libswresample-free-rhai-6.1.6-3.el9ai.s390x.rpm SHA-256: ad19523e6660ea1fb358829a441534c077e46c105a34ba9a43ff05e4ded25c85 libswresample-free-rhai-debuginfo-6.1.6-3.el9ai.s390x.rpm SHA-256: 73e51b206c08c6f1877a8756652b82c7ca4de2b10c9cd10571c8d636babc196a libswresample-free-rhai-devel-6.1.6-3.el9ai.s390x.rpm SHA-256: e7756fb5721b675f35083351dae35d08c34b7f22d7690e7139f290f411dfb7c5 libswscale-free-rhai-6.1.6-3.el9ai.s390x.rpm SHA-256: 81849154ab825bd73f64c707a49b296990b1851b5663ed6fbed5f161081fe9ac libswscale-free-rhai-debuginfo-6.1.6-3.el9ai.s390x.rpm SHA-256: 139c5e03e6760f2569a416dc0d08255318d0bbbd5b4a8f00f630bf606607651e libswscale-free-rhai-devel-6.1.6-3.el9ai.s390x.rpm SHA-256: ddb84b68244c0ed750f2784d6c1068c0c4793121f83001da1589885bbfd5ba9c ppc64le ffmpeg-debuginfo-6.1.6-3.el9ai.ppc64le.rpm SHA-256: d1a14086dd78ed05a2e342691dc3f663738102d3f557072b64a7b5370a716702 ffmpeg-debugsource-6.1.6-3.el9ai.ppc64le.rpm SHA-256: 5a61181a5b044f3a2102a62294622ed0c206cb50e9aa11faf306252ea4fe2dc1 ffmpeg-free-rhai-6.1.6-3.el9ai.ppc64le.rpm SHA-256: 023e5ae9949eb9ec566025be2b37bf4e5b3dd28346f9a418cac3838c60363c4e ffmpeg-free-rhai-debuginfo-6.1.6-3.el9ai.ppc64le.rpm SHA-256: 8f7b009742a404c19ab6d74c3c1c94d6e20f2a41afccf672f6afc569e8fbb2b6 ffmpeg-free-rhai-devel-6.1.6-3.el9ai.ppc64le.rpm SHA-256: 357648c889389d337c0430bff79641b1c8da49bda28cb737012e328f91ee0cdb libavcodec-free-rhai-6.1.6-3.el9ai.ppc64le.rpm SHA-256: 4e7b7e1f6a5d6cd59e061fa78082e34a834e6e6937680d4ba0b4de0f89cca0e9 libavcodec-free-rhai-debuginfo-6.1.6-3.el9ai.ppc64le.rpm SHA-256: 6ca84e98bc9ac39a2cbc880ad7553783c3c3e73798e66b5abdcf2ee01b10ab3d libavcodec-free-rhai-devel-6.1.6-3.el9ai.ppc64le.rpm SHA-256: d4f2120977cf64873eb6424bb649b3280ecd6b6022f4cb9935950e6cc06280cb libavdevice-free-rhai-6.1.6-3.el9ai.ppc64le.rpm SHA-256: c5d5270c35a1eeca18b6893f6dfa8ccf244d81783ed10b2a91cd573a85b74ba3 libavdevice-free-rhai-debuginfo-6.1.6-3.el9ai.ppc64le.rpm SHA-256: 8fa94fd697d9cc0d6b4ba17e122379eb4db5e2cf23ad3116bacd0e0f613c2d7b libavdevice-free-rhai-devel-6.1.6-3.el9ai.ppc64le.rpm SHA-256: aee64395123b0593e7d0581b28cf510a680a6faa665399193c22cd0e5a5d5aa7 libavfilter-free-rhai-6.1.6-3.el9ai.ppc64le.rpm SHA-256: 70f49129dab937277ba176e730606d54148f888b86350b71b5228567f85bb879 libav
Red Hat has released an important security advisory (RHSA-2026:51180) addressing two high-severity vulnerabilities in FFmpeg: CVE-2026-64835 (CVSS 8.8), which allows arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files, and CVE-2026-58049 (CVSS 8.6), which leads to memory corruption via a crafted RASC video stream. According to NVD data, CVE-2026-64835 affects ffmpeg versions 4.4 through 8.1.2. The fix is provided via a backported update to package version ffmpeg-6.1.6-3.el9ai for Red Hat Enterprise Linux AI 3.3.