This security update addresses two Important vulnerabilities in the gstreamer1-plugins-bad-free package for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: CVE-2026-59691 is a heap out-of-bounds write in the rfbsrc/librfb Hextile decoder with 16bpp framebuffers, and CVE-2026-59692 is a stack buffer overflow in the DTLS certificate Subject DN verification callback. The advisory provides updated packages to remediate the issues, specifically version 1.18.4-9.el9_2.5, and administrators should apply the update to affected systems following Red Hat's standard procedures.
Red Hat Product Errata RHSA-2026:56658 - Security Advisory Issued: 2026-08-19 Updated: 2026-08-19 RHSA-2026:56658 - Security Advisory Overview Updated Packages Synopsis Important: gstreamer1-plugins-bad-free security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691) gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2497343 - CVE-2026-59691 gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer BZ - 2497344 - CVE-2026-59692 gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback CVEs CVE-2026-59691 CVE-2026-59692 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.src.rpm SHA-256: 59173f02ebf559afeec147a210c1e382fbad353bb02cd968fde90895e9fb104a x86_64 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.i686.rpm SHA-256: b07aad7f6c9ae70d06ed5fbf1675ff507718ef0c3d7a047794fd0bbaf07addce gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.x86_64.rpm SHA-256: e5baa18864b7dd498dea28c1bb100ab943c11621d693dfccd4f1b01947b2b5ab gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.i686.rpm SHA-256: e6158a87a2735d7b66f96535c06e65819367e40d9f2f383b93b9c3fad2b3c057 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.x86_64.rpm SHA-256: 11336be1539b9540d314cf840664ebb610ac5254b70fb4d53bb26cf88b4612b9 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.i686.rpm SHA-256: f3cb24787c7f2c3df40364ea893c0a4be6a7a3c8c7d86d3d01478003ff5b2159 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.x86_64.rpm SHA-256: d86e0d0d9dfe3885f1a2e4828049eb24df87aca13572c147da3193671d93658a Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.src.rpm SHA-256: 59173f02ebf559afeec147a210c1e382fbad353bb02cd968fde90895e9fb104a ppc64le gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.ppc64le.rpm SHA-256: 885e09bf6e8684d499d8960b05d53c6f6dee257766ab658f2323fbb0038a1cc3 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.ppc64le.rpm SHA-256: ae6026618f330fa601e20580f9c7a87b378d392630ee50bee508a99c7b00d7d6 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.ppc64le.rpm SHA-256: b03b52c45f08d3370b773e5f9192b8d89687b03211a874cdce2d828bb3044921 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.src.rpm SHA-256: 59173f02ebf559afeec147a210c1e382fbad353bb02cd968fde90895e9fb104a x86_64 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.i686.rpm SHA-256: b07aad7f6c9ae70d06ed5fbf1675ff507718ef0c3d7a047794fd0bbaf07addce gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.x86_64.rpm SHA-256: e5baa18864b7dd498dea28c1bb100ab943c11621d693dfccd4f1b01947b2b5ab gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.i686.rpm SHA-256: e6158a87a2735d7b66f96535c06e65819367e40d9f2f383b93b9c3fad2b3c057 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.x86_64.rpm SHA-256: 11336be1539b9540d314cf840664ebb610ac5254b70fb4d53bb26cf88b4612b9 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.i686.rpm SHA-256: f3cb24787c7f2c3df40364ea893c0a4be6a7a3c8c7d86d3d01478003ff5b2159 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.x86_64.rpm SHA-256: d86e0d0d9dfe3885f1a2e4828049eb24df87aca13572c147da3193671d93658a Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.src.rpm SHA-256: 59173f02ebf559afeec147a210c1e382fbad353bb02cd968fde90895e9fb104a aarch64 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.aarch64.rpm SHA-256: 6f7d3df18fdff2f7fccf533194ddb9e55946799e153663bf1d940788ef84e78b gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.aarch64.rpm SHA-256: 02651992d7605546ea6927741f95ec0af70cbfafd0542e4531b374cb730bc110 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.aarch64.rpm SHA-256: 55de9e820fb466cdc9172b7a4a6a7e406515119c8c0c085a3088dd40891141f2 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.src.rpm SHA-256: 59173f02ebf559afeec147a210c1e382fbad353bb02cd968fde90895e9fb104a s390x gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.s390x.rpm SHA-256: 7e29a8ebeeb1fcfd91ae59aad02531f5a11b5610c6a84adc4889ba4a9a50e047 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.s390x.rpm SHA-256: e38e4909c0b8e08276c68f4e698d381c1098d90c5e395526c61cceb4d48334fd gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.s390x.rpm SHA-256: 018a062b3726c018fce96ec42c54503da6ddde769392c96d36593916be05bd89 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.src.rpm SHA-256: 59173f02ebf559afeec147a210c1e382fbad353bb02cd968fde90895e9fb104a x86_64 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.i686.rpm SHA-256: b07aad7f6c9ae70d06ed5fbf1675ff507718ef0c3d7a047794fd0bbaf07addce gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.x86_64.rpm SHA-256: e5baa18864b7dd498dea28c1bb100ab943c11621d693dfccd4f1b01947b2b5ab gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.i686.rpm SHA-256: e6158a87a2735d7b66f96535c06e65819367e40d9f2f383b93b9c3fad2b3c057 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.x86_64.rpm SHA-256: 11336be1539b9540d314cf840664ebb610ac5254b70fb4d53bb26cf88b4612b9 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.i686.rpm SHA-256: f3cb24787c7f2c3df40364ea893c0a4be6a7a3c8c7d86d3d01478003ff5b2159 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.x86_64.rpm SHA-256: d86e0d0d9dfe3885f1a2e4828049eb24df87aca13572c147da3193671d93658a Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.src.rpm SHA-256: 59173f02ebf559afeec147a210c1e382fbad353bb02cd968fde90895e9fb104a aarch64 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.aarch64.rpm SHA-256: 6f7d3df18fdff2f7fccf533194ddb9e55946799e153663bf1d940788ef84e78b gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.aarch64.rpm SHA-256: 02651992d7605546ea6927741f95ec0af70cbfafd0542e4531b374cb730bc110 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.aarch64.rpm SHA-256: 55de9e820fb466cdc9172b7a4a6a7e406515119c8c0c085a3088dd40891141f2 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.src.rpm SHA-256: 59173f02ebf559afeec147a210c1e382fbad353bb02cd968fde90895e9fb104a ppc64le gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.ppc64le.rpm SHA-256: 885e09bf6e8684d499d8960b05d53c6f6dee257766ab658f2323fbb0038a1cc3 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.ppc64le.rpm SHA-256: ae6026618f330fa601e20580f9c7a87b378d392630ee50bee508a99c7b00d7d6 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.ppc64le.rpm SHA-256: b03b52c45f08d3370b773e5f9192b8d89687b03211a874cdce2d828bb3044921 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.src.rpm SHA-256: 59173f02ebf559afeec147a210c1e382fbad353bb02cd968fde90895e9fb104a s390x gstreamer1-plugins-bad-free-1.18.4-9.el9_2.5.s390x.rpm SHA-256: 7e29a8ebeeb1fcfd91ae59aad02531f5a11b5610c6a84adc4889ba4a9a50e047 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.5.s390x.rpm SHA-256: e38e4909c0b8e08276c68f4e698d381c1098d90c5e395526c61cceb4d48334fd gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.5.s390x.rpm SHA-256: 018a062b3726c018fce96ec42c54503da6ddde769392c96d36593916be05bd89 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .