Red Hat Product Errata RHSA-2026:65122 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:65122 - Security Advisory Overview Updated Packages Synopsis Important: gstreamer1-plugins-bad-free security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2513015 - CVE-2026-19387 gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVEs CVE-2026-19387 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.src.rpm SHA-256: 5ef6af8627c84d40674c7fdc4f03531cd80b9c8e733fa18f88c1f0bf4bbb99db x86_64 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.i686.rpm SHA-256: b919618c728d9b731a48ed6d02ad8e162ac25b1bb35bcf405d76b38b412eb222 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.x86_64.rpm SHA-256: 3de1aaead5744d50327c73f4e7908413ad6d2bd330ea1dba1b204edce329745b gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.i686.rpm SHA-256: 4a160c56e2a68b96a0552e944335f1a4bf0dab04642b4c084d25fefe41e757e2 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.x86_64.rpm SHA-256: 56e2458808f2338ed53fcdba857fd584975621f4efda1d300db0e58a7b4e6f69 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.i686.rpm SHA-256: 495849d59aa26552c1038b030b9b87335fe00d8ee5b2da634696453f9110112f gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.x86_64.rpm SHA-256: 7dbe15b98d09008aca8f67e3f26fad5833d666032331040937a53b6d7aec142c Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.src.rpm SHA-256: 5ef6af8627c84d40674c7fdc4f03531cd80b9c8e733fa18f88c1f0bf4bbb99db ppc64le gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.ppc64le.rpm SHA-256: a29316e8f8d9c78ef9988dcb34a16d3a289df5d37e42198f5f7e04a8c791b8c9 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.ppc64le.rpm SHA-256: 1e0e3e805fe2e75fe5be49c7132a6ba9e215968b0829d003e36fd9ada4a84553 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.ppc64le.rpm SHA-256: f9284d095b62a7b372cd5f60d6b22e2d1dda0a20d000d3422316b82ff1f30ca3 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.src.rpm SHA-256: 5ef6af8627c84d40674c7fdc4f03531cd80b9c8e733fa18f88c1f0bf4bbb99db x86_64 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.i686.rpm SHA-256: b919618c728d9b731a48ed6d02ad8e162ac25b1bb35bcf405d76b38b412eb222 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.x86_64.rpm SHA-256: 3de1aaead5744d50327c73f4e7908413ad6d2bd330ea1dba1b204edce329745b gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.i686.rpm SHA-256: 4a160c56e2a68b96a0552e944335f1a4bf0dab04642b4c084d25fefe41e757e2 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.x86_64.rpm SHA-256: 56e2458808f2338ed53fcdba857fd584975621f4efda1d300db0e58a7b4e6f69 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.i686.rpm SHA-256: 495849d59aa26552c1038b030b9b87335fe00d8ee5b2da634696453f9110112f gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.x86_64.rpm SHA-256: 7dbe15b98d09008aca8f67e3f26fad5833d666032331040937a53b6d7aec142c Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.src.rpm SHA-256: 5ef6af8627c84d40674c7fdc4f03531cd80b9c8e733fa18f88c1f0bf4bbb99db aarch64 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.aarch64.rpm SHA-256: 2bafab0c06814551e7e087270be0ffb4c482f441702cd864d12ded3916ffef97 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.aarch64.rpm SHA-256: d84ae8cd24bdb7a51c880af8a619798ff2e3fdf7e9a8dce777a0f588568d6a82 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.aarch64.rpm SHA-256: 7bd4db0203eaebbe9e17fc79d37d8dfbd77aa84a9cd01b555dab8cc034618494 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.src.rpm SHA-256: 5ef6af8627c84d40674c7fdc4f03531cd80b9c8e733fa18f88c1f0bf4bbb99db s390x gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.s390x.rpm SHA-256: 5f00f5a5b4eb2ccebfadc176213b91433cc2429fd9e9aa8bda093f5147b00081 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.s390x.rpm SHA-256: 8b8c4aece1bc19349e11d58ffdd6649fbc508c078d999023a76a9ff8526687b4 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.s390x.rpm SHA-256: 60ca3f9292fd7e9e725ba524fef1332563dd918c8947f72cb55348ea4ccc43c9 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.src.rpm SHA-256: 5ef6af8627c84d40674c7fdc4f03531cd80b9c8e733fa18f88c1f0bf4bbb99db x86_64 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.i686.rpm SHA-256: b919618c728d9b731a48ed6d02ad8e162ac25b1bb35bcf405d76b38b412eb222 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.x86_64.rpm SHA-256: 3de1aaead5744d50327c73f4e7908413ad6d2bd330ea1dba1b204edce329745b gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.i686.rpm SHA-256: 4a160c56e2a68b96a0552e944335f1a4bf0dab04642b4c084d25fefe41e757e2 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.x86_64.rpm SHA-256: 56e2458808f2338ed53fcdba857fd584975621f4efda1d300db0e58a7b4e6f69 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.i686.rpm SHA-256: 495849d59aa26552c1038b030b9b87335fe00d8ee5b2da634696453f9110112f gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.x86_64.rpm SHA-256: 7dbe15b98d09008aca8f67e3f26fad5833d666032331040937a53b6d7aec142c Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.src.rpm SHA-256: 5ef6af8627c84d40674c7fdc4f03531cd80b9c8e733fa18f88c1f0bf4bbb99db aarch64 gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.aarch64.rpm SHA-256: 2bafab0c06814551e7e087270be0ffb4c482f441702cd864d12ded3916ffef97 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.aarch64.rpm SHA-256: d84ae8cd24bdb7a51c880af8a619798ff2e3fdf7e9a8dce777a0f588568d6a82 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.aarch64.rpm SHA-256: 7bd4db0203eaebbe9e17fc79d37d8dfbd77aa84a9cd01b555dab8cc034618494 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.src.rpm SHA-256: 5ef6af8627c84d40674c7fdc4f03531cd80b9c8e733fa18f88c1f0bf4bbb99db ppc64le gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.ppc64le.rpm SHA-256: a29316e8f8d9c78ef9988dcb34a16d3a289df5d37e42198f5f7e04a8c791b8c9 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.ppc64le.rpm SHA-256: 1e0e3e805fe2e75fe5be49c7132a6ba9e215968b0829d003e36fd9ada4a84553 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.ppc64le.rpm SHA-256: f9284d095b62a7b372cd5f60d6b22e2d1dda0a20d000d3422316b82ff1f30ca3 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 SRPM gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.src.rpm SHA-256: 5ef6af8627c84d40674c7fdc4f03531cd80b9c8e733fa18f88c1f0bf4bbb99db s390x gstreamer1-plugins-bad-free-1.18.4-9.el9_2.6.s390x.rpm SHA-256: 5f00f5a5b4eb2ccebfadc176213b91433cc2429fd9e9aa8bda093f5147b00081 gstreamer1-plugins-bad-free-debuginfo-1.18.4-9.el9_2.6.s390x.rpm SHA-256: 8b8c4aece1bc19349e11d58ffdd6649fbc508c078d999023a76a9ff8526687b4 gstreamer1-plugins-bad-free-debugsource-1.18.4-9.el9_2.6.s390x.rpm SHA-256: 60ca3f9292fd7e9e725ba524fef1332563dd918c8947f72cb55348ea4ccc43c9 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .