Red Hat Product Errata RHSA-2026:67151 - Security Advisory Issued: 2026-09-14 Updated: 2026-09-14 RHSA-2026:67151 - Security Advisory Overview Updated Packages Synopsis Important: gstreamer1-plugins-bad-free security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2513015 - CVE-2026-19387 gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVEs CVE-2026-19387 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.src.rpm SHA-256: ad3c13245f6019d6b6ea42b699b390308adc1b2481eb9f695b3543dacf4826d8 x86_64 gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.i686.rpm SHA-256: d324f5fda460fa6de4458c930f64cf04483aea7d409f429db6f05c09606eb2f2 gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.x86_64.rpm SHA-256: 94730d9c80878d4dc2a904b70e36fb9f5e11fd0a1c42336cc9880eba2224d332 gstreamer1-plugins-bad-free-debuginfo-1.16.1-4.el8_8.5.i686.rpm SHA-256: 79676379c9d5d77035bcd4a078a8f1ae8a27b1b0ad26d7da60dacb3e5f85c8d2 gstreamer1-plugins-bad-free-debuginfo-1.16.1-4.el8_8.5.x86_64.rpm SHA-256: 6c483e829c546774172a959a0fccf4d634f706be5c9d8ea4b1f7ccb0faa2a88e gstreamer1-plugins-bad-free-debugsource-1.16.1-4.el8_8.5.i686.rpm SHA-256: 1d39028bf73a0f8d4e8a4554267b7442b6f1cf210c0c2f30c50c021d75a15208 gstreamer1-plugins-bad-free-debugsource-1.16.1-4.el8_8.5.x86_64.rpm SHA-256: 9328cb0d3118ce6571a655080ea284bb3d7ed6cb331faf8d0b50530d75314202 Red Hat Enterprise Linux Server - TUS 8.8 SRPM gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.src.rpm SHA-256: ad3c13245f6019d6b6ea42b699b390308adc1b2481eb9f695b3543dacf4826d8 x86_64 gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.i686.rpm SHA-256: d324f5fda460fa6de4458c930f64cf04483aea7d409f429db6f05c09606eb2f2 gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.x86_64.rpm SHA-256: 94730d9c80878d4dc2a904b70e36fb9f5e11fd0a1c42336cc9880eba2224d332 gstreamer1-plugins-bad-free-debuginfo-1.16.1-4.el8_8.5.i686.rpm SHA-256: 79676379c9d5d77035bcd4a078a8f1ae8a27b1b0ad26d7da60dacb3e5f85c8d2 gstreamer1-plugins-bad-free-debuginfo-1.16.1-4.el8_8.5.x86_64.rpm SHA-256: 6c483e829c546774172a959a0fccf4d634f706be5c9d8ea4b1f7ccb0faa2a88e gstreamer1-plugins-bad-free-debugsource-1.16.1-4.el8_8.5.i686.rpm SHA-256: 1d39028bf73a0f8d4e8a4554267b7442b6f1cf210c0c2f30c50c021d75a15208 gstreamer1-plugins-bad-free-debugsource-1.16.1-4.el8_8.5.x86_64.rpm SHA-256: 9328cb0d3118ce6571a655080ea284bb3d7ed6cb331faf8d0b50530d75314202 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.src.rpm SHA-256: ad3c13245f6019d6b6ea42b699b390308adc1b2481eb9f695b3543dacf4826d8 ppc64le gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.ppc64le.rpm SHA-256: f7e8530fbac7e92dcefd1adf45fa7ad9b0cd20f4a66d90a9be8824852d78600c gstreamer1-plugins-bad-free-debuginfo-1.16.1-4.el8_8.5.ppc64le.rpm SHA-256: 6d6c34decd2d8791baecf19fff92d196dcf7fb3a3a3fa0ca6f58ca438969aa9e gstreamer1-plugins-bad-free-debugsource-1.16.1-4.el8_8.5.ppc64le.rpm SHA-256: d3d8e2942c143d2efce1c2978e6669ddb0128116e04efdf386e72233ea74d5eb Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.src.rpm SHA-256: ad3c13245f6019d6b6ea42b699b390308adc1b2481eb9f695b3543dacf4826d8 x86_64 gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.i686.rpm SHA-256: d324f5fda460fa6de4458c930f64cf04483aea7d409f429db6f05c09606eb2f2 gstreamer1-plugins-bad-free-1.16.1-4.el8_8.5.x86_64.rpm SHA-256: 94730d9c80878d4dc2a904b70e36fb9f5e11fd0a1c42336cc9880eba2224d332 gstreamer1-plugins-bad-free-debuginfo-1.16.1-4.el8_8.5.i686.rpm SHA-256: 79676379c9d5d77035bcd4a078a8f1ae8a27b1b0ad26d7da60dacb3e5f85c8d2 gstreamer1-plugins-bad-free-debuginfo-1.16.1-4.el8_8.5.x86_64.rpm SHA-256: 6c483e829c546774172a959a0fccf4d634f706be5c9d8ea4b1f7ccb0faa2a88e gstreamer1-plugins-bad-free-debugsource-1.16.1-4.el8_8.5.i686.rpm SHA-256: 1d39028bf73a0f8d4e8a4554267b7442b6f1cf210c0c2f30c50c021d75a15208 gstreamer1-plugins-bad-free-debugsource-1.16.1-4.el8_8.5.x86_64.rpm SHA-256: 9328cb0d3118ce6571a655080ea284bb3d7ed6cb331faf8d0b50530d75314202 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .