Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Rocky Linux RLSA-2026-6408 GStreamer Major Risk Due to External Code Flaws

rocky
Calendar Grey April 7, 2026
Rockylinux Esm H88
GStreamer plugins security update addresses significant risks including buffer overflows and arbitrary code execution.
Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

Summary

An update is available for gstreamer1-plugins-bad-free, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, gstreamer1-plugins-base. This update affects Rocky Linux 9. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


Topics%20covered

Topics Covered

security advisory code execution remote execution important GStreamer rocky linux

RPMs

gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.aarch64.rpm

gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.i686.rpm

gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.ppc64le.rpm

gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.s390x.rpm

gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.src.rpm

gstreamer1-plugins-bad-free-0:1.22.12-5.el9_7.x86_64.rpm

gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-5.el9_7.aarch64.rpm

gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-5.el9_7.i686.rpm

gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-5.el9_7.ppc64le.rpm

gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-5.el9_7.s390x.rpm

gstreamer1-plugins-bad-free-debuginfo-0:1.22.12-5.el9_7.x86_64.rpm

gstreamer1-plugins-bad-free-debugsource-0:1.22.12-5.el9_7.aarch64.rpm

gstreamer1-plugins-bad-free-debugsource-0:1.22.12-5.el9_7.i686.rpm

gstreamer1-plugins-bad-free-debugsource-0:1.22.12-5.el9_7.ppc64le.rpm

gstreamer1-plugins-bad-free-debugsource-0:1.22.12-5.el9_7.s390x.rpm

Read the Full Advisory

References

No references

CVES

https://www.cve.org/CVERecord?id=CVE-2026-2920

https://www.cve.org/CVERecord?id=CVE-2026-2921

https://www.cve.org/CVERecord?id=CVE-2026-2922

https://www.cve.org/CVERecord?id=CVE-2026-2923

https://www.cve.org/CVERecord?id=CVE-2026-3082

https://www.cve.org/CVERecord?id=CVE-2026-3083

https://www.cve.org/CVERecord?id=CVE-2026-3085

Severity
important

Name: RLSA-2026:6300
Affected Products: Rocky Linux 9

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2447490

https://bugzilla.redhat.com/show_bug.cgi?id=2447492

https://bugzilla.redhat.com/show_bug.cgi?id=2447495

https://bugzilla.redhat.com/show_bug.cgi?id=2447496

https://bugzilla.redhat.com/show_bug.cgi?id=2447498

https://bugzilla.redhat.com/show_bug.cgi?id=2447500

https://bugzilla.redhat.com/show_bug.cgi?id=2447503


Topics%20covered

Topics Covered

security advisory code execution remote execution important GStreamer rocky linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here