Loading story…
Red Hat has released Important security updates for gstreamer1-plugins-bad-free to address two flaws in GStreamer’s gst-plugins-bad package: CVE-2026-59691 and CVE-2026-59692. The first bug affects the rfbsrc plugin’s bundled librfb code, where a malicious RFB/VNC server can trigger a heap out-of-bounds write during Hextile decoding when a 16bpp RGB565 framebuffer is advertised. The second affects the DTLS plugin, where openssl_verify_callback() reads an oversized certificate Subject DN into a fixed 2048-byte stack buffer during handshake processing, allowing a remote DTLS peer to crash the client with a crafted certificate.
The vulnerabilities were reproduced on GStreamer 1.28.3 and are slated for upstream correction in 1.28.5, with tracking advisories GST-SA-2026-0063 and GST-SA-2026-0062. Red Hat shipped remediations across multiple supported product lines, including RHEL 7 ELS, RHEL 8, RHEL 8.4/8.6/8.8 specialized channels, and RHEL 9.2 SAP-related offerings, through advisories including RHSA-2026:47731, RHSA-2026:54664, RHSA-2026:54665, RHSA-2026:54752, RHSA-2026:56658, and RHSA-2026:56772. Red Hat’s analysis indicates the DTLS flaw is most likely to result in denial of service rather than code execution, while the rfbsrc issue can cause heap corruption and process aborts when connecting to a hostile server.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
Red Hat published RHSA-2026:56772 for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support / AUS and Extended Update Support Long-Life Add-On, releasing gstreamer1-plugins-bad-free 1.16.1-4.el8_4.4 to remediate CVE-2026-59691 and CVE-2026-59692.
Red Hat published RHSA-2026:56658 for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and related offerings, releasing gstreamer1-plugins-bad-free 1.18.4-9.el9_2.5 to fix CVE-2026-59691 and CVE-2026-59692.
Red Hat published RHSA-2026:54665 for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Extended Update Support Long-Life Add-On, releasing gstreamer1-plugins-bad-free 1.16.1-4.el8_6.4 to address both CVE-2026-59691 and CVE-2026-59692.
Red Hat published RHSA-2026:54664 for affected Red Hat Enterprise Linux 8.8 channels, releasing gstreamer1-plugins-bad-free 1.16.1-4.el8_8.4 to fix CVE-2026-59691 and CVE-2026-59692.
Red Hat published RHSA-2026:54752 for Red Hat Enterprise Linux 7 Extended Lifecycle Support, providing updated gstreamer1-plugins-bad-free 1.10.4-7.el7_9 packages to remediate CVE-2026-59691 and CVE-2026-59692.
Red Hat published advisory RHSA-2026:47731 for Red Hat Enterprise Linux 8, releasing gstreamer1-plugins-bad-free 1.16.1-9.el8_10.1 to fix the rfbsrc/librfb heap out-of-bounds write (CVE-2026-59691) and the DTLS Subject DN stack buffer overflow (CVE-2026-59692).
Red Hat Bugzilla entries 2497343 and 2497344 described CVE-2026-59691 in GStreamer's rfbsrc/librfb component and CVE-2026-59692 in its DTLS plugin, noting both were reproduced on GStreamer 1.28.3 and planned to be fixed in GStreamer 1.28.5. The reports credit Clouditera Security, Z.ai Security, and NSFOCUS as reporters.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
8 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceaccess.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released multiple **Important** security advisories for `gstreamer1-plugins-bad-free` across **Red Hat Enterprise Linux 9 and 10**, fixing two GStreamer vulnerabilities tracked as **`CVE-2026-59691`** and **`CVE-2026-59692`**. The first flaw is a heap out-of-bounds write in `rfbsrc/librfb` Hextile handling when processing a **16bpp framebuffer**, while the second is a stack buffer overflow in `openssl_verify_callback` tied to a **DTLS certificate Subject DN**. The advisories cover standard and extended support channels, including RHEL 9.4, 9.6, 9.8, and RHEL 10.0 product variants. Updated packages were issued for multiple architectures, including **`x86_64`**, **`aarch64`**, **`ppc64le`**, and **`s390x`**, with package versions including `1.22.1-6.el9_4.6`, `1.22.12-5.el9_6.6`, `1.22.12-7.el9_8.3`, `1.24.11-3.el10_0.6`, and `1.26.7-2.el10_2.6`. Affected offerings also include **Extended Update Support**, **Extended Life Cycle**, **SAP Solutions update services**, **4-years-of-updates/support variants**, and **CodeReady Linux Builder** repositories. Red Hat instructed customers to apply the updated packages through standard patching processes to remediate affected systems.
Aug 20, 2026
Red Hat released updated `gstreamer1-plugins-good` packages for RHEL 8 to fix three vulnerabilities, including **CVE-2026-18649**, an unbounded memory growth flaw in the `rtph264depay` and `rtph265depay` RTP depayloaders. The bug lets an attacker send a start fragment followed by an unlimited stream of continuation fragments, causing the `GstAdapter` reassembly buffer to grow without a maximum size until process memory is exhausted. Red Hat rated the advisory **Moderate** and said corresponding fixes were also issued for RHEL 9 and RHEL 10. The same update also addresses **CVE-2026-73433**, an unsigned integer underflow in avidemux FUJIFILM `strd` parsing that can lead to out-of-bounds read/write, and **CVE-2026-73434**, an out-of-bounds read in avidemux `vprp` video field descriptor parsing. Downstream tracking shows AlmaLinux 8 shipped matching fixes under `ALSA-2026:56966`, and Nessus coverage notes the package update applies across multiple repository variants. The weaknesses map to well-known classes including uncontrolled resource consumption (`CWE-770`) and out-of-bounds read (`CWE-125`), underscoring denial-of-service and memory-safety risk in media parsing components.
Aug 20, 2026
Red Hat released `glib2` security updates for Red Hat Enterprise Linux 9 and 10, and a related `mingw-glib2` update for RHEL 8, to remediate a cluster of GLib vulnerabilities spanning memory-safety bugs, path traversal, and denial of service. The RHEL 9 advisory `RHSA-2026:55440` ships `glib2-2.68.4-19.el9_8.9`, while the RHEL 10 advisory `RHSA-2026:57015` ships `glib2-2.80.4-12.el10_2.21`; Red Hat also tied RHEL 8 remediation to `RHSA-2026:49512`. The issues were rated Moderate for the RHEL 9 and 10 `glib2` updates, while the RHEL 8 `mingw-glib2` advisory was rated Important. The patched flaws include several out-of-bounds and buffer over-read conditions such as `CVE-2026-58010`, `CVE-2026-58011`, `CVE-2026-58012`, `CVE-2026-58013`, and `CVE-2026-58014`, affecting functions including `gvs_tuple_is_normal()`, `g_date_time_get_ymd()`, `g_regex_replace()`, `g_io_channel_read_line_backend()`, and `g_key_file_get_locale_string_list()`. Red Hat also fixed `CVE-2026-58015`, a client-side D-Bus `DBUS_COOKIE_SHA1` path traversal flaw that could let a malicious server induce reads outside `~/.dbus-keyrings/` and verify guessed file contents, and `CVE-2026-15588`, a `GDBusServer` pre-authentication denial-of-service bug caused by unbounded SASL line buffering that could exhaust memory and CPU.
Aug 21, 2026