Skip to content
OpenAdvisories
High ALAS2-2026-3210 1 CVE

Important: gstreamer1-plugins-base security update (Amazon Linux 2)

Published Mar 30, 2026 · Updated Apr 1, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-2921: An integer overflow in the RIFF parser that can cause crashes for certain input files.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 gstreamer1-plugins-base 0:1.18.4-5.amzn2.0.10
Amazon Linux · 2 gstreamer1-plugins-base-debuginfo 0:1.18.4-5.amzn2.0.10
Amazon Linux · 2 gstreamer1-plugins-base-devel 0:1.18.4-5.amzn2.0.10
Amazon Linux · 2 gstreamer1-plugins-base-tools 0:1.18.4-5.amzn2.0.10

Vulnerabilities 1

  • High 7.8
    CVE-2026-2921

    GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability

    GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability b…

    GStreamer GStreamer gst-plugins-base1.0 gst-plugins-base1.0 Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-2921.html