Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10 enterprise_linux:10.2 | gstreamer1-plugins-ugly-free | 0:1.26.7-2.el10_2.1 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | gstreamer1-plugins-ugly-free-debuginfo | 0:1.26.7-2.el10_2.1 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | gstreamer1-plugins-ugly-free-debugsource | 0:1.26.7-2.el10_2.1 |
Vulnerabilities 2
-
High 7.1
Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser
A vulnerability was found in the GStreamer RealMedia demuxer (gst-plugins-ugly). When processing a RealMedia (.rm) file, the demuxer parses MDPR (media properties) chunks to configure audio streams. For audio stream header versions 4 and 5, the parser reads f…
-
High 7.1
Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser
A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2487613
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36673.json
-
report
https://access.redhat.com/security/cve/CVE-2026-53703
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-53703
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-53703
-
report
https://access.redhat.com/security/cve/CVE-2026-53704
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2487614
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-53704
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-53704