RHEL 9 : gstreamer1-plugins-ugly-free (RHSA-2026:67882)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67882 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is n...

RHSA-2026:55865 Red Hat Security Advisory: gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update

Bulletin has no description...

AlmaLinux 9 : gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free (ALSA-2026:55865)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55865 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 gstreamer:...

Oracle Linux 9 : gstreamer1-plugins-bad-free / and / gstreamer1-plugins-ugly-free (ELSA-2026-55865)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55865 advisory. - Fix ADPCM decoder negotiation and input size check CVE-2026-19387 Resolves: RHEL-235496 gstreamer1-plugins-ugly-free Tenable has extracted the...

AlmaLinux 10 : gstreamer1-plugins-ugly-free (ALSA-2026:55435)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:55435 advisory. gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read CVE-2026-19389 Tenable has...

RLSA-2026:55435 Important: gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL. Security Fixes: gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds chec...

gstreamer1-plugins-ugly-free security update

An update is available for gstreamer1-plugins-ugly-free. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework, based on grap...

RHSA-2026:55435 Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update

Bulletin has no description...

Important: Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update

An update for gstreamer1-plugins-ugly-free is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

RockyLinux 10 : gstreamer1-plugins-ugly-free (RLSA-2026:55435)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:55435 advisory. gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read CVE-2026-19389 Tenable ha...

RHEL 10 : gstreamer1-plugins-ugly-free (RHSA-2026:55435)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:55435 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is...

Oracle Linux 10 : gstreamer1-plugins-ugly-free (ELSA-2026-55435)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-55435 advisory. 1.26.7-2.2 - Fix CVE-2026-19389: integer overflow vulnerabilities in asfdemux Resolves: RHEL-235515 Tenable has extracted the preceding description block...

CVE-2026-19389: Integer Overflow or Wraparound

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

PT-2026-69330

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-ugly affected versions not specified Description Multiple integer overflow and underflow issues exist in the ASF demuxer asfdemux when parsing header objects from specially crafted ASF, WMV, or WMA files. Insufficient...

[SECURITY] Fedora 44 Update: gstreamer1-plugins-ugly-free-1.28.6-1.fc44

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGP L...

RHSA-2026:50691 Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update

Bulletin has no description...

RHSA-2026:50688 Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update

Bulletin has no description...

RHEL 9 : gstreamer1-plugins-ugly-free (RHSA-2026:50691)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:50691 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose...

Oracle Linux 10 : gstreamer1-plugins-bad-free, / gstreamer1-plugins-base, / gstreamer1-plugins-good, / and / gstreamer1-plugins-ugly-free (ELSA-2026-19024)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19024 advisory. - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 - Add patch for CVE-2026-2921 Resolves: RHEL-156122...

RLSA-2026:36673 Moderate: gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL. Security Fixes: gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header...