RHSA-2026:50688 Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update

Bulletin has no description...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68074 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68074 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352776...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68060 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68060 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352713...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68080 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68080 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352510...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68077 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68077 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352520...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68073 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68073 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19350837...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68078 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68078 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19500652...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68075 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68075 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19351108...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68080 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68080 Source advisory: MEND:CVE-2026-68080...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68078 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68078 Source advisory: MEND:CVE-2026-68078...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68077 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68077 Source advisory: MEND:CVE-2026-68077...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68075 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68075 Source advisory: MEND:CVE-2026-68075...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68073 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68073 Source advisory: MEND:CVE-2026-68073...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68060 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68060 Source advisory: MEND:CVE-2026-68060...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68074 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68074 Source advisory: MEND:CVE-2026-68074...

RHEL 9 : gstreamer1-plugins-ugly-free (RHSA-2026:50691)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:50691 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose...

PT-2026-71265

Name of the Vulnerable Software and Affected Versions gst-plugins-good versions prior to 1.28.6 Description A flaw exists in the avidemux element when parsing FUJIFILM metadata within an AVI strd chunk. The function gst avi demux parse strd decrements a remaining-length counter by fixed offsets o...

PT-2026-71266

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-good versions prior to 1.28.6 Description A flaw exists in the gst avi demux riff parse vprp function where the number of available gst riff vprp video field desc entries is calculated by dividing the remaining buffer siz...

PT-2026-69329

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-bad affected versions not specified Description A heap out-of-bounds write occurs in the adpcmdec element when decoding IMA/DVI ADPCM audio. This is caused by insufficient validation of the per-block sample count for...

CVE-2026-47781

A flaw was found in PDM, a Python package and dependency manager. This vulnerability allows an attacker to execute arbitrary Python code by placing a malicious file in a project's .pdm-plugins directory within an untrusted repository. When a user invokes PDM, even with a benign command, the...