Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

GStreamer 1 Plugin Update Fixes Security Flaw in Red Hat Systems

published 1 year ago

Summary

The GStreamer 1 plugin update addresses a security issue in Red Hat systems. This issue could allow an attacker to execute malicious code on a vulnerable system. To fix this issue, update your Red Hat system with the latest GStreamer 1 plugin version.

What to do

Update redhat gstreamer1-plugins-bad-free to version 0:1.16.1-3.el8_6.
Update redhat gstreamer1-plugins-bad-free-debuginfo to version 0:1.16.1-3.el8_6.
Update redhat gstreamer1-plugins-bad-free-debugsource to version 0:1.16.1-3.el8_6.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.6::appstream	redhat	gstreamer1-plugins-bad-free	< 0:1.16.1-3.el8_6 Fix: upgrade to 0:1.16.1-3.el8_6
Red Hat:rhel_aus:8.6::appstream	redhat	gstreamer1-plugins-bad-free-debuginfo	< 0:1.16.1-3.el8_6 Fix: upgrade to 0:1.16.1-3.el8_6
Red Hat:rhel_aus:8.6::appstream	redhat	gstreamer1-plugins-bad-free-debugsource	< 0:1.16.1-3.el8_6 Fix: upgrade to 0:1.16.1-3.el8_6
Red Hat:rhel_e4s:8.6::appstream	redhat	gstreamer1-plugins-bad-free	< 0:1.16.1-3.el8_6 Fix: upgrade to 0:1.16.1-3.el8_6
Red Hat:rhel_e4s:8.6::appstream	redhat	gstreamer1-plugins-bad-free-debuginfo	< 0:1.16.1-3.el8_6 Fix: upgrade to 0:1.16.1-3.el8_6
Red Hat:rhel_e4s:8.6::appstream	redhat	gstreamer1-plugins-bad-free-debugsource	< 0:1.16.1-3.el8_6 Fix: upgrade to 0:1.16.1-3.el8_6
Red Hat:rhel_tus:8.6::appstream	redhat	gstreamer1-plugins-bad-free	< 0:1.16.1-3.el8_6 Fix: upgrade to 0:1.16.1-3.el8_6
Red Hat:rhel_tus:8.6::appstream	redhat	gstreamer1-plugins-bad-free-debuginfo	< 0:1.16.1-3.el8_6 Fix: upgrade to 0:1.16.1-3.el8_6
Red Hat:rhel_tus:8.6::appstream	redhat	gstreamer1-plugins-bad-free-debugsource	< 0:1.16.1-3.el8_6 Fix: upgrade to 0:1.16.1-3.el8_6

Original advisory text

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

References

https://access.redhat.com/errata/RHSA-2025:9056 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2367919 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9056.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-3887 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-3887 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-3887 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-25-267/ Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published13 Jun 2025

Updated12 Jul 2026

First seen12 Jul 2026

Sources

RHSA-2025:9056 · OSV

Track software like this

Free during beta