Critical Security Update for gstreamer1-plugins-ugly-free: CVE-2026-19389
Summary
RHSA-2026:67883: Red Hat Security Advisory: gstreamer1-plugins-ugly-free security update. Affects gstreamer1-plugins-ugly-free versions < 0:1.24.11-1.el10_0.3. Fixed in 0:1.24.11-1.el10_0.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
gstreamer1-plugins-ugly-free is a collection of plugins for the GStreamer multimedia framework, which allows for the handling of various media formats. This package is essential for applications that require advanced media processing capabilities. However, it has been identified to have a security vulnerability that could potentially expose systems to risks if not addressed promptly.
Vulnerability Detail
The vulnerability, identified as CVE-2026-19389, originates from a flaw in the gstreamer1-plugins-ugly-free package that could allow an attacker to exploit the system through crafted media files. The ramifications of this vulnerability include unauthorized access to system resources, potential data leakage, and denial of service. The vulnerability has a CVSS score of 7.1, indicating a high severity level, which necessitates immediate attention.
How To Fix
Minimum fixed version
0:1.24.11-1.el10_0.3
This is the first release that contains the fix.
sudo dnf update gstreamer1-plugins-ugly-freeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, if updating the package is not immediately feasible, consider restricting access to the application that utilizes gstreamer1-plugins-ugly-free until the patch is applied. This can help mitigate potential exploitation of the vulnerability.
Conclusion
The gstreamer1-plugins-ugly-free package has a critical vulnerability (CVE-2026-19389) that poses significant risks to systems using it. Immediate action is required to update the package to the latest version to mitigate these risks. Users should also consider using tools like Vulert to monitor for vulnerabilities in their software.
See every vulnerability recorded for gstreamer1-plugins-ugly-free →
FAQ
CVE-2026-19389 is a security vulnerability in the gstreamer1-plugins-ugly-free package that could allow attackers to exploit systems through crafted media files.
The vulnerability has a CVSS score of 7.1, indicating a high severity level that requires immediate attention.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, restrict access to the application using the vulnerable package as a temporary workaround.
More information can be found in the Red Hat Security Advisory and the CVE database.
Related vulnerabilities
Recent vulnerabilities recorded for gstreamer1-plugins-ugly-free.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
