[El-errata] ELSA-2026-55865 Important: Oracle Linux 9 gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-55865

http://linux.oracle.com/errata/ELSA-2026-55865.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.i686.rpm
gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.x86_64.rpm
gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4.i686.rpm
gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4.x86_64.rpm
gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.i686.rpm
gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.x86_64.rpm
gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2.i686.rpm
gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2.x86_64.rpm

aarch64:
gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.aarch64.rpm
gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4.aarch64.rpm
gstreamer1-plugins-bad-free-libs-1.22.12-7.el9_8.4.aarch64.rpm
gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/gstreamer1-plugins-ugly-free-1.22.12-6.el9_8.2.src.rpm

Related CVEs:

CVE-2026-19387
CVE-2026-19389




Description of changes:

gstreamer1-plugins-bad-free
[1.22.12-7.4]
- Fix ADPCM decoder negotiation and input size check
  (CVE-2026-19387)
  Resolves: RHEL-235496

gstreamer1-plugins-ugly-free
[1.22.12-6.2]
- Fix integer overflows during bounds checks in asfdemux
- Resolves: RHEL-235519