Back to Security Advisories

Gstreamer1-Plugins-Base Security Update — AlmaLinux 8 (ALSA-2026:99012)

ALSA-2026:99012 updates gstreamer1-plugins-base on AlmaLinux 8, resolving 2 CVEs — the listed flaws (CVE-2026-1257, CVE-2026-125712). Apply the errata with dnf; service restarts where the component runs as one.

High 7.5 CVSS
AlmaLinux 8

What this means under a SharedLicense license

gstreamer1-plugins-base on AlmaLinux 8 is the exposure surface; the advisory's own severity data tops out at CVSS .

Type:

security

Severity:

important

Release date:

2026-11-12

Description:

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

* gst-plugins-base: gst-plugins-base: Missing bounds checks in RTCP SDES packet parsing (CVE-2026-125712)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture Package Checksum
aarch64 gstreamer1-plugins-base-devel-1.16.1-8.el8_10.aarch64.rpm 031ea92d28129dc14fde305a16633196ccfc9936971440a27392572279166572
aarch64 gstreamer1-plugins-base-1.16.1-8.el8_10.aarch64.rpm 2d3555c0f3a23c726876fe3a997da34aca15bcd0070f59370dbd13a09d4f01b1
i686 gstreamer1-plugins-base-devel-1.16.1-8.el8_10.i686.rpm 0a5f8f4cc9fd3d98b08df55acbb39b23e1c6bc39c1fe9e0738c1379b85d8f7f8
i686 gstreamer1-plugins-base-1.16.1-8.el8_10.i686.rpm f730a963331ef73045b4b04ff9325a0f64d9da0bd96f46e6caf7493cccab52b3
ppc64le gstreamer1-plugins-base-devel-1.16.1-8.el8_10.ppc64le.rpm b0bd5a233665f109c493f37ea6ad4e22e23b3078be75ef0725745e5f0b3bb433
ppc64le gstreamer1-plugins-base-1.16.1-8.el8_10.ppc64le.rpm cdf2778424137846a1d24f132c4d104fa1b94deb986d843d105e0b00cab7b0f5
s390x gstreamer1-plugins-base-1.16.1-8.el8_10.s390x.rpm 3977cbca8407229e57c0d3ab4df968641d1068de8343048be340e3463c9a36a3
s390x gstreamer1-plugins-base-devel-1.16.1-8.el8_10.s390x.rpm 647796b8006c77162b9e2571d1d2bf013990423c795e789487c6558f7863aa57
x86_64 gstreamer1-plugins-base-1.16.1-8.el8_10.x86_64.rpm d5c6172413d6823ba0172feb5e3575f27ad0642ca9660091e069c9778426304f
x86_64 gstreamer1-plugins-base-devel-1.16.1-8.el8_10.x86_64.rpm e811818437965c3679f5fec3de8e993ac1f7c9407c0b784f4505a9615fe4c7d2

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

Frequently Asked Questions

What does ALSA-2026:99012 fix?
2 CVEs in gstreamer1-plugins-base, including the listed flaws (CVE-2026-1257, CVE-2026-125712).
Which release is covered?
AlmaLinux 8.
How do I apply it?
dnf update gstreamer1-plugins-base — restart the service if it runs persistently.

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System