{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/vex/2026/cve-2026-85150-els_os-cloudlinux7els.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-10-23T17:21:20Z",
      "generator": {
        "date": "2026-10-23T17:21:20Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2026-85150-ELS_OS-CLOUDLINUX7ELS",
      "initial_release_date": "2026-09-03T13:06:00Z",
      "revision_history": [
        {
          "date": "2026-09-03T13:06:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-23T17:21:20Z",
          "number": "2",
          "summary": "Official Publication"
        }
      ],
      "status": "final",
      "version": "2"
    },
    "title": "Security update on CVE-2026-85150"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "CloudLinux 7",
                "product": {
                  "name": "CloudLinux 7",
                  "product_id": "CloudLinux-7",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "CloudLinux"
          }
        ],
        "category": "vendor",
        "name": "Cloud Linux Software, Inc."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
                  "product_id": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base-tools@1.10.4-2.0.3.el7.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
                  "product_id": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base@1.10.4-2.0.3.el7.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
                  "product_id": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base-devel@1.10.4-2.0.3.el7.tuxcare.els1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
                "product": {
                  "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
                  "product_id": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base-tools@1.10.4-2.0.3.el7.tuxcare.els1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
                "product": {
                  "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
                  "product_id": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base@1.10.4-2.0.3.el7.tuxcare.els1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
                "product": {
                  "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
                  "product_id": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base-devel@1.10.4-2.0.3.el7.tuxcare.els1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch",
                "product": {
                  "name": "gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch",
                  "product_id": "gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gstreamer1-plugins-base-devel-docs@1.10.4-2.0.3.el7.tuxcare.els1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "CloudLinux"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686"
        },
        "product_reference": "gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686"
        },
        "product_reference": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch"
        },
        "product_reference": "gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686"
        },
        "product_reference": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-85150",
      "notes": [
        {
          "category": "description",
          "text": "A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length calculation to underflow, leading to a crash of the process parsing the header. On an RTSP server this can be triggered by a remote, unauthenticated attacker sending a single malformed request when the server has authentication enabled; the same flaw can also be triggered against an RTSP client by a malicious or compromised RTSP server. Successful exploitation results in a denial of service (application crash) and has no confirmed impact on confidentiality or integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
          "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
          "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
          "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
          "CloudLinux-7:gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch",
          "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
          "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-85150"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:66460",
          "url": "https://access.redhat.com/errata/RHSA-2026:66460"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:67145",
          "url": "https://access.redhat.com/errata/RHSA-2026:67145"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:69100",
          "url": "https://access.redhat.com/errata/RHSA-2026:69100"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-85150",
          "url": "https://access.redhat.com/security/cve/CVE-2026-85150"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2527936",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527936"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer-security/-/merge_requests/120",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer-security/-/merge_requests/120"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/blob/main/subprojects/gst-plugins-base/gst-libs/gst/rtsp/gstrtspmessage.c#L1408",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/blob/main/subprojects/gst-plugins-base/gst-libs/gst/rtsp/gstrtspmessage.c#L1408"
        }
      ],
      "release_date": "2026-09-03T13:06:00Z",
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        },
        {
          "category": "impact",
          "date": "2026-10-19T15:52:08.193968Z",
          "details": "unknown",
          "product_ids": [
            "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
            "CloudLinux-7:gstreamer1-plugins-base-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
            "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
            "CloudLinux-7:gstreamer1-plugins-base-devel-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64",
            "CloudLinux-7:gstreamer1-plugins-base-devel-docs-0:1.10.4-2.0.3.el7.tuxcare.els1.noarch",
            "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.i686",
            "CloudLinux-7:gstreamer1-plugins-base-tools-0:1.10.4-2.0.3.el7.tuxcare.els1.x86_64"
          ]
        }
      ]
    }
  ]
}