RLSA-2026:59152

Security

Mirrored from RHSA-2026:59152

Issued at: 2026-08-25

Updated at: 2026-08-25

Advisory content derived from Red Hat RHSA-2026:59152, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: gstreamer1-plugins-good security update

Description

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296)

* gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298)

* gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay (CVE-2026-18299)

* GStreamer: GStreamer: Remote code execution via MRF file parsing (CVE-2026-18295)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64

Rocky Linux 9 ppc64le

Rocky Linux 9 s390x

Rocky Linux 9 x86_64

Fixes

2520580

2520590

2520605

2520606

CVEs

CVE-2026-18295

CVE-2026-18296

CVE-2026-18298

CVE-2026-18299

Affected packages

Rocky Linux 9 aarch64 - AppStream

gstreamer1-plugins-good-0:1.22.12-7.el9_8.8.aarch64.rpm

gstreamer1-plugins-good-0:1.22.12-7.el9_8.8.src.rpm

gstreamer1-plugins-good-debuginfo-0:1.22.12-7.el9_8.8.aarch64.rpm

gstreamer1-plugins-good-debugsource-0:1.22.12-7.el9_8.8.aarch64.rpm

gstreamer1-plugins-good-gtk-0:1.22.12-7.el9_8.8.aarch64.rpm

gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-7.el9_8.8.aarch64.rpm

Rocky Linux 9 x86_64 - AppStream

gstreamer1-plugins-good-0:1.22.12-7.el9_8.8.i686.rpm

gstreamer1-plugins-good-0:1.22.12-7.el9_8.8.src.rpm

gstreamer1-plugins-good-0:1.22.12-7.el9_8.8.x86_64.rpm

gstreamer1-plugins-good-debuginfo-0:1.22.12-7.el9_8.8.i686.rpm

gstreamer1-plugins-good-debuginfo-0:1.22.12-7.el9_8.8.x86_64.rpm

gstreamer1-plugins-good-debugsource-0:1.22.12-7.el9_8.8.i686.rpm

gstreamer1-plugins-good-debugsource-0:1.22.12-7.el9_8.8.x86_64.rpm

gstreamer1-plugins-good-gtk-0:1.22.12-7.el9_8.8.i686.rpm

gstreamer1-plugins-good-gtk-0:1.22.12-7.el9_8.8.x86_64.rpm

gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-7.el9_8.8.i686.rpm

gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-7.el9_8.8.x86_64.rpm

Rocky Linux 9 ppc64le - AppStream

gstreamer1-plugins-good-0:1.22.12-7.el9_8.8.ppc64le.rpm

gstreamer1-plugins-good-0:1.22.12-7.el9_8.8.src.rpm

gstreamer1-plugins-good-debuginfo-0:1.22.12-7.el9_8.8.ppc64le.rpm

gstreamer1-plugins-good-debugsource-0:1.22.12-7.el9_8.8.ppc64le.rpm

gstreamer1-plugins-good-gtk-0:1.22.12-7.el9_8.8.ppc64le.rpm

gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-7.el9_8.8.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

gstreamer1-plugins-good-0:1.22.12-7.el9_8.8.s390x.rpm

gstreamer1-plugins-good-0:1.22.12-7.el9_8.8.src.rpm

gstreamer1-plugins-good-debuginfo-0:1.22.12-7.el9_8.8.s390x.rpm

gstreamer1-plugins-good-debugsource-0:1.22.12-7.el9_8.8.s390x.rpm

gstreamer1-plugins-good-gtk-0:1.22.12-7.el9_8.8.s390x.rpm

gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-7.el9_8.8.s390x.rpm