Critical Security Update for gstreamer1-plugins-good: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:72367: Red Hat Security Advisory: gstreamer1-plugins-good security update. Affects gstreamer1-plugins-good versions < 0:1.10.4-4.el7_9.6. Fixed in 0:1.10.4-4.el7_9.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
gstreamer1-plugins-good is a collection of plugins for GStreamer, a multimedia framework that allows the handling of audio and video streams. This package is essential for various multimedia applications, providing a range of functionalities such as audio playback, video rendering, and format conversion. However, it has been identified to have several security vulnerabilities that could potentially compromise system integrity and data security.
Vulnerability Detail
The vulnerabilities identified in gstreamer1-plugins-good include multiple issues that could lead to unauthorized access, data leakage, and system crashes. These vulnerabilities stem from improper handling of media streams and insufficient validation of input data. If exploited, they could allow attackers to execute arbitrary code, leading to severe consequences for affected systems. The vulnerabilities are tracked under CVE-2026-18295, CVE-2026-18296, CVE-2026-18298, and CVE-2026-18299, with a CVSS score of 8.8, indicating a high severity level.
How To Fix
Minimum fixed version
0:1.10.4-4.el7_9.6
This is the first release that contains the fix.
sudo dnf update gstreamer1-plugins-goodTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can restrict access to the affected multimedia functionalities until the package is updated. This can be done by modifying the application configurations to disable the use of gstreamer1-plugins-good until the vulnerabilities are addressed.
Conclusion
The gstreamer1-plugins-good package has critical vulnerabilities that require immediate attention. Updating to the latest patched version is essential to safeguard your system against potential exploits. Utilize available resources like Vulert to monitor and manage vulnerabilities effectively.
See every vulnerability recorded for gstreamer1-plugins-good →
FAQ
The main vulnerabilities include improper handling of media streams and insufficient validation of input data, which can lead to unauthorized access and system crashes.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of the vulnerabilities in gstreamer1-plugins-good is 8.8, indicating a high severity level.
If you cannot update the package immediately, consider restricting access to the affected functionalities as a temporary workaround.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:72367.json.
Related vulnerabilities
Recent vulnerabilities recorded for gstreamer1-plugins-good.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
