Critical Security Vulnerability in gstreamer1-plugins-good: Red Hat Security Advisory
Summary
RHSA-2026:72482: Red Hat Security Advisory: gstreamer1-plugins-good security update. Affects gstreamer1-plugins-good versions < 0:1.16.1-4.el8_6.6. Fixed in 0:1.16.1-4.el8_6.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
gstreamer1-plugins-good is a collection of plugins for GStreamer, a multimedia framework that allows the handling of audio and video streams. This package is essential for applications that require media playback capabilities. The plugins included in this package enhance the functionality of GStreamer by providing additional codecs and formats. However, recent security advisories have highlighted vulnerabilities that could potentially compromise systems using this package.
Vulnerability Detail
The vulnerabilities identified in gstreamer1-plugins-good are associated with multiple CVEs, including CVE-2026-18295, CVE-2026-18296, CVE-2026-18298, and CVE-2026-18299. These vulnerabilities could allow an attacker to execute arbitrary code, leading to unauthorized access or denial of service. The vulnerabilities stem from improper handling of media streams, which can be exploited by specially crafted media files. The CVSS score for these vulnerabilities is 8.8, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
0:1.16.1-4.el8_6.6
This is the first release that contains the fix.
sudo dnf update gstreamer1-plugins-goodTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider disabling the use of the affected plugins until the update can be applied. This can be done by modifying the GStreamer configuration files to exclude the vulnerable plugins from being loaded.
Conclusion
The gstreamer1-plugins-good package has critical vulnerabilities that require immediate attention. Updating to the latest patched version is essential to safeguard systems against potential exploits. Users are encouraged to monitor their applications for vulnerabilities using tools like Vulert.
See every vulnerability recorded for gstreamer1-plugins-good →
FAQ
gstreamer1-plugins-good is a set of plugins for the GStreamer multimedia framework, providing essential codecs and formats for audio and video processing.
The vulnerabilities could allow attackers to execute arbitrary code, potentially leading to unauthorized access or denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Consider disabling the affected plugins as a temporary measure until you can apply the necessary updates.
Detailed information can be found in the Red Hat Security Advisory and the associated CVEs listed in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for gstreamer1-plugins-good.
