Critical Security Update for gstreamer1-plugins-good: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:73040: Red Hat Security Advisory: gstreamer1-plugins-good security update. Affects gstreamer1-plugins-good versions < 0:1.16.1-5.el8_8.6. Fixed in 0:1.16.1-5.el8_8.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
gstreamer1-plugins-good is a collection of plugins for the GStreamer multimedia framework, which is widely used for handling audio and video streams. This package provides essential functionalities that enhance the capabilities of GStreamer, making it a vital component for applications that require media processing. The recent security advisory highlights several vulnerabilities that could potentially compromise the integrity and confidentiality of systems utilizing this package.
Vulnerability Detail
The vulnerabilities identified in gstreamer1-plugins-good stem from improper handling of media streams, which could lead to arbitrary code execution, denial of service, or data leakage. These vulnerabilities, cataloged under CVE-2026-18295, CVE-2026-18296, CVE-2026-18298, and CVE-2026-18299, pose significant risks, especially in environments where untrusted media content is processed. The CVSS score of 8.8 indicates a high severity level, necessitating immediate attention from system administrators and developers.
How To Fix
Minimum fixed version
0:1.16.1-5.el8_8.6
This is the first release that contains the fix.
sudo dnf update gstreamer1-plugins-goodTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider restricting access to the application processing untrusted media content or disabling the use of vulnerable plugins until the update can be applied. This can help mitigate potential exploitation while a permanent fix is being implemented.
Conclusion
The gstreamer1-plugins-good package has been identified with critical vulnerabilities that require immediate attention. Updating to the latest patched version is essential to ensure the security and integrity of systems utilizing this package. Users are encouraged to monitor their applications for vulnerabilities using tools like Vulert to maintain a secure environment.
See every vulnerability recorded for gstreamer1-plugins-good →
FAQ
The vulnerabilities include improper handling of media streams that could lead to arbitrary code execution and data leakage.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. Visit Vulert Scanner to check your application without needing to sign up.
The CVSS score of the vulnerabilities in gstreamer1-plugins-good is 8.8, indicating a high severity level.
As a temporary measure, restrict access to the application that processes untrusted media content or disable the vulnerable plugins until you can apply the update.
More details can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:73040.json.
Related vulnerabilities
Recent vulnerabilities recorded for gstreamer1-plugins-good.
