Critical Security Vulnerability in gstreamer1-plugins-good: Red Hat Security Advisory
Summary
RHSA-2026:73424: Red Hat Security Advisory: gstreamer1-plugins-good security update. Affects gstreamer1-plugins-good versions < 0:1.16.1-4.el8_4.5. Fixed in 0:1.16.1-4.el8_4.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
gstreamer1-plugins-good is a collection of plugins for GStreamer, a powerful multimedia framework used for handling audio and video playback. This package provides essential functionalities for media processing, including support for various formats and codecs. The recent security advisory highlights vulnerabilities that could potentially allow unauthorized access or manipulation of multimedia streams.
Vulnerability Detail
The vulnerabilities identified in gstreamer1-plugins-good stem from improper handling of certain media streams, which could lead to remote code execution or denial of service. The vulnerabilities are cataloged under CVE-2026-18295, CVE-2026-18296, CVE-2026-18298, and CVE-2026-18299. The potential ramifications include unauthorized access to sensitive data, disruption of services, and exploitation of the system by malicious actors. The CVSS score for this vulnerability is 8.8, indicating a high severity level.
How To Fix
Minimum fixed version
0:1.16.1-4.el8_4.5
This is the first release that contains the fix.
sudo dnf update gstreamer1-plugins-goodTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider disabling the affected plugins temporarily until the update can be applied. This can be done by modifying the GStreamer configuration files to exclude the vulnerable plugins.
Conclusion
The gstreamer1-plugins-good package has critical vulnerabilities that require immediate attention. Updating to the patched version is essential to ensure the security and integrity of multimedia processing on affected systems. Regular monitoring and updates are crucial for maintaining security.
See every vulnerability recorded for gstreamer1-plugins-good →
FAQ
gstreamer1-plugins-good is a set of plugins for the GStreamer multimedia framework, enabling support for various audio and video formats.
The vulnerabilities could lead to unauthorized access, remote code execution, or denial of service, posing significant risks to system security.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score for this vulnerability is 8.8, indicating a high severity level.
It is recommended to regularly check for updates and apply them promptly to mitigate security vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for gstreamer1-plugins-good.
