RHSA-2026:49604: Important: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.Security Fix(es): gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow (CVE-2026-53705) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Important: gstreamer1-plugins-good security update
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gstreamer1-plugins-goodto a version that resolves this vulnerability.Fixed in 1.16.1-4.el8_6.1 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-debuginfoto a version that resolves this vulnerability.Fixed in 1.16.1-4.el8_6.1 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-debugsourceto a version that resolves this vulnerability.Fixed in 1.16.1-4.el8_6.1 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-gtkto a version that resolves this vulnerability.Fixed in 1.16.1-4.el8_6.1 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-gtk-debuginfoto a version that resolves this vulnerability.Fixed in 1.16.1-4.el8_6.1
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:49604?
The severity of RHSA-2026:49604 is classified as high with a score of 7.
How do I fix RHSA-2026:49604?
To fix RHSA-2026:49604, update the gstreamer1-plugins-good packages to the latest version provided by Red Hat.
What type of vulnerability is addressed in RHSA-2026:49604?
RHSA-2026:49604 addresses a heap buffer overflow vulnerability in the GStreamer framework.
What products are affected by RHSA-2026:49604?
Affected products include various gstreamer1-plugins-good packages in Red Hat Enterprise Linux.
What does the term 'heap buffer overflow' mean in the context of RHSA-2026:49604?
In the context of RHSA-2026:49604, a heap buffer overflow refers to a vulnerability where an application writes more data to a buffer allocated on the heap than it was allocated for, which can lead to data corruption and potential code execution.