RHSA-2026:55436: Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.Security Fix(es): gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write (CVE-2026-73433) gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing (CVE-2026-73434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gstreamer1-plugins-goodto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-debugsourceto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-gtkto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-gtk-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-qt-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4 - Upgrade
Upgrade
redhat/gstreamer1-plugins-goodto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-debugsourceto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-gtkto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-gtk-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-qt-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.12-7.el9_8.4.aa - Upgrade
Upgrade
gstreamer1-plugins-goodto a version that resolves this vulnerability.Patch CVE-2026-73434 - Upgrade
Upgrade
gstreamer1-plugins-goodto a version that resolves this vulnerability.Patch CVE-2026-73433
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:55436?
The severity of RHSA-2026:55436 is classified as moderate.
How do I fix RHSA-2026:55436?
To fix RHSA-2026:55436, you should update the gstreamer1-plugins-good packages to the latest available version.
What vulnerabilities are addressed in RHSA-2026:55436?
RHSA-2026:55436 addresses an unsigned integer vulnerability in the gstreamer1-plugins-good package.
Which packages are affected by RHSA-2026:55436?
The affected packages include redhat/gstreamer1-plugins-good and its associated debug and GTK packages.
Is there a workaround for RHSA-2026:55436?
There is no documented workaround for RHSA-2026:55436; the recommended action is to apply the security update.