RHSA-2026:61588: Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.Security Fix(es): gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Moderate: gstreamer1-plugins-good security update
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gstreamer1-plugins-goodto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-debugsourceto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-gtkto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-gtk-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2 - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-qt-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2 - Upgrade
Upgrade
redhat/gstreamer1-plugins-goodto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-debugsourceto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-gtkto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-gtk-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2.aa - Upgrade
Upgrade
redhat/gstreamer1-plugins-good-qt-debuginfoto a version that resolves this vulnerability.Fixed in 1.22.1-4.el9_4.2.aa
Event History
Frequently Asked Questions
Which environments are covered by this update?
The advisory applies to listed Red Hat Enterprise Linux offerings for x86_64, ARM 64, IBM z Systems, and little-endian Power, including Extended Life Cycle, AUS, and Update Services for SAP Solutions variants.
How urgent is this update?
Red Hat rates this as a Moderate security update with medium severity (4). The provided information does not identify the specific vulnerabilities, exposure conditions, or mitigations.