Red Hat Product Errata RHSA-2026:56966 - Security Advisory Issued: 2026-08-19 Updated: 2026-08-19 RHSA-2026:56966 - Security Advisory Overview Updated Packages Synopsis Moderate: gstreamer1-plugins-good security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649) gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write (CVE-2026-73433) gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing (CVE-2026-73434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2510614 - CVE-2026-18649 gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders BZ - 2514801 - CVE-2026-73433 gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write BZ - 2514807 - CVE-2026-73434 gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing CVEs CVE-2026-18649 CVE-2026-73433 CVE-2026-73434 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.3.src.rpm SHA-256: 777cf0d1211386a4c60799d570ddce2b44e5f26e7718c1117bcad3181b284da8 x86_64 gstreamer1-plugins-good-1.16.1-7.el8_10.3.i686.rpm SHA-256: 07e04f9420ca79017935ccbb9d29d170c4a5b25dc723755d1a7d65246d4e0cae gstreamer1-plugins-good-1.16.1-7.el8_10.3.x86_64.rpm SHA-256: 40ce73b963c83dcb108f654aaac416c92dc193649b68594be0b3df9551b083da gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.3.i686.rpm SHA-256: 2640e349702dce4e7961866d9eb152e48fa1c896eb57c949a1ece0379dfb177f gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.3.x86_64.rpm SHA-256: 80338a60d71d582150b70449c8724f18068d3cf95141bf26640bab0ac2cb79b3 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.3.i686.rpm SHA-256: 40bf524340ef5460a155d76023a79e57ed5b960ed9f63ea1d46c0167ebe4f4fe gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.3.x86_64.rpm SHA-256: bd56026259da248ce38522c7023d3b0f151c9794dd38e644b58536a0819b3ff5 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.3.i686.rpm SHA-256: 08651e4d87e2cb50e3a8fa71883e81a0b752170f3e13bc18bb9169e2175c9f0f gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.3.x86_64.rpm SHA-256: 24966fe83d750be214fc1c02b7a675c81fa0567ab6d0621ec7efc6e64efd4540 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.3.i686.rpm SHA-256: ab431e9cc932cf6c1ce89a12530e728a46adc473d75bbd358ba690d3d04f0a2d gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.3.x86_64.rpm SHA-256: b994cce7d8c202ba5d5f835d362e17ccf11601204a5a4bd20154b899f1404225 Red Hat Enterprise Linux for IBM z Systems 8 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.3.src.rpm SHA-256: 777cf0d1211386a4c60799d570ddce2b44e5f26e7718c1117bcad3181b284da8 s390x gstreamer1-plugins-good-1.16.1-7.el8_10.3.s390x.rpm SHA-256: 3aacfac16ba2aeb5bf4bef19e2f77f108e5b7697f18fa9beff7749979b5a8664 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.3.s390x.rpm SHA-256: 8b95d4a22ce3521c9154ee703dbb182a12d31bf2bc426348a8f12e2205100666 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.3.s390x.rpm SHA-256: 760f021512c0c0af0193090b4f6e7c1ec949cc93718d9942b1d9658decb808d2 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.3.s390x.rpm SHA-256: 5dcc91f20ea68aebfed4640a9a5991b2b0a3b62e6254dc318ddae9207b7a58d6 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.3.s390x.rpm SHA-256: 3cdfb48f0e99f5cebcf8004ee9e45abb2f0bc2676cd29c00b551f4504f663471 Red Hat Enterprise Linux for Power, little endian 8 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.3.src.rpm SHA-256: 777cf0d1211386a4c60799d570ddce2b44e5f26e7718c1117bcad3181b284da8 ppc64le gstreamer1-plugins-good-1.16.1-7.el8_10.3.ppc64le.rpm SHA-256: 75809ba34df612fce5f7070ce39e817be4365da5aafc8c7b052dbfbc7e08c760 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.3.ppc64le.rpm SHA-256: a87be2740332dc7b3333533f8ca4fb6a1f8c775c7555607c201515676e904a31 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.3.ppc64le.rpm SHA-256: feb2da7cfc08b0825d5fa8defe713d64501cfeacbf8e66b9448d6e9a5a2f2173 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.3.ppc64le.rpm SHA-256: 7ea9e1836184d8902825414080faaf2f2fcde7c09c2f640f9f8e5b381e26e67f gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.3.ppc64le.rpm SHA-256: e210771eb0875393e4b8d9ba6e0b78ee6a9db94264eed60d100cada365916315 Red Hat Enterprise Linux for ARM 64 8 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.3.src.rpm SHA-256: 777cf0d1211386a4c60799d570ddce2b44e5f26e7718c1117bcad3181b284da8 aarch64 gstreamer1-plugins-good-1.16.1-7.el8_10.3.aarch64.rpm SHA-256: 0f3bd35d6580d75024cdf59d7b81e38a0c64273b56afe11044ca66c523b61599 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.3.aarch64.rpm SHA-256: aa99222b4a139f88dc3edd52f93eb04b04ef6c800817c9cef862fedd8040502c gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.3.aarch64.rpm SHA-256: e0c6928d80b69bc544930bcd9d757365e0cd1f4aa9e0bba535478821c4ba3212 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.3.aarch64.rpm SHA-256: 267d10fdcb33f07264d3c057f3bef9f383c2360d3233ba9b2260b0ef6d9db79c gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.3.aarch64.rpm SHA-256: 309199c9493e0765ad2486d5fd90ef8fd872dceb99ad535eaeaca2a7e7fb5d33 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.3.src.rpm SHA-256: 777cf0d1211386a4c60799d570ddce2b44e5f26e7718c1117bcad3181b284da8 x86_64 gstreamer1-plugins-good-1.16.1-7.el8_10.3.i686.rpm SHA-256: 07e04f9420ca79017935ccbb9d29d170c4a5b25dc723755d1a7d65246d4e0cae gstreamer1-plugins-good-1.16.1-7.el8_10.3.x86_64.rpm SHA-256: 40ce73b963c83dcb108f654aaac416c92dc193649b68594be0b3df9551b083da gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.3.i686.rpm SHA-256: 2640e349702dce4e7961866d9eb152e48fa1c896eb57c949a1ece0379dfb177f gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.3.x86_64.rpm SHA-256: 80338a60d71d582150b70449c8724f18068d3cf95141bf26640bab0ac2cb79b3 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.3.i686.rpm SHA-256: 40bf524340ef5460a155d76023a79e57ed5b960ed9f63ea1d46c0167ebe4f4fe gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.3.x86_64.rpm SHA-256: bd56026259da248ce38522c7023d3b0f151c9794dd38e644b58536a0819b3ff5 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.3.i686.rpm SHA-256: 08651e4d87e2cb50e3a8fa71883e81a0b752170f3e13bc18bb9169e2175c9f0f gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.3.x86_64.rpm SHA-256: 24966fe83d750be214fc1c02b7a675c81fa0567ab6d0621ec7efc6e64efd4540 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.3.i686.rpm SHA-256: ab431e9cc932cf6c1ce89a12530e728a46adc473d75bbd358ba690d3d04f0a2d gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.3.x86_64.rpm SHA-256: b994cce7d8c202ba5d5f835d362e17ccf11601204a5a4bd20154b899f1404225 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.3.src.rpm SHA-256: 777cf0d1211386a4c60799d570ddce2b44e5f26e7718c1117bcad3181b284da8 aarch64 gstreamer1-plugins-good-1.16.1-7.el8_10.3.aarch64.rpm SHA-256: 0f3bd35d6580d75024cdf59d7b81e38a0c64273b56afe11044ca66c523b61599 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.3.aarch64.rpm SHA-256: aa99222b4a139f88dc3edd52f93eb04b04ef6c800817c9cef862fedd8040502c gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.3.aarch64.rpm SHA-256: e0c6928d80b69bc544930bcd9d757365e0cd1f4aa9e0bba535478821c4ba3212 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.3.aarch64.rpm SHA-256: 267d10fdcb33f07264d3c057f3bef9f383c2360d3233ba9b2260b0ef6d9db79c gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.3.aarch64.rpm SHA-256: 309199c9493e0765ad2486d5fd90ef8fd872dceb99ad535eaeaca2a7e7fb5d33 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.3.src.rpm SHA-256: 777cf0d1211386a4c60799d570ddce2b44e5f26e7718c1117bcad3181b284da8 ppc64le gstreamer1-plugins-good-1.16.1-7.el8_10.3.ppc64le.rpm SHA-256: 75809ba34df612fce5f7070ce39e817be4365da5aafc8c7b052dbfbc7e08c760 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.3.ppc64le.rpm SHA-256: a87be2740332dc7b3333533f8ca4fb6a1f8c775c7555607c201515676e904a31 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.3.ppc64le.rpm SHA-256: feb2da7c