Red Hat Product Errata RHSA-2026:59133 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:59133 - Security Advisory Overview Updated Packages Synopsis Important: gstreamer1-plugins-good security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296) gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2520580 - CVE-2026-18296 gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow BZ - 2520590 - CVE-2026-18298 gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing CVEs CVE-2026-18296 CVE-2026-18298 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM gstreamer1-plugins-good-1.26.7-2.el10_2.7.src.rpm SHA-256: 2966cfd7bb026f78d86dcd6802f3a9cd76e4f042322808517b94e36978f94c76 x86_64 gstreamer1-plugins-good-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: 888b76de49df3bf783fef5013900fb16d38a7fb47f0793be0b88712bc08c0882 gstreamer1-plugins-good-debuginfo-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: f523bf860fd098c31100a8ac6f56fdd52ab16e370065de1b28a90427ec20a435 gstreamer1-plugins-good-debugsource-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: 123cb31952c2605c5869a7beaf3e629cbc923b6ab4e7f47f8804c64e039d838a gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: cdea4abbcbb2e9384fc0247883107308f0b9d764cf0f957d0c0d5a4461df1351 gstreamer1-plugins-good-gtk-debuginfo-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: a29f9e248566751ce042332e666b787b3ceb43059462cccc4ef1431a1cdc3bc2 gstreamer1-plugins-good-qt6-debuginfo-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: 07c222619da1b52c8fd8558be17f56f666ba80a466c4fcca915dc7d6f9203dad Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM gstreamer1-plugins-good-1.26.7-2.el10_2.7.src.rpm SHA-256: 2966cfd7bb026f78d86dcd6802f3a9cd76e4f042322808517b94e36978f94c76 x86_64 gstreamer1-plugins-good-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: 888b76de49df3bf783fef5013900fb16d38a7fb47f0793be0b88712bc08c0882 gstreamer1-plugins-good-debuginfo-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: f523bf860fd098c31100a8ac6f56fdd52ab16e370065de1b28a90427ec20a435 gstreamer1-plugins-good-debugsource-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: 123cb31952c2605c5869a7beaf3e629cbc923b6ab4e7f47f8804c64e039d838a gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: cdea4abbcbb2e9384fc0247883107308f0b9d764cf0f957d0c0d5a4461df1351 gstreamer1-plugins-good-gtk-debuginfo-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: a29f9e248566751ce042332e666b787b3ceb43059462cccc4ef1431a1cdc3bc2 gstreamer1-plugins-good-qt6-debuginfo-1.26.7-2.el10_2.7.x86_64.rpm SHA-256: 07c222619da1b52c8fd8558be17f56f666ba80a466c4fcca915dc7d6f9203dad Red Hat Enterprise Linux for IBM z Systems 10 SRPM gstreamer1-plugins-good-1.26.7-2.el10_2.7.src.rpm SHA-256: 2966cfd7bb026f78d86dcd6802f3a9cd76e4f042322808517b94e36978f94c76 s390x gstreamer1-plugins-good-1.26.7-2.el10_2.7.s390x.rpm SHA-256: ac4ceaca2de2bd4a4082fbaa10bc9e621476b9747bef7cb9b15d0e166fd00a77 gstreamer1-plugins-good-debuginfo-1.26.7-2.el10_2.7.s390x.rpm SHA-256: 827464b5f59e0cd2a5f4cd41f890ee21f843625176de1b2c718b0a97857b3ef5 gstreamer1-plugins-good-debugsource-1.26.7-2.el10_2.7.s390x.rpm SHA-256: 5d2904de3e49f0e272fcb7279e414bf8b3ab70872dc32e10db65dfbe8f50ae3b gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.7.s390x.rpm SHA-256: 1d8b3428e0157f2d833be4f75565808cce4e16cd2fa4fe8567530d0ec72461a7 gstreamer1-plugins-good-gtk-debuginfo-1.26.7-2.el10_2.7.s390x.rpm SHA-256: 904742e048d77b7417ab90d50559d95e7cdecf0670bbdd391adeb0705530f44a gstreamer1-plugins-good-qt6-debuginfo-1.26.7-2.el10_2.7.s390x.rpm SHA-256: c62e9b19f23171f0ff093c9c43f09edc3e924fb0ba54a462c9c8a33b07ee2b31 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM gstreamer1-plugins-good-1.26.7-2.el10_2.7.src.rpm SHA-256: 2966cfd7bb026f78d86dcd6802f3a9cd76e4f042322808517b94e36978f94c76 s390x gstreamer1-plugins-good-1.26.7-2.el10_2.7.s390x.rpm SHA-256: ac4ceaca2de2bd4a4082fbaa10bc9e621476b9747bef7cb9b15d0e166fd00a77 gstreamer1-plugins-good-debuginfo-1.26.7-2.el10_2.7.s390x.rpm SHA-256: 827464b5f59e0cd2a5f4cd41f890ee21f843625176de1b2c718b0a97857b3ef5 gstreamer1-plugins-good-debugsource-1.26.7-2.el10_2.7.s390x.rpm SHA-256: 5d2904de3e49f0e272fcb7279e414bf8b3ab70872dc32e10db65dfbe8f50ae3b gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.7.s390x.rpm SHA-256: 1d8b3428e0157f2d833be4f75565808cce4e16cd2fa4fe8567530d0ec72461a7 gstreamer1-plugins-good-gtk-debuginfo-1.26.7-2.el10_2.7.s390x.rpm SHA-256: 904742e048d77b7417ab90d50559d95e7cdecf0670bbdd391adeb0705530f44a gstreamer1-plugins-good-qt6-debuginfo-1.26.7-2.el10_2.7.s390x.rpm SHA-256: c62e9b19f23171f0ff093c9c43f09edc3e924fb0ba54a462c9c8a33b07ee2b31 Red Hat Enterprise Linux for Power, little endian 10 SRPM gstreamer1-plugins-good-1.26.7-2.el10_2.7.src.rpm SHA-256: 2966cfd7bb026f78d86dcd6802f3a9cd76e4f042322808517b94e36978f94c76 ppc64le gstreamer1-plugins-good-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: d269272815f309021057e5102c277b97daf0514ef0fc3ab9cc597b4cd2f0d1c2 gstreamer1-plugins-good-debuginfo-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: e745d822588077fa9464822b0d4917dc7578a408e96274feedf0f1387535a93c gstreamer1-plugins-good-debugsource-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: bc7a0a5e41fcb70e4b434052d06117cb011aada8fd27f454e1c4d3eebcef35ae gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: 73feed00602c1a4bbd29f33c3e61c677f58e8b97bb6af1a05939a8dfc12ca41d gstreamer1-plugins-good-gtk-debuginfo-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: 0bc9f96474377046507a1740e0cf137ddd4daa9276f2df5ea45ad2a3c65e0161 gstreamer1-plugins-good-qt6-debuginfo-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: dae6b8e460503110f44c767ffec6917c54a2b3dab30f3ab43012e2059590aa4c Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM gstreamer1-plugins-good-1.26.7-2.el10_2.7.src.rpm SHA-256: 2966cfd7bb026f78d86dcd6802f3a9cd76e4f042322808517b94e36978f94c76 ppc64le gstreamer1-plugins-good-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: d269272815f309021057e5102c277b97daf0514ef0fc3ab9cc597b4cd2f0d1c2 gstreamer1-plugins-good-debuginfo-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: e745d822588077fa9464822b0d4917dc7578a408e96274feedf0f1387535a93c gstreamer1-plugins-good-debugsource-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: bc7a0a5e41fcb70e4b434052d06117cb011aada8fd27f454e1c4d3eebcef35ae gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: 73feed00602c1a4bbd29f33c3e61c677f58e8b97bb6af1a05939a8dfc12ca41d gstreamer1-plugins-good-gtk-debuginfo-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: 0bc9f96474377046507a1740e0cf137ddd4daa9276f2df5ea45ad2a3c65e0161 gstreamer1-plugins-good-qt6-debuginfo-1.26.7-2.el10_2.7.ppc64le.rpm SHA-256: dae6b8e460503110f44c767ffec6917c54a2b3dab30f3ab43012e2059590aa4c Red Hat Enterprise Linux for ARM 64 10 SRPM gstreamer1-plugins-good-1.26.7-2.el10_2.7.src.rpm SHA-256: 2966cfd7bb026f78d86dcd6802f3a9cd76e4f042322808517b94e36978f94c76 aarch64 gstreamer1-plugins-good-1.26.7-2.el10_2.7.aarch64.rpm SHA-256: 5f7fa484e67b0f31f0c651dffe0a8bbab61f73f2e94b190e0d14cefc4a94831f gstreamer1-plugins-good-debuginfo-1.26.7-2.el10_2.7.aarch64.rpm SHA-256: 4d51df9c5751eeb5bf37e777f6715cec9a49b8cb7b80af5a5a741a783c2d5ca6 gstreamer1-plugins-good-debugsource-1.26.7-2.el10_2.7.aarch64.rpm SHA-256: 0fcdbcf8be8905bb30a9fb3dd399bb56a7d470babbc5a376263767274a5f0fb4 gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.7.aarch64.rpm SHA-256: a2c2f09a64bb93dfff24b5806edd62f5029d347011522a52b7c5b94049e8a1d4 gstreamer1-plugins-good-gtk-debuginfo-1