Red Hat Product Errata RHSA-2026:59179 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:59179 - Security Advisory Overview Updated Packages Synopsis Important: gstreamer1-plugins-good security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296) gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298) gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay (CVE-2026-18299) GStreamer: GStreamer: Remote code execution via MRF file parsing (CVE-2026-18295) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2520580 - CVE-2026-18296 gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow BZ - 2520590 - CVE-2026-18298 gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing BZ - 2520605 - CVE-2026-18299 gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay BZ - 2520606 - CVE-2026-18295 GStreamer: GStreamer: Remote code execution via MRF file parsing CVEs CVE-2026-18295 CVE-2026-18296 CVE-2026-18298 CVE-2026-18299 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.7.src.rpm SHA-256: 73c30e4f71005e3a4971eb3c1a2b9112abadf0a8629bda22a403469baa79fdeb x86_64 gstreamer1-plugins-good-1.16.1-7.el8_10.7.i686.rpm SHA-256: 78f25661f87178c56e1b73a811ea299464b1e9607c7c473ba9ef713c353db212 gstreamer1-plugins-good-1.16.1-7.el8_10.7.x86_64.rpm SHA-256: d2dbcdcf8aab77bd73635568f1102d567ff76db84b339100a191e81b2181ef00 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.7.i686.rpm SHA-256: 9924db4f91df45d5943adf7579d2c48b6b408355f4272d0cc49ef7f2845cf28e gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.7.x86_64.rpm SHA-256: fa6e4513e03e363b2c8591ab388ee19c2c99b6f4f4539663693fab9a0e9b8150 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.7.i686.rpm SHA-256: 18280ca97efbda636a43861e77fe6c7d51e1db42bc8486e3597aa7ab5cb928d8 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.7.x86_64.rpm SHA-256: 2d461f0bdb7f58f696df3e70c0da78222da8a499b6080823d4dff556599b2945 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.7.i686.rpm SHA-256: f01025dc7188954f54b94c591664f12ce59c68310ba115a4ece45ba0a96a712c gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.7.x86_64.rpm SHA-256: 8547c4e65bceed2cc7906194b46c6c546746e4175f83c6dc07ed8a6b63e98900 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.7.i686.rpm SHA-256: e8fef7078a0d87e32ea48da4df0c61af495e4bea659026bf2e75c09e27d6c103 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.7.x86_64.rpm SHA-256: 94efea8adf88dfa228237f1b6e177ecf4fc8b1c20c70baf26a506d94f36a7223 Red Hat Enterprise Linux for IBM z Systems 8 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.7.src.rpm SHA-256: 73c30e4f71005e3a4971eb3c1a2b9112abadf0a8629bda22a403469baa79fdeb s390x gstreamer1-plugins-good-1.16.1-7.el8_10.7.s390x.rpm SHA-256: 89958fb98f3b3d948d8ef502de8d4dd144933003e7201e497ed01fa5b7bee0e1 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.7.s390x.rpm SHA-256: 3d54325647392b017af1b78de2a87e1f817c2d8a73bdf9a152828aee0650e0e4 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.7.s390x.rpm SHA-256: 4adbd23574779c2411f1d258032e29124e21269bdab0152133290e77882b81a2 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.7.s390x.rpm SHA-256: 4b418dc74cfc36fb2a1886a0e84bb888634e0dcee73a3dea713c19f1755d68e4 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.7.s390x.rpm SHA-256: 5e66b7c233d9072ca6545f21535eb2bfcd0496174842859079154469987815f6 Red Hat Enterprise Linux for Power, little endian 8 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.7.src.rpm SHA-256: 73c30e4f71005e3a4971eb3c1a2b9112abadf0a8629bda22a403469baa79fdeb ppc64le gstreamer1-plugins-good-1.16.1-7.el8_10.7.ppc64le.rpm SHA-256: e0905a72181f6a545e0551a2761cfaae0dcb173790a1c978e9fa76fcee9afcc1 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.7.ppc64le.rpm SHA-256: 35b2fa73deead6a728a80aa72162662d4ae1388e35c408a915464b95b28ac466 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.7.ppc64le.rpm SHA-256: 56c56562b5b48023e158b77167edff7b6a51b9248e0a33a347f06fbb159b1bc9 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.7.ppc64le.rpm SHA-256: dd88124d6c6f4dd1bdec9bedb388dc210cc4d7013fe5f78b2c32ee65ce289ac5 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.7.ppc64le.rpm SHA-256: 46466a589dee34850f70e5b33d6ba05ed7e11c7a51d644924736ecd52ff22648 Red Hat Enterprise Linux for ARM 64 8 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.7.src.rpm SHA-256: 73c30e4f71005e3a4971eb3c1a2b9112abadf0a8629bda22a403469baa79fdeb aarch64 gstreamer1-plugins-good-1.16.1-7.el8_10.7.aarch64.rpm SHA-256: 7802b9f2a95bbce005265d28f569747e105b9ba01e4e57d69ef289a9699f9956 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.7.aarch64.rpm SHA-256: 4751d7f48e689ecb236ef5d63d16afc947dc313e0f9c3206396e39c5008d3f38 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.7.aarch64.rpm SHA-256: 612569ac155c73fc9a0789b49174aeb7f99377db0280db5b1852b3fb2b292855 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.7.aarch64.rpm SHA-256: 742440f9f23c400849304fc689f63f65f050c5c95c3ceb05a78720e83a9140d6 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.7.aarch64.rpm SHA-256: dba2ae66dfb4049a1ce081bf0d0cb8db40dae0e9349ffc33be72df2e989c52c9 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.7.src.rpm SHA-256: 73c30e4f71005e3a4971eb3c1a2b9112abadf0a8629bda22a403469baa79fdeb x86_64 gstreamer1-plugins-good-1.16.1-7.el8_10.7.i686.rpm SHA-256: 78f25661f87178c56e1b73a811ea299464b1e9607c7c473ba9ef713c353db212 gstreamer1-plugins-good-1.16.1-7.el8_10.7.x86_64.rpm SHA-256: d2dbcdcf8aab77bd73635568f1102d567ff76db84b339100a191e81b2181ef00 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.7.i686.rpm SHA-256: 9924db4f91df45d5943adf7579d2c48b6b408355f4272d0cc49ef7f2845cf28e gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.7.x86_64.rpm SHA-256: fa6e4513e03e363b2c8591ab388ee19c2c99b6f4f4539663693fab9a0e9b8150 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.7.i686.rpm SHA-256: 18280ca97efbda636a43861e77fe6c7d51e1db42bc8486e3597aa7ab5cb928d8 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.7.x86_64.rpm SHA-256: 2d461f0bdb7f58f696df3e70c0da78222da8a499b6080823d4dff556599b2945 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.7.i686.rpm SHA-256: f01025dc7188954f54b94c591664f12ce59c68310ba115a4ece45ba0a96a712c gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.7.x86_64.rpm SHA-256: 8547c4e65bceed2cc7906194b46c6c546746e4175f83c6dc07ed8a6b63e98900 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.7.i686.rpm SHA-256: e8fef7078a0d87e32ea48da4df0c61af495e4bea659026bf2e75c09e27d6c103 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.7.x86_64.rpm SHA-256: 94efea8adf88dfa228237f1b6e177ecf4fc8b1c20c70baf26a506d94f36a7223 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.7.src.rpm SHA-256: 73c30e4f71005e3a4971eb3c1a2b9112abadf0a8629bda22a403469baa79fdeb aarch64 gstreamer1-plugins-good-1.16.1-7.el8_10.7.aarch64.rpm SHA-256: 7802b9f2a95bbce005265d28f569747e105b9ba01e4e57d69ef289a9699f9956 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.7.aarch64.rpm SHA-256: 4751d7f48e689ecb236ef5d63d16afc947dc313e0f9c3206396e39c5008d3f38 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_10.7.aarch64.rpm SHA-256: 612569ac155c73fc9a0789b49174aeb7f99377db0280db5b1852b3fb2b292855 gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.7.aarch64.rpm SHA-256: 742440f9f23c400849304fc689f63f65f050c5c95c3ceb05a78720e83a9140d6 gstreamer1-plugins-good-gtk-debuginfo-1.16.1-7.el8_10.7.aarch64.rpm SHA-256: dba2ae66dfb4049a1ce081bf0d0cb8db40dae0e9349ffc33be72df2e989c52c9 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM gstreamer1-plugins-good-1.16.1-7.el8_10.7.src.rpm SHA-256: 73c30e4f71005e3a4971eb3c1a2b9112abadf0a8629bda22a403469baa79fdeb ppc64le gstreamer1-plugins-good-1.16.1-7.el8_10.7.ppc64le.rpm SHA-256: e0905a72181f6a545e0551a2761cfaae0dcb173790a1c978e9fa76fcee9afcc1 gstreamer1-plugins-good-debuginfo-1.16.1-7.el8_10.7.ppc64le.rpm SHA-256: 35b2fa73deead6a728a80aa72162662d4ae1388e35c408a915464b95b28ac466 gstreamer1-plugins-good-debugsource-1.16.1-7.el8_