Red Hat Product Errata RHSA-2026:59152 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:59152 - Security Advisory Overview Updated Packages Synopsis Important: gstreamer1-plugins-good security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow (CVE-2026-18296) gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing (CVE-2026-18298) gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay (CVE-2026-18299) GStreamer: GStreamer: Remote code execution via MRF file parsing (CVE-2026-18295) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2520580 - CVE-2026-18296 gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow BZ - 2520590 - CVE-2026-18298 gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing BZ - 2520605 - CVE-2026-18299 gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay BZ - 2520606 - CVE-2026-18295 GStreamer: GStreamer: Remote code execution via MRF file parsing CVEs CVE-2026-18295 CVE-2026-18296 CVE-2026-18298 CVE-2026-18299 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM gstreamer1-plugins-good-1.22.12-7.el9_8.8.src.rpm SHA-256: 780d649b52ea8b3d94a95d2831c139c27892e37651398801890732085f08068c x86_64 gstreamer1-plugins-good-1.22.12-7.el9_8.8.i686.rpm SHA-256: 69b263c3bac3aa928517d2dd46ccf4838ac51eba6a7b68110be7fb51e25ffc1b gstreamer1-plugins-good-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: 7be356a871c9f5004edc05cb5a32a83eab57d34112c90e9716cad3634b4fff62 gstreamer1-plugins-good-debuginfo-1.22.12-7.el9_8.8.i686.rpm SHA-256: a065bef8956d2442404a2d060a585e179a41ef92c9aa77dbe070770d48ed3577 gstreamer1-plugins-good-debuginfo-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: 715592e18f484535e587bd26c174db29949a4dc8c7725b663c516920666bf8e8 gstreamer1-plugins-good-debugsource-1.22.12-7.el9_8.8.i686.rpm SHA-256: de17b76a1a5e3145fb6509751c5f30c090b8eff03e1b4f1d2cfc241a931813b9 gstreamer1-plugins-good-debugsource-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: a807c2cbf3a66c6ba0f01eeb584337379e04e3aded27d17bab5f6e2b5f48fe1d gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.i686.rpm SHA-256: 488c5655bcc72d568a43f2c89aaa1fc95c8652c8755ad6e0b585f5dcdcaef8e9 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: 356ff77bcc4e1b835c51ce8ac8b5a90488c63c56f4b99ff1edcc4c79d8804aa4 gstreamer1-plugins-good-gtk-debuginfo-1.22.12-7.el9_8.8.i686.rpm SHA-256: f2a1571d4a8ea3b3b8bb32744b0d6f5f9acf75df3e5588dc423d23651ac0e167 gstreamer1-plugins-good-gtk-debuginfo-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: 9973146837efe8ea1e295efc0f94eead1cdcf72e43f0af9716d4681b0c61d8cf gstreamer1-plugins-good-qt-debuginfo-1.22.12-7.el9_8.8.i686.rpm SHA-256: b3c44f06c103a6e294296db9d79e5b069d910ebe2010831d83ce38e8947c9dba gstreamer1-plugins-good-qt-debuginfo-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: ec133d10db09f243e586419c2934e9209679793efebfae9fb74e3ded219e649b Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM gstreamer1-plugins-good-1.22.12-7.el9_8.8.src.rpm SHA-256: 780d649b52ea8b3d94a95d2831c139c27892e37651398801890732085f08068c x86_64 gstreamer1-plugins-good-1.22.12-7.el9_8.8.i686.rpm SHA-256: 69b263c3bac3aa928517d2dd46ccf4838ac51eba6a7b68110be7fb51e25ffc1b gstreamer1-plugins-good-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: 7be356a871c9f5004edc05cb5a32a83eab57d34112c90e9716cad3634b4fff62 gstreamer1-plugins-good-debuginfo-1.22.12-7.el9_8.8.i686.rpm SHA-256: a065bef8956d2442404a2d060a585e179a41ef92c9aa77dbe070770d48ed3577 gstreamer1-plugins-good-debuginfo-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: 715592e18f484535e587bd26c174db29949a4dc8c7725b663c516920666bf8e8 gstreamer1-plugins-good-debugsource-1.22.12-7.el9_8.8.i686.rpm SHA-256: de17b76a1a5e3145fb6509751c5f30c090b8eff03e1b4f1d2cfc241a931813b9 gstreamer1-plugins-good-debugsource-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: a807c2cbf3a66c6ba0f01eeb584337379e04e3aded27d17bab5f6e2b5f48fe1d gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.i686.rpm SHA-256: 488c5655bcc72d568a43f2c89aaa1fc95c8652c8755ad6e0b585f5dcdcaef8e9 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: 356ff77bcc4e1b835c51ce8ac8b5a90488c63c56f4b99ff1edcc4c79d8804aa4 gstreamer1-plugins-good-gtk-debuginfo-1.22.12-7.el9_8.8.i686.rpm SHA-256: f2a1571d4a8ea3b3b8bb32744b0d6f5f9acf75df3e5588dc423d23651ac0e167 gstreamer1-plugins-good-gtk-debuginfo-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: 9973146837efe8ea1e295efc0f94eead1cdcf72e43f0af9716d4681b0c61d8cf gstreamer1-plugins-good-qt-debuginfo-1.22.12-7.el9_8.8.i686.rpm SHA-256: b3c44f06c103a6e294296db9d79e5b069d910ebe2010831d83ce38e8947c9dba gstreamer1-plugins-good-qt-debuginfo-1.22.12-7.el9_8.8.x86_64.rpm SHA-256: ec133d10db09f243e586419c2934e9209679793efebfae9fb74e3ded219e649b Red Hat Enterprise Linux for IBM z Systems 9 SRPM gstreamer1-plugins-good-1.22.12-7.el9_8.8.src.rpm SHA-256: 780d649b52ea8b3d94a95d2831c139c27892e37651398801890732085f08068c s390x gstreamer1-plugins-good-1.22.12-7.el9_8.8.s390x.rpm SHA-256: bfbf14df503ae0b914f4e21fd1525eac888d2914696d153507c2cb8855c98fb1 gstreamer1-plugins-good-debuginfo-1.22.12-7.el9_8.8.s390x.rpm SHA-256: a1c94f6c27007073fdf83765e267616216f49c517504d2da080f4aac04b6d358 gstreamer1-plugins-good-debugsource-1.22.12-7.el9_8.8.s390x.rpm SHA-256: e419c4c1cf16311dd2581816779f49aae55fedc7317cce779b899941566e3b03 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.s390x.rpm SHA-256: 76f530a59535561a896bb94f2d6be4f4b6ad018dd479f8c0fda5daa2402f05cf gstreamer1-plugins-good-gtk-debuginfo-1.22.12-7.el9_8.8.s390x.rpm SHA-256: ddd459f414a405d37b7ff9126f1873a72ef503e0f62526cc47d34a0a906641ba gstreamer1-plugins-good-qt-debuginfo-1.22.12-7.el9_8.8.s390x.rpm SHA-256: 714576352a62d5b0ddb44e597f829a80dcc1d202ff822288e8d8915f8a4a0706 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM gstreamer1-plugins-good-1.22.12-7.el9_8.8.src.rpm SHA-256: 780d649b52ea8b3d94a95d2831c139c27892e37651398801890732085f08068c s390x gstreamer1-plugins-good-1.22.12-7.el9_8.8.s390x.rpm SHA-256: bfbf14df503ae0b914f4e21fd1525eac888d2914696d153507c2cb8855c98fb1 gstreamer1-plugins-good-debuginfo-1.22.12-7.el9_8.8.s390x.rpm SHA-256: a1c94f6c27007073fdf83765e267616216f49c517504d2da080f4aac04b6d358 gstreamer1-plugins-good-debugsource-1.22.12-7.el9_8.8.s390x.rpm SHA-256: e419c4c1cf16311dd2581816779f49aae55fedc7317cce779b899941566e3b03 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.s390x.rpm SHA-256: 76f530a59535561a896bb94f2d6be4f4b6ad018dd479f8c0fda5daa2402f05cf gstreamer1-plugins-good-gtk-debuginfo-1.22.12-7.el9_8.8.s390x.rpm SHA-256: ddd459f414a405d37b7ff9126f1873a72ef503e0f62526cc47d34a0a906641ba gstreamer1-plugins-good-qt-debuginfo-1.22.12-7.el9_8.8.s390x.rpm SHA-256: 714576352a62d5b0ddb44e597f829a80dcc1d202ff822288e8d8915f8a4a0706 Red Hat Enterprise Linux for Power, little endian 9 SRPM gstreamer1-plugins-good-1.22.12-7.el9_8.8.src.rpm SHA-256: 780d649b52ea8b3d94a95d2831c139c27892e37651398801890732085f08068c ppc64le gstreamer1-plugins-good-1.22.12-7.el9_8.8.ppc64le.rpm SHA-256: b0bf9755083cd7001e2f5be72cbb206a6ac480d4a091ad77f2ac1d6d230b75fd gstreamer1-plugins-good-debuginfo-1.22.12-7.el9_8.8.ppc64le.rpm SHA-256: c684f66245dafb7f2f195bb649271e63e90e5fd0be8d0766a63394147bbf3476 gstreamer1-plugins-good-debugsource-1.22.12-7.el9_8.8.ppc64le.rpm SHA-256: e97a1ac1f0ee14ffa4083257457ddda4fdfc3a1ee86521bc4421438394de442a gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.ppc64le.rpm SHA-256: aac35534ebc2c265378f66a7ac74097f940a4ba55e40ad0fb1ed64fc818de557 gstreamer1-plugins-good-gtk-debuginfo-1.22.12-7.el9_8.8.ppc64l