Red Hat Product Errata RHSA-2026:61588 - Security Advisory Issued: 2026-08-31 Updated: 2026-08-31 RHSA-2026:61588 - Security Advisory Overview Updated Packages Synopsis Moderate: gstreamer1-plugins-good security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2510614 - CVE-2026-18649 gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders CVEs CVE-2026-18649 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM gstreamer1-plugins-good-1.22.1-4.el9_4.2.src.rpm SHA-256: 7a41bfbe5c641c46019440976b0e020d03f22dfe4917f15cc7f33c9847fe0636 x86_64 gstreamer1-plugins-good-1.22.1-4.el9_4.2.i686.rpm SHA-256: f13db34407f85b4682dbb3ca0de524097a5cc5d16e5fa065f3efed05900fa0e7 gstreamer1-plugins-good-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: d78e0d974970d68c293238e6386ef90c6787493b1509040793221f345a43d735 gstreamer1-plugins-good-debuginfo-1.22.1-4.el9_4.2.i686.rpm SHA-256: ff3b66bfe82ebca281b280132da6eb357e3fcf6e342ee567eb547175a746dc7e gstreamer1-plugins-good-debuginfo-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: 2e6280a249d7ae4e9437a9bd1861c5d8cd8afcbda866a32cd3f30b38b789efd6 gstreamer1-plugins-good-debugsource-1.22.1-4.el9_4.2.i686.rpm SHA-256: eba45e2b20243a62fe7eca7068e193dd9f14f45f1d76f05af9bfd9a4d190ecd9 gstreamer1-plugins-good-debugsource-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: 918affdc651f06b24bbbe1a097682a9fa5b36e4e1bea392d63e53af48bd9e105 gstreamer1-plugins-good-gtk-1.22.1-4.el9_4.2.i686.rpm SHA-256: 866fd02cbfd50b0d09f31f82fd8fb0b74186027e8c1094ec6c11e2d96fae370f gstreamer1-plugins-good-gtk-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: f1beac17e884c21837c2d3a6c42396fc213b200d25bf204aa1ad3403941ef083 gstreamer1-plugins-good-gtk-debuginfo-1.22.1-4.el9_4.2.i686.rpm SHA-256: c6333218b9d6de023ff7c07c26950bf7149349b363515a82f21d438947afe00b gstreamer1-plugins-good-gtk-debuginfo-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: 173a1fd5e3950e2188cc6bfa2eda5c13d0638fb580dd39d1dd359ea6c2ee7bea gstreamer1-plugins-good-qt-debuginfo-1.22.1-4.el9_4.2.i686.rpm SHA-256: d58a508e127b971e02adf21583043fff2c1628268a768776ff8d39c03ede77ce gstreamer1-plugins-good-qt-debuginfo-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: 745a4f9fb15f6e3bc31b3e3bb2f4fb9e7e02d9048de28afdc72c3579ac2203a1 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM gstreamer1-plugins-good-1.22.1-4.el9_4.2.src.rpm SHA-256: 7a41bfbe5c641c46019440976b0e020d03f22dfe4917f15cc7f33c9847fe0636 ppc64le gstreamer1-plugins-good-1.22.1-4.el9_4.2.ppc64le.rpm SHA-256: 4e3ac9b774f00fa283a08f51b731bde8be7afad6ab3cae973b13aa6566b8099e gstreamer1-plugins-good-debuginfo-1.22.1-4.el9_4.2.ppc64le.rpm SHA-256: 879f658968eebdb01f832739df3541c3b709df40fa7c8bf5d1b950abb27e1eca gstreamer1-plugins-good-debugsource-1.22.1-4.el9_4.2.ppc64le.rpm SHA-256: be0f3bd09ee13caeda37b7d9e364bc4cef3dc2804aed8efcc7e95ea2ffa80a7e gstreamer1-plugins-good-gtk-1.22.1-4.el9_4.2.ppc64le.rpm SHA-256: e2ca082b0d66280d1918a16808971f5f10ab3d30dfcec67a2f83f945f6f5e57f gstreamer1-plugins-good-gtk-debuginfo-1.22.1-4.el9_4.2.ppc64le.rpm SHA-256: f180e851a4ded8321c65cb9d1b75b24771d5cd3b57bef4ef97dda68ee5c155d7 gstreamer1-plugins-good-qt-debuginfo-1.22.1-4.el9_4.2.ppc64le.rpm SHA-256: 19bc494ccc7227d10e5ce099c10263bd1642b2f4df1075eb0f700b5bca993119 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM gstreamer1-plugins-good-1.22.1-4.el9_4.2.src.rpm SHA-256: 7a41bfbe5c641c46019440976b0e020d03f22dfe4917f15cc7f33c9847fe0636 x86_64 gstreamer1-plugins-good-1.22.1-4.el9_4.2.i686.rpm SHA-256: f13db34407f85b4682dbb3ca0de524097a5cc5d16e5fa065f3efed05900fa0e7 gstreamer1-plugins-good-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: d78e0d974970d68c293238e6386ef90c6787493b1509040793221f345a43d735 gstreamer1-plugins-good-debuginfo-1.22.1-4.el9_4.2.i686.rpm SHA-256: ff3b66bfe82ebca281b280132da6eb357e3fcf6e342ee567eb547175a746dc7e gstreamer1-plugins-good-debuginfo-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: 2e6280a249d7ae4e9437a9bd1861c5d8cd8afcbda866a32cd3f30b38b789efd6 gstreamer1-plugins-good-debugsource-1.22.1-4.el9_4.2.i686.rpm SHA-256: eba45e2b20243a62fe7eca7068e193dd9f14f45f1d76f05af9bfd9a4d190ecd9 gstreamer1-plugins-good-debugsource-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: 918affdc651f06b24bbbe1a097682a9fa5b36e4e1bea392d63e53af48bd9e105 gstreamer1-plugins-good-gtk-1.22.1-4.el9_4.2.i686.rpm SHA-256: 866fd02cbfd50b0d09f31f82fd8fb0b74186027e8c1094ec6c11e2d96fae370f gstreamer1-plugins-good-gtk-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: f1beac17e884c21837c2d3a6c42396fc213b200d25bf204aa1ad3403941ef083 gstreamer1-plugins-good-gtk-debuginfo-1.22.1-4.el9_4.2.i686.rpm SHA-256: c6333218b9d6de023ff7c07c26950bf7149349b363515a82f21d438947afe00b gstreamer1-plugins-good-gtk-debuginfo-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: 173a1fd5e3950e2188cc6bfa2eda5c13d0638fb580dd39d1dd359ea6c2ee7bea gstreamer1-plugins-good-qt-debuginfo-1.22.1-4.el9_4.2.i686.rpm SHA-256: d58a508e127b971e02adf21583043fff2c1628268a768776ff8d39c03ede77ce gstreamer1-plugins-good-qt-debuginfo-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: 745a4f9fb15f6e3bc31b3e3bb2f4fb9e7e02d9048de28afdc72c3579ac2203a1 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM gstreamer1-plugins-good-1.22.1-4.el9_4.2.src.rpm SHA-256: 7a41bfbe5c641c46019440976b0e020d03f22dfe4917f15cc7f33c9847fe0636 aarch64 gstreamer1-plugins-good-1.22.1-4.el9_4.2.aarch64.rpm SHA-256: 48d30e9548fa8a163765c6aec2630c831913a49c6e4f33646ea84edcadaf8e26 gstreamer1-plugins-good-debuginfo-1.22.1-4.el9_4.2.aarch64.rpm SHA-256: 907a7e0653350684f7503e3fa7ac9740b0bc19a7879d2a366e843f6f9a871094 gstreamer1-plugins-good-debugsource-1.22.1-4.el9_4.2.aarch64.rpm SHA-256: a85feabfdb3f3ea3952562b840482a5492058eb6550ecf7c3730e6d99db155b3 gstreamer1-plugins-good-gtk-1.22.1-4.el9_4.2.aarch64.rpm SHA-256: a0ba1f03a73319df3f50e403ef0c4b8e150a7f6ad5934c14b51d67cd7445dad0 gstreamer1-plugins-good-gtk-debuginfo-1.22.1-4.el9_4.2.aarch64.rpm SHA-256: f4f957eefbbe5c93aaec75f89e4aa6b96cb153660ef4eaab8febf1bd95e3001e gstreamer1-plugins-good-qt-debuginfo-1.22.1-4.el9_4.2.aarch64.rpm SHA-256: 7b09773094d188df8503031fb407c59e3dc754c2a013b2819b3d92058c00cc6b Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM gstreamer1-plugins-good-1.22.1-4.el9_4.2.src.rpm SHA-256: 7a41bfbe5c641c46019440976b0e020d03f22dfe4917f15cc7f33c9847fe0636 s390x gstreamer1-plugins-good-1.22.1-4.el9_4.2.s390x.rpm SHA-256: 4bbf746bc78d2006ab756e3fe8f2c66310547ee59953acfc98b44bb64942f0c4 gstreamer1-plugins-good-debuginfo-1.22.1-4.el9_4.2.s390x.rpm SHA-256: 63814e0b8f743627e67219a1850db49649a29da70c5d60a7062bd52aa4dd32ed gstreamer1-plugins-good-debugsource-1.22.1-4.el9_4.2.s390x.rpm SHA-256: 0aae77adbdbf0d9f0443c34aa185d28e6b3be6229b3d063bcd172ee39a5745fb gstreamer1-plugins-good-gtk-1.22.1-4.el9_4.2.s390x.rpm SHA-256: 9a92f304bca8a3f4d71c69e5f587fca7940a267f010ba611bd69e21a5a88ccbe gstreamer1-plugins-good-gtk-debuginfo-1.22.1-4.el9_4.2.s390x.rpm SHA-256: a83d54c4ee313e2ae842be0d451223e303a6cfb6b85c9d89804f8a47af4ba744 gstreamer1-plugins-good-qt-debuginfo-1.22.1-4.el9_4.2.s390x.rpm SHA-256: 54b805f20e28295fba681dd0caec6878023794e6730461ec15066414fc102513 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 SRPM gstreamer1-plugins-good-1.22.1-4.el9_4.2.src.rpm SHA-256: 7a41bfbe5c641c46019440976b0e020d03f22dfe4917f15cc7f33c9847fe0636 x86_64 gstreamer1-plugins-good-1.22.1-4.el9_4.2.i686.rpm SHA-256: f13db34407f85b4682dbb3ca0de524097a5cc5d16e5fa065f3efed05900fa0e7 gstreamer1-plugins-good-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: d78e0d974970d68c293238e6386ef90c6787493b1509040793221f345a43d735 gstreamer1-plugins-good-debuginfo-1.22.1-4.el9_4.2.i686.rpm SHA-256: ff3b66bfe82ebca281b280132da6eb357e3fcf6e342ee567eb547175a746dc7e gstreamer1-plugins-good-debuginfo-1.22.1-4.el9_4.2.x86_64.rpm SHA-256: 2e6280a249d7ae4e9437a9bd1861c5d8cd8afcbda866a32cd3f30b38b789efd6 gstreamer1-plugins-good-debugsource-1.22.1-4.el9_4.2.i686.rpm SHA-256: eba45e2b20243a62fe7eca7068e