Red Hat Product Errata RHSA-2026:65959 - Security Advisory Issued: 2026-09-09 Updated: 2026-09-09 RHSA-2026:65959 - Security Advisory Overview Updated Packages Synopsis Moderate: gstreamer1-plugins-good security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders (CVE-2026-18649) gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write (CVE-2026-73433) gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing (CVE-2026-73434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2510614 - CVE-2026-18649 gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders BZ - 2514801 - CVE-2026-73433 gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write BZ - 2514807 - CVE-2026-73434 gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing CVEs CVE-2026-18649 CVE-2026-73433 CVE-2026-73434 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM gstreamer1-plugins-good-1.24.11-1.el10_0.4.src.rpm SHA-256: b7ae1490d0d1f25a37d9fa8ec26bf0db9c5cba03ee21cfbe21d26e4aa4a79c5f x86_64 gstreamer1-plugins-good-1.24.11-1.el10_0.4.x86_64.rpm SHA-256: 1bf4513375381e8138d2c9978abe397dfaf227f9d03197ae329ab0307112b44f gstreamer1-plugins-good-debuginfo-1.24.11-1.el10_0.4.x86_64.rpm SHA-256: 04dd756ae1c63fbb1dff676b8232996f95057ea5e3d4766fed3ccee8ff04199e gstreamer1-plugins-good-debugsource-1.24.11-1.el10_0.4.x86_64.rpm SHA-256: fce1f33581612afab4224e5a6afec8fd7ab830add6332dfa1e7f7bb599be969b gstreamer1-plugins-good-gtk-1.24.11-1.el10_0.4.x86_64.rpm SHA-256: 57d68e25b8921e9a7d1fe3b02f85b5fdad97549140d43e4030e5f7b1b9b42749 gstreamer1-plugins-good-gtk-debuginfo-1.24.11-1.el10_0.4.x86_64.rpm SHA-256: d6147ab421fc3c7f1cd57a4b12f2b0dcd1bcdd7b51fd8f3d1502074f4fca6a2b gstreamer1-plugins-good-qt6-debuginfo-1.24.11-1.el10_0.4.x86_64.rpm SHA-256: c176948f034131ee6851cba7112632750dbddc61efff674fe9b36a26ddf3dd43 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM gstreamer1-plugins-good-1.24.11-1.el10_0.4.src.rpm SHA-256: b7ae1490d0d1f25a37d9fa8ec26bf0db9c5cba03ee21cfbe21d26e4aa4a79c5f s390x gstreamer1-plugins-good-1.24.11-1.el10_0.4.s390x.rpm SHA-256: 3fd77013ce56bf4d738969844db09ead9cb1e233811bcd99d47f82daf7388b61 gstreamer1-plugins-good-debuginfo-1.24.11-1.el10_0.4.s390x.rpm SHA-256: 2cd68854e1ac7b6e365b8e5d85c91b4f935dc78413f262da1347e3c07e88913a gstreamer1-plugins-good-debugsource-1.24.11-1.el10_0.4.s390x.rpm SHA-256: ba3ad61d0ff862b4604d734c30c84ce83e6dfb25c8619c947871a76177e6491a gstreamer1-plugins-good-gtk-1.24.11-1.el10_0.4.s390x.rpm SHA-256: 5ca3b3e77acbbed6bb71c15d66ad6538ad96e5e22992d07a12bfd85c7b55c9e0 gstreamer1-plugins-good-gtk-debuginfo-1.24.11-1.el10_0.4.s390x.rpm SHA-256: 75fb1644e2820abc338d905eb3575679a95b5b1f4ce774eefe07e523f326eec6 gstreamer1-plugins-good-qt6-debuginfo-1.24.11-1.el10_0.4.s390x.rpm SHA-256: cce2fb01f6729ab695614ebde790cc85fc1af64fb626778ce963f07c86511b91 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM gstreamer1-plugins-good-1.24.11-1.el10_0.4.src.rpm SHA-256: b7ae1490d0d1f25a37d9fa8ec26bf0db9c5cba03ee21cfbe21d26e4aa4a79c5f ppc64le gstreamer1-plugins-good-1.24.11-1.el10_0.4.ppc64le.rpm SHA-256: 1c8aeaec10430bd0f6517260339ca4520a8b1bd468f00379a1d31347707d37e2 gstreamer1-plugins-good-debuginfo-1.24.11-1.el10_0.4.ppc64le.rpm SHA-256: ea3fa9f9ea78baee1e0ce96629cefc84d2a7149caea7762183e4d82b3a5eac69 gstreamer1-plugins-good-debugsource-1.24.11-1.el10_0.4.ppc64le.rpm SHA-256: 9d8f56a97f382b3fb9faef06fe7a98268947838e71fff0ec9e7a14acd7f3e72e gstreamer1-plugins-good-gtk-1.24.11-1.el10_0.4.ppc64le.rpm SHA-256: 905884e04480dd718d30dbd8a664860861c136106b6635f1046b553511a860fc gstreamer1-plugins-good-gtk-debuginfo-1.24.11-1.el10_0.4.ppc64le.rpm SHA-256: 369c69dfc4fdaf1fb882d2d7eba96a65ab3c483e534a9bed26250264068e7ee5 gstreamer1-plugins-good-qt6-debuginfo-1.24.11-1.el10_0.4.ppc64le.rpm SHA-256: 4e0cd0154d04a4f46ca311fbb5098c2e48783676dee329e5bd8a8e9caf8e0529 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM gstreamer1-plugins-good-1.24.11-1.el10_0.4.src.rpm SHA-256: b7ae1490d0d1f25a37d9fa8ec26bf0db9c5cba03ee21cfbe21d26e4aa4a79c5f aarch64 gstreamer1-plugins-good-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: d717a44aa704c9337db69425606298289a44b5f8c108dbed6d8bb02c1b2d680a gstreamer1-plugins-good-debuginfo-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: 3ea12ca4b77373755dd8b4e632cecca6b87bac14babc486f8da7cc7dbe534aa5 gstreamer1-plugins-good-debugsource-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: c5d93738063abad09eeea9a1a193c39981d78d6f3b8c9587061d9aa2d5be8c57 gstreamer1-plugins-good-gtk-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: 9d5531f8b43f01f95ee80896c8131a8049b7fb38a85b393464273b3cec571b45 gstreamer1-plugins-good-gtk-debuginfo-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: 253bfcece2a9d85b63b3d978290d096b8706a1400240fe9a884d9a366c58a42d gstreamer1-plugins-good-qt6-debuginfo-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: c3ff6464a6907525c7c0b8cb8d1ad9813522470feab605ce5794bef7087fc97a Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM gstreamer1-plugins-good-1.24.11-1.el10_0.4.src.rpm SHA-256: b7ae1490d0d1f25a37d9fa8ec26bf0db9c5cba03ee21cfbe21d26e4aa4a79c5f aarch64 gstreamer1-plugins-good-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: d717a44aa704c9337db69425606298289a44b5f8c108dbed6d8bb02c1b2d680a gstreamer1-plugins-good-debuginfo-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: 3ea12ca4b77373755dd8b4e632cecca6b87bac14babc486f8da7cc7dbe534aa5 gstreamer1-plugins-good-debugsource-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: c5d93738063abad09eeea9a1a193c39981d78d6f3b8c9587061d9aa2d5be8c57 gstreamer1-plugins-good-gtk-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: 9d5531f8b43f01f95ee80896c8131a8049b7fb38a85b393464273b3cec571b45 gstreamer1-plugins-good-gtk-debuginfo-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: 253bfcece2a9d85b63b3d978290d096b8706a1400240fe9a884d9a366c58a42d gstreamer1-plugins-good-qt6-debuginfo-1.24.11-1.el10_0.4.aarch64.rpm SHA-256: c3ff6464a6907525c7c0b8cb8d1ad9813522470feab605ce5794bef7087fc97a Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM gstreamer1-plugins-good-1.24.11-1.el10_0.4.src.rpm SHA-256: b7ae1490d0d1f25a37d9fa8ec26bf0db9c5cba03ee21cfbe21d26e4aa4a79c5f s390x gstreamer1-plugins-good-1.24.11-1.el10_0.4.s390x.rpm SHA-256: 3fd77013ce56bf4d738969844db09ead9cb1e233811bcd99d47f82daf7388b61 gstreamer1-plugins-good-debuginfo-1.24.11-1.el10_0.4.s390x.rpm SHA-256: 2cd68854e1ac7b6e365b8e5d85c91b4f935dc78413f262da1347e3c07e88913a gstreamer1-plugins-good-debugsource-1.24.11-1.el10_0.4.s390x.rpm SHA-256: ba3ad61d0ff862b4604d734c30c84ce83e6dfb25c8619c947871a76177e6491a gstreamer1-plugins-good-gtk-1.24.11-1.el10_0.4.s390x.rpm SHA-256: 5ca3b3e77acbbed6bb71c15d66ad6538ad96e5e22992d07a12bfd85c7b55c9e0 gstreamer1-plugins-good-gtk-debuginfo-1.24.11-1.el10_0.4.s390x.rpm SHA-256: 75fb1644e2820abc338d905eb3575679a95b5b1f4ce774eefe07e523f326eec6 gstreamer1-plugins-good-qt6-debuginfo-1.24.11-1.el10_0.4.s390x.rpm SHA-256: cce2fb01f6729ab695614ebde790cc85fc1af64fb626778ce963f07c86511b91 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM gstreamer1-plugins-good-1.24.11-1.el10_0.4.src.rpm SHA-256: b7ae1490d0d1f25a37d9fa8ec26bf0db9c5cba03ee21cfbe21d26e4aa4a79c5f ppc64le gstreamer1-plugins-good-1.24.11-1.el10_0.4.ppc64le.rpm SHA-256: 1c8aeaec10430bd0f6517260339ca4520a8b1bd468f00379a1d31347707d37e2 gstreamer1-plugins-good-debuginfo-1.24.11-1.el10_0.4.ppc64le.rpm SHA-256: ea3fa9f9ea78baee1e0ce96629cefc84d2a7149caea7762183e4d82b3a5eac69 gstreamer1-plugins-good-debugsource-1.24.11-1.el10_0.4.ppc64le.rpm SHA-256: 9d8f56a97f382b3fb9faef06fe7a98268947838e71fff0ec9e7a14acd7f3e72e gstreamer1-plugins-good-gtk-1.24.11-1.el10_0.4.ppc64le.rpm SHA-256: 905884e04480dd718d30dbd8a664860861c136106b6635f1046b553511a