ELSA-2026-55434

ELSA-2026-55434 - gstreamer1-plugins-good security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-08-17

Description

[1.26.7-2.5]
- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
Resolves: RHEL-239045

[1.26.7-2.4]
- Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI
files (CVE-2026-73433)
Resolves: RHEL-239062

Related CVEs

CVE-2026-73433

CVE-2026-73434

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	gstreamer1-plugins-good-1.26.7-2.el10_2.5.src.rpm	27c1bb6e8bba5c917382ac7a858999a2699fffaeb5cb0956dae4ef1ef6e47b2b	-	ol10_aarch64_appstream
	gstreamer1-plugins-good-1.26.7-2.el10_2.5.aarch64.rpm	ba8044ee7ec089b7517cb37ba44accbeba495ac69b3436f0c4ad120d4975cd90	-	ol10_aarch64_appstream
	gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.5.aarch64.rpm	0052316d181b3a7cf310a3dc85530a1caa7c5a2838efeeb541f9585e27a2c08f	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	gstreamer1-plugins-good-1.26.7-2.el10_2.5.src.rpm	27c1bb6e8bba5c917382ac7a858999a2699fffaeb5cb0956dae4ef1ef6e47b2b	-	ol10_x86_64_appstream
	gstreamer1-plugins-good-1.26.7-2.el10_2.5.x86_64.rpm	fe4ec9223c4fe83facad7dff47e5b350d059b04998a01d159e6b4871cc2443e4	-	ol10_x86_64_appstream
	gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.5.x86_64.rpm	e31f7318431ffff73178a5ae36f7dd68d1c5096e609fd0af8bfd373f50f9ad54	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team