ELSA-2026-59152

ELSA-2026-59152 - gstreamer1-plugins-good security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-08-24

Description


[1.22.12-7.8]
- Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay
Resolves: RHEL-246619

[1.22.12-7.7]
- Fix CVE-2026-18296: size validation in qtmoovrecover MRF parsing
Resolves: RHEL-246558

[1.22.12-7.6]
- Fix CVE-2026-18298 in gdkpixbufdec element
Resolves: RHEL-246572

[1.22.12-7.5]
- Fix CVE-2026-18295: validate box sizes in qtmoovrecover to prevent
heap buffer overflow (same upstream fix as CVE-2026-18296)
Resolves: RHEL-246380


Related CVEs


CVE-2026-18295
CVE-2026-18296
CVE-2026-18298
CVE-2026-18299

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) gstreamer1-plugins-good-1.22.12-7.el9_8.8.src.rpmd979cb44437cf8daa380ca488432df45f8aaf78fbf0feeb76f9beaf5518d7505-ol9_aarch64_appstream
gstreamer1-plugins-good-1.22.12-7.el9_8.8.aarch64.rpm921d2d9dd65f853d31c67d62ab3146a338346b00037b0246a8cfee47c107ae86-ol9_aarch64_appstream
gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.aarch64.rpm0521b946306f019a5b25fa27168817fe80f63448c0394429d77993624b791dc9-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) gstreamer1-plugins-good-1.22.12-7.el9_8.8.src.rpmd979cb44437cf8daa380ca488432df45f8aaf78fbf0feeb76f9beaf5518d7505-ol9_x86_64_appstream
gstreamer1-plugins-good-1.22.12-7.el9_8.8.i686.rpmcf243f475d09a7dfcd0b3069c9deba4f0fb09b8d38e68dde815a736ce296d2f0-ol9_x86_64_appstream
gstreamer1-plugins-good-1.22.12-7.el9_8.8.x86_64.rpmf477302418d31cf34498ca1f43d8c511d0cd867068b5b0101b89eac65170c6a1-ol9_x86_64_appstream
gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.i686.rpm84d37a21909fad91b356ddb690aa5d1b235bb9a3c05b586dea6e18e5cb6bfae9-ol9_x86_64_appstream
gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.x86_64.rpmce749958993c20dee3c6dd90fdff9c6d98828e87248d7732b9a285d44758f33e-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete