Skip to content
OpenAdvisories
High ELSA-2026-59133 2 CVEs

Important: gstreamer1-plugins-good security update (Oracle Linux 10)

Published Aug 24, 2026 · Updated Aug 24, 2026

Ecosystem: Oracle Linux

Summary

[1.26.7-2.7]
- Fix CVE-2026-18298 in gdkpixbufdec element
Resolves: RHEL-246557

[1.26.7-2.6]
- Fix insufficient size validation in MRF file parsing in qtmoovrecover
(CVE-2026-18296)
Resolves: RHEL-246546

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 10 gstreamer1-plugins-good 0:1.26.7-2.el10_2.7
Oracle Linux · 10 gstreamer1-plugins-good-gtk 0:1.26.7-2.el10_2.7

Vulnerabilities 2

  • High 7.8
    CVE-2026-18296

    GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability …

    GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu
  • High 7.8
    CVE-2026-18298

    GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability …

    GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu