Skip to content
OpenAdvisories
High ELSA-2026-59972 1 CVE

Important: gstreamer1-plugins-good security update (Oracle Linux 10)

Published Aug 26, 2026 · Updated Aug 26, 2026

Ecosystem: Oracle Linux

Summary

[1.26.7-2.8]
- Fix use-after-free vulnerability in RTP SBC depayloader
(CVE-2026-18299)
Resolves: RHEL-246613

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 10 gstreamer1-plugins-good 0:1.26.7-2.el10_2.8
Oracle Linux · 10 gstreamer1-plugins-good-gtk 0:1.26.7-2.el10_2.8

Vulnerabilities 1

  • High 7.8
    CVE-2026-18299

    GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability

    GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but …

    GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu