CLSA-2026-1792533291 gstreamer1-plugins-good: Fix of 4 CVEs

rebase onto Oracle 1.10.4-2.0.7.el79 - the vendor fixes in this build: CVE-2026-18295 and CVE-2026-18296 qtmoovrecover: validate box sizes, CVE-2026-18298 gdkpixbufdec: handle format and resolution changes correctly and CVE-2026-18299 rtpsbcdepay: check that enough data is available in the...

CLSA-2026-1792532772 gstreamer1-plugins-good: Fix of 4 CVEs

rebase onto Oracle 1.10.4-2.0.7.el79 - the vendor fixes in this build: CVE-2026-18295 and CVE-2026-18296 qtmoovrecover: validate box sizes, CVE-2026-18298 gdkpixbufdec: handle format and resolution changes correctly and CVE-2026-18299 rtpsbcdepay: check that enough data is available in the...

CLSA-2026-1792532987 gstreamer1-plugins-good: Fix of 4 CVEs

rebase onto Oracle 1.10.4-2.0.7.el79 - the vendor fixes in this build: CVE-2026-18295 and CVE-2026-18296 qtmoovrecover: validate box sizes, CVE-2026-18298 gdkpixbufdec: handle format and resolution changes correctly and CVE-2026-18299 rtpsbcdepay: check that enough data is available in the...

CLSA-2026-1788197463 gstreamer1-plugins-good: Fix of 4 CVEs

CVE-2026-18295: qtmoovrecover: validate box sizes when parsing MRF recovery files to prevent an out-of-bounds write - CVE-2026-18296: qtmoovrecover: validate minimum atom sizes when parsing MRF recovery files to prevent a heap buffer overflow - CVE-2026-18298: gdkpixbufdec: handle format and...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-59133)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59133 advisory. - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246557 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2026-59152)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59152 advisory. - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246619 - Fix CVE-2026-18296: size validation in qtmoovrecover MRF parsing Resolves:...

gstreamer1-plugins-good security update

1.22.12-7.8 - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246619 1.22.12-7.7 - Fix CVE-2026-18296: size validation in qtmoovrecover MRF parsing Resolves: RHEL-246558 1.22.12-7.6 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246572 1.22.12-7.5 - Fix CVE-2026-1829...

gstreamer1-plugins-good security update

1.26.7-2.7 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246557 1.26.7-2.6 - Fix insufficient size validation in MRF file parsing in qtmoovrecover CVE-2026-18296 Resolves: RHEL-246546...