TencentOS Server 2: gstreamer1-plugins-good (TSSA-2026:1364)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1364 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

[SECURITY] Fedora 45 Update: mingw-gstreamer1-plugins-bad-free-1.28.8-1.fc45

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

[SECURITY] Fedora 45 Update: mingw-gstreamer1-plugins-base-1.28.8-1.fc45

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 45 Update: mingw-gstreamer1-plugins-good-1.28.8-1.fc45

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

Fedora 45 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-b1f189a5b6)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b1f189a5b6 advisory. Update to gstreamer-1.28.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1793016750)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1793016750 advisory. - A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio...

[SECURITY] Fedora 44 Update: mingw-gstreamer1-plugins-base-1.28.8-1.fc44

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 44 Update: mingw-gstreamer1-plugins-good-1.28.8-1.fc44

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 44 Update: mingw-gstreamer1-plugins-bad-free-1.28.8-1.fc44

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

Fedora 44 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-343461e9d1)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-343461e9d1 advisory. Update to gstreamer-1.28.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-good (CENTOS7:CLSA-2026:1792770102)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792770102 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps functi...

CLSA-2026-1790601978 gstreamer1-plugins-base: Fix of CVE-2026-18297

rebase onto Oracle 1.10.4-2.0.3.el7, which brings the vendor's own backports as Patch1001-Patch1005 - drop 3 of the 4 TuxCare CVE backports in favour of the vendor's copies - CVE-2024-47615: carry the two halves of our backport the vendor omits. Its Patch1003 adds the bounds guards to...

Amazon Linux 2023 : gstreamer1-plugins-good, gstreamer1-plugins-good-gtk (ALAS2023-2026-3276)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3276 advisory. A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The...

Amazon Linux 2 : gstreamer1-plugins-good (ALAS-2026-4024)

The version of gstreamer1-plugins-good installed on the remote host is prior to 1.18.4-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4024 advisory. A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur wh...

CLSA-2026-1792769449 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46469: fix division by zero in qtdemuxparsetrak when an MP4 signals 0 audio channels - CVE-2026-46470: fix division by zero in qtdemux audio sample description parsing when an MP4 signals 0 audio channels...

CLSA-2026-1792769310 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46470: qtdemux: fix division by zero in qtdemuxaudiocaps when an LPCM sound sample description signals 0 audio channels...

CLSA-2026-1792768971 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46470: qtdemux: fix division by zero in qtdemuxaudiocaps when an LPCM sound sample description signals 0 audio channels...

CLSA-2026-1792239628 gstreamer1-plugins-good: Fix of 2 CVEs

CVE-2026-73433: avidemux: fix unsigned integer underflow and out-of-bounds access when parsing FUJIFILM metadata in strd chunks - CVE-2026-73434: avidemux: fix out-of-bounds read by using the correct divisor when counting vprp video field descriptors...

CLSA-2026-1790603589 gstreamer1-plugins-base: Fix of CVE-2026-18297

rebase onto Oracle 1.10.4-2.0.3.el7, which brings the vendor's own backports as Patch1001-Patch1005 - drop 3 of the 4 TuxCare CVE backports in favour of the vendor's copies - CVE-2024-47615: carry the two halves of our backport the vendor omits. Its Patch1003 adds the bounds guards to...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.2:CLSA-2026:1792769449)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792769449 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps...