Two serious PHP flaws could let an attacker run code without logging in. See which setups and PHP versions are affected ×
GStreamer is a streaming-media framework, based on graphs of filters
which operate on media data. Applications using this library can do
anything from real-time sound processing to playing videos, and just
anything else media-related. Its plug-in-based architecture
means that new data types or processing capabilities can be added by
installing new plug-ins.
Update to gstreamer-1.28.8.
* Fri Oct 16 2026 Sandro Mani - 1.28.8-1 - Update to 1.28.8
* Fri Oct 16 2026 Sandro Mani - 1.28.8-1 - Update to 1.28.8
[ 1 ] Bug #2513017 - CVE-2026-19387 mingw-gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder [fedora-all] [ 2 ] Bug #2547479 - CVE-2026-18649 mingw-gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders [fedora-all] [ 3 ] Bug #2552106 - CVE-2026-86476 mingw-gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize [fedora-all] [ 4 ] Bug #2555426 - CVE-2026-46471 mingw-gstreamer1-plugins-good: gstreamer1-plugins-good: information disclosure via out-of-bounds read during MP4 parsing [fedora-all] [ 5 ] Bug #2555428 - CVE-202...
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-343461e9d1' at the command line. For more information, refer to the dnf documentation available at
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
