Back Linuxsecurity

Fedora 44 mingw-gstreamer1-plugins

Linuxsecurity •LinuxSecurity Advisories • September 27, 2026

Share: View original

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

GStreamer is a streaming media framework, based on graphs of elements which

operate on media data.

This package contains plug-ins that aren't tested

well enough, or the code is not of good enough quality.

Update to gstreamer-1.28.7.

* Fri Sep 18 2026 Sandro Mani - 1.28.7-1 - Update to 1.28.7 * Wed Sep 16 2026 Sandro Mani - 1.28.6-2 - Rebuild (mingw-libxml2)

[ 1 ] Bug #2527944 - CVE-2026-85150 mingw-gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted Digest Authorization/WWW-Authenticate header [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d5e9ea2b8c' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical NULL Pointer Vulnerability in GStreamer Affects Fedora Users A critical NULL pointer dereference vulnerability (CVE-2026-85150) has been identified in the GStreamer framework, affecting Fedora versions 44 and 45. This flaw allows attackers to exploit the gst_rtsp_message_parse_auth_credentials function, potentially leading to application crashes or arbitrary code execution. The vulnerability was published on September 3, 2026, and has been confirmed to be actively exploited in the wild, prompting advisories from CISA. Users are advised to update to GStreamer version 1.28.7 to mitigate the risk. The vulnerability impacts systems using mingw-gstreamer1-plugins-base and mingw-gstreamer1-plugins-good. The updates were released on September 18, 2026, and administrators are urged to apply them immediately. Failure to update could leave systems vulnerable to exploitation. 8 sources 73

Extracted Entities

Fedora 44 mingw-gstreamer1-plugins

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)