SUSE-SU-2026:0998-1

UNKNOWN

Security update for gstreamer-plugins-ugly

Published Mar 24, 2026

Modified 3 weeks ago

Fix available

Details

This update for gstreamer-plugins-ugly fixes the following issues:

CVE-2026-2920: GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1259367).
CVE-2026-2922: GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability (bsc#1259370).

Affected Packages

gstreamer-plugins-ugly

SUSE Linux Enterprise Workstation Extension 15 SP7openSUSE Leap 15.6

Fixed in:

1.24.0-150600.3.5.1

gstreamer-plugins-ugly-lang

SUSE Linux Enterprise Workstation Extension 15 SP7openSUSE Leap 15.6

Fixed in:

1.24.0-150600.3.5.1

gstreamer-plugins-ugly-32bit

openSUSE Leap 15.6

Fixed in:

1.24.0-150600.3.5.1

References

Upstream

Ecosystems

Timeline

PublishedMar 24, 2026

ModifiedMar 24, 2026

SUSE-SU-2026:0998-1 | Mondoo Vulnerability Intelligence