Linux · Security advisory · December 25, 2025

DLA-4419-1: gst-plugins-good1.0 security update

DLA-4419-1, released December 25, 2025, fixes 1 CVE in gst-plugins-good1.0 (version 1.18.4-2+deb11u4). None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0022
12th percentile

Fixed package versions

ProductReleaseFixed in
gst-plugins-good1.0Debian 11.6 (bullseye)1.18.4-2+deb11u4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2025-47183 gstreamer1.0-qt6: In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_treefunction may read past the end of a heap buffer wh... 6.6 0.0022 None reported
Showing 1 to 1 of 1 1