These are all security issues fixed in the gstreamer-plugins-bad-1.18.5-5.1 package on the GA media of openSUSE Tumbleweed.