Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Debian DSA-3713-1: GStreamer 0.10 Critical Alert for Code Execution

debian
Calendar Grey November 15, 2016
Scroller Debian
GStreamer 1.0 security patch released to avert unauthorized code execution in Ubuntu installations. Update the component for enhanced protection.
Chris Evans discovered that the GStreamer 0.10 plugin to decode NES Sound Format files allowed the execution of arbitrary code
Topics%20covered

Topics Covered

security advisory critical issue debian arbitrary code execution gst-plugins-bad

Summary

Chris Evans discovered that the GStreamer 0.10 plugin to decode NES
Sound Format files allowed the execution of arbitrary code. Further
details can be found in his advisory at
https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-compromising-linux-desktop.html

For the stable distribution (jessie), this problem has been fixed in
version 0.10.23-7.4+deb8u1.

The unstable distribution (sid) no longer contains Gstreamer 0.10.

We recommend that you upgrade your gst-plugins-bad0.10 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: gst-plugins-bad0.10
CVE ID: not yet available

Topics%20covered

Topics Covered

security advisory critical issue debian arbitrary code execution gst-plugins-bad

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.