Ubuntu 16.10 Security Advisory USN-3244-1: GStreamer DoS Issue

ubuntu

March 27, 2017

GStreamer Base Plugins could be made to crash if it opened a specially crafted file.

Summary

GStreamer Base Plugins could be made to crash if it opened a specially

crafted file.

Software Description:

- gst-plugins-base1.0: GStreamer Plugins

- gst-plugins-base0.10: GStreamer Plugins

Details:

Hanno Böck discovered that GStreamer Base Plugins did not correctly handle

certain malformed media files. If a user were tricked into opening a

crafted media file with a GStreamer application, an attacker could cause a

denial of service via application crash.

Topics Covered

security advisory denial of service application crash ubuntu gstreamer plugin update

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  gstreamer1.0-plugins-base       1.8.3-1ubuntu1.1

Ubuntu 16.04 LTS:
  gstreamer1.0-plugins-base       1.8.3-1ubuntu0.2

Ubuntu 14.04 LTS:
  gstreamer0.10-plugins-base      0.10.36-1.1ubuntu2.1
  gstreamer1.0-plugins-base       1.2.4-1~ubuntu2.1

Ubuntu 12.04 LTS:
  gstreamer0.10-plugins-base      0.10.36-1ubuntu0.2

In general, a standard system update will make all the necessary changes.