Ubuntu 23.10 USN-6526-1 critical: GStreamer DoS vulnerabilities

ubuntu

November 29, 2023

Several security issues were fixed in GStreamer Bad Plugins.

Summary

Several security issues were fixed in GStreamer Bad Plugins.

Software Description:

- gst-plugins-bad1.0: GStreamer plugins

Details:

It was discovered that GStreamer Bad Plugins incorrectly handled certain

media files. A remote attacker could use this issue to cause GStreamer

Bad Plugins to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Topics Covered

security advisory critical Ubuntu Denial of Service GStreamer plugin issues

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
   gstreamer1.0-plugins-bad        1.22.4-1ubuntu1.1
   libgstreamer-plugins-bad1.0-0   1.22.4-1ubuntu1.1

Ubuntu 23.04:
   gstreamer1.0-plugins-bad        1.22.1-1ubuntu1.1
   libgstreamer-plugins-bad1.0-0   1.22.1-1ubuntu1.1

Ubuntu 22.04 LTS:
   gstreamer1.0-plugins-bad        1.20.3-0ubuntu1.1
   libgstreamer-plugins-bad1.0-0   1.20.3-0ubuntu1.1

Ubuntu 20.04 LTS:
   gstreamer1.0-plugins-bad        1.16.3-0ubuntu1.1
   libgstreamer-plugins-bad1.0-0   1.16.3-0ubuntu1.1

In general, a standard system update will make all the necessary changes.