Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Ubuntu 24.10 Advisory USN-7175-1 critical: GStreamer plugin crash

Calendar Dec 18, 2024 • User Avatar LinuxSecurity Advisories
2 - 3 min read
Ubuntu Large Esm H500
Topics%20covered

Topics Covered

security advisory denial of service Ubuntu GStreamer plugin crash
GStreamer Base Plugins could be made to crash or run programs as your login if it opened a specially crafted file. 
==========================================================================
Ubuntu Security Notice USN-7175-1
December 18, 2024

gst-plugins-base1.0 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

GStreamer Base Plugins could be made to crash or run programs as your login
if it opened a specially crafted file.

Software Description:
- gst-plugins-base1.0: GStreamer plugins

Details:

Antonio Morales discovered that GStreamer Base Plugins incorrectly handled
certain malformed media files. An attacker could use these issues to cause
GStreamer Base Plugins to crash, resulting in a denial of service, or
possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   gstreamer1.0-alsa               1.24.8-1ubuntu0.1
   gstreamer1.0-gl                 1.24.8-1ubuntu0.1
   gstreamer1.0-plugins-base       1.24.8-1ubuntu0.1
   gstreamer1.0-plugins-base-apps  1.24.8-1ubuntu0.1
   gstreamer1.0-x                  1.24.8-1ubuntu0.1
   libgstreamer-gl1.0-0            1.24.8-1ubuntu0.1
   libgstreamer-plugins-base1.0-0  1.24.8-1ubuntu0.1

Ubuntu 24.04 LTS
   gstreamer1.0-alsa               1.24.2-1ubuntu0.2
   gstreamer1.0-gl                 1.24.2-1ubuntu0.2
   gstreamer1.0-plugins-base       1.24.2-1ubuntu0.2
   gstreamer1.0-plugins-base-apps  1.24.2-1ubuntu0.2
   gstreamer1.0-x                  1.24.2-1ubuntu0.2
   libgstreamer-gl1.0-0            1.24.2-1ubuntu0.2
   libgstreamer-plugins-base1.0-0  1.24.2-1ubuntu0.2

Ubuntu 22.04 LTS
   gstreamer1.0-alsa               1.20.1-1ubuntu0.4
   gstreamer1.0-gl                 1.20.1-1ubuntu0.4
   gstreamer1.0-plugins-base       1.20.1-1ubuntu0.4
   gstreamer1.0-plugins-base-apps  1.20.1-1ubuntu0.4
   gstreamer1.0-x                  1.20.1-1ubuntu0.4
   libgstreamer-gl1.0-0            1.20.1-1ubuntu0.4
   libgstreamer-plugins-base1.0-0  1.20.1-1ubuntu0.4

Ubuntu 20.04 LTS
   gstreamer1.0-alsa               1.16.3-0ubuntu1.4
   gstreamer1.0-gl                 1.16.3-0ubuntu1.4
   gstreamer1.0-plugins-base       1.16.3-0ubuntu1.4
   gstreamer1.0-plugins-base-apps  1.16.3-0ubuntu1.4
   gstreamer1.0-plugins-base-doc   1.16.3-0ubuntu1.4
   gstreamer1.0-x                  1.16.3-0ubuntu1.4
   libgstreamer-gl1.0-0            1.16.3-0ubuntu1.4
   libgstreamer-plugins-base1.0-0  1.16.3-0ubuntu1.4

In general, a standard system update will make all the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-7175-1
   CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
   CVE-2024-47607, CVE-2024-47615, CVE-2024-47835

Package Information:
   https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1
   https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2
   https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4
   https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4

Ubuntu 24.10 Advisory USN-7175-1 critical: GStreamer plugin crash

ubuntu
Calendar Grey December 18, 2024
Dist Ubuntu Esm H88
A security vulnerability in GStreamer Base Plugins affects Ubuntu 18.04, 20.04, and 22.04 LTS. Users should update to enhance system security and prevent exploitation
GStreamer Base Plugins could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: GStreamer Base Plugins could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - gst-plugins-base1.0: GStreamer plugins Details: Antonio Morales discovered that GStreamer Base Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu GStreamer plugin crash

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 gstreamer1.0-alsa 1.24.8-1ubuntu0.1 gstreamer1.0-gl 1.24.8-1ubuntu0.1 gstreamer1.0-plugins-base 1.24.8-1ubuntu0.1 gstreamer1.0-plugins-base-apps 1.24.8-1ubuntu0.1 gstreamer1.0-x 1.24.8-1ubuntu0.1 libgstreamer-gl1.0-0 1.24.8-1ubuntu0.1 libgstreamer-plugins-base1.0-0 1.24.8-1ubuntu0.1 Ubuntu 24.04 LTS gstreamer1.0-alsa 1.24.2-1ubuntu0.2 gstreamer1.0-gl 1.24.2-1ubuntu0.2 gstreamer1.0-plugins-base 1.24.2-1ubuntu0.2 gstreamer1.0-plugins-base-apps 1.24.2-1ubuntu0.2 gstreamer1.0-x 1.24.2-1ubuntu0.2 libgstreamer-gl1.0-0 1.24.2-1ubuntu0.2 libgstreamer-plugins-base1.0-0 1.24.2-1ubuntu0.2 Ubuntu 22.04 LTS gstreamer1.0-alsa 1.20.1-1ubuntu0.4 gstreamer1.0-gl 1.20.1-1ubuntu0.4 gstreamer1.0-plugins-base 1.20.1-1ubuntu0.4 gstreamer1.0-plugins-base-apps 1.20.1-1ubuntu0.4 gstreamer1.0-x 1.20.1-1ubuntu0.4 libgstreamer-gl1.0-0 1.20.1-1ubuntu0.4 libgstreamer-plugins-base1.0-0 1.20.1-1ubuntu0.4 Ubuntu 20.04 LTS gstreamer1.0-alsa 1.16.3-0ubuntu1.4 gstreamer1.0-gl 1.16.3-0ubuntu1.4 gstreamer1.0-plugins-base 1.16.3-0ubuntu1.4 gstreamer1.0-plugins-base-apps 1.16.3-0ubuntu1.4 gstreamer1.0-plugins-base-doc 1.16.3-0ubuntu1.4 gstreamer1.0-x 1.16.3-0ubuntu1.4 libgstreamer-gl1.0-0 1.16.3-0ubuntu1.4 libgstreamer-plugins-base1.0-0 1.16.3-0ubuntu1.4 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7175-1

CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,

CVE-2024-47607, CVE-2024-47615, CVE-2024-47835

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7175-1

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu GStreamer plugin crash

Package Information

https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1 https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2 https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4 https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here