USN-6526-1: GStreamer Bad Plugins vulnerabilities

Releases

• Ubuntu 23.10
• Ubuntu 23.04
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• gst-plugins-bad1.0 - GStreamer plugins

Details

It was discovered that GStreamer Bad Plugins incorrectly handled certain
media files. A remote attacker could use this issue to cause GStreamer
Bad Plugins to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 23.10

• gstreamer1.0-plugins-bad - 1.22.4-1ubuntu1.1
• libgstreamer-plugins-bad1.0-0 - 1.22.4-1ubuntu1.1

Ubuntu 23.04

• gstreamer1.0-plugins-bad - 1.22.1-1ubuntu1.1
• libgstreamer-plugins-bad1.0-0 - 1.22.1-1ubuntu1.1

Ubuntu 22.04

• gstreamer1.0-plugins-bad - 1.20.3-0ubuntu1.1
• libgstreamer-plugins-bad1.0-0 - 1.20.3-0ubuntu1.1

Ubuntu 20.04

• gstreamer1.0-plugins-bad - 1.16.3-0ubuntu1.1
• libgstreamer-plugins-bad1.0-0 - 1.16.3-0ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2023-40476
• CVE-2023-44429
• CVE-2023-40474
• CVE-2023-44446
• CVE-2023-40475
• CVE-2023-37329