USN-6268-1: GStreamer Base Plugins vulnerabilities
2 August 2023
GStreamer Base Plugins could be made to crash or run programs if it opened a specially crafted file.
Releases
Packages
- gst-plugins-base1.0 - GStreamer plugins
Details
It was discovered that GStreamer Base Plugins incorrectly handled certain
FLAC image tags. A remote attacker could use this issue to cause GStreamer
Base Plugins to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2023-37327)
It was discovered that GStreamer Base Plugins incorrectly handled certain
subtitles. A remote attacker could use this issue to cause GStreamer Base
Plugins to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2023-37328)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 23.04
Ubuntu 22.04
Ubuntu 20.04
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-6269-1: gstreamer1.0-qt5, gstreamer1.0-gtk3, gstreamer1.0-plugins-good, gstreamer1.0-qt6, libgstreamer-plugins-good1.0-dev, gstreamer1.0-pulseaudio, gst-plugins-good1.0, gstreamer1.0-plugins-good-doc, libgstreamer-plugins-good1.0-0