Ubuntu alert USN-7827-1 (gst-plugins-base1.0)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7827-1] GStreamer Base Plugins vulnerabilities
Date:
             
 
Mon, 20 Oct 2025 21:51:50 +0000
Message-ID:
             
 
<E1vAxnC-0007c0-QJ@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7827-1
October 20, 2025

gst-plugins-base1.0 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in GStreamer Base Plugins.

Software Description:
- gst-plugins-base1.0: GStreamer plugins

Details:

Shaun Mirani discovered that GStreamer Base Plugins did not correctly
handle certain memory operations. An attacker could possibly use this issue
to cause a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  libgstreamer-plugins-base1.0-0  1.16.3-0ubuntu1.4+esm1
                                  Available with Ubuntu Pro
  libgstreamer-plugins-base1.0-dev  1.16.3-0ubuntu1.4+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libgstreamer-plugins-base1.0-0  1.14.5-0ubuntu1~18.04.3+esm2
                                  Available with Ubuntu Pro
  libgstreamer-plugins-base1.0-dev  1.14.5-0ubuntu1~18.04.3+esm2
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libgstreamer-plugins-base1.0-0  1.8.3-1ubuntu0.3+esm3
                                  Available with Ubuntu Pro
  libgstreamer-plugins-base1.0-dev  1.8.3-1ubuntu0.3+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7827-1
  CVE-2025-47806, CVE-2025-47807, CVE-2025-47808


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=6iAe
-----END PGP SIGNATURE-----