Ubuntu alert USN-8317-1 (gst-plugins-good1.0)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8317-1] GStreamer Good Plugins vulnerabilities
Date:
             
 
Wed, 27 May 2026 13:37:53 +0000
Message-ID:
             
 
<E1wSESH-0005h9-JX@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8317-1
May 27, 2026

gst-plugins-good1.0 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in GStreamer Good Plugins.

Software Description:
- gst-plugins-good1.0: GStreamer plugins

Details:

It was discovered that GStreamer Good Plugins incorrectly handled certain
MP4 audio tracks. An attacker could possibly use this issue to cause
GStreamer Good Plugins to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  gstreamer1.0-plugins-good       1.26.5-1ubuntu2.3
  libgstreamer-plugins-good1.0-0  1.26.5-1ubuntu2.3

Ubuntu 24.04 LTS
  gstreamer1.0-plugins-good       1.24.2-1ubuntu1.4
  libgstreamer-plugins-good1.0-0  1.24.2-1ubuntu1.4

Ubuntu 22.04 LTS
  gstreamer1.0-plugins-good       1.20.3-0ubuntu1.6
  libgstreamer-plugins-good1.0-0  1.20.3-0ubuntu1.6

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8317-1
  CVE-2026-46469, CVE-2026-46470

Package Information:
  https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/...
  https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/...
  https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=4LdN
-----END PGP SIGNATURE-----