Ubuntu alert USN-8130-2 (gst-plugins-base1.0)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8130-2] GStreamer Base Plugins vulnerability
Date:
             
 
Wed, 03 Jun 2026 13:30:26 +0000
Message-ID:
             
 
<E1wUlfu-00031n-B7@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8130-2
June 02, 2026

gst-plugins-base1.0 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS

Summary:

GStreamer Base Plugins could be made to crash or run programs if it opened
a specially crafted file.

Software Description:
- gst-plugins-base1.0: GStreamer plugins

Details:

USN-8130-1 fixed a vulnerability in GStreamer Base Plugins. This update
provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu
20.04 LTS.

Original advisory details:

 It was discovered that GStreamer Base Plugins incorrectly handled certain
 AVI media files. A remote attacker could use this issue to cause GStreamer
 Base Plugins to crash, resulting in a denial of service, or possibly
 execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  gstreamer1.0-plugins-base       1.16.3-0ubuntu1.4+esm2
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  gstreamer1.0-plugins-base       1.14.5-0ubuntu1~18.04.3+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8130-2
  https://ubuntu.com/security/notices/USN-8130-1
  CVE-2026-2921


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=QKeY
-----END PGP SIGNATURE-----