Ubuntu alert USN-8130-3 (gst-plugins-base1.0)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8130-3] GStreamer Base Plugins vulnerability
Date:
             
 
Fri, 12 Jun 2026 11:54:05 +0000
Message-ID:
             
 
<E1wY0Sb-00018R-Cl@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8130-3
June 10, 2026

gst-plugins-base1.0 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

GStreamer Base Plugins could be made to crash or run programs if it opened
a specially crafted file.

Software Description:
- gst-plugins-base1.0: GStreamer plugins

Details:

USN-8130-1 fixed a vulnerability in GStreamer Base Plugins. This update
provides the corresponding update for Ubuntu 16.04 LTS.

Original advisory details:

 It was discovered that GStreamer Base Plugins incorrectly handled certain
 AVI media files. A remote attacker could use this issue to cause GStreamer
 Base Plugins to crash, resulting in a denial of service, or possibly
 execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  gstreamer1.0-plugins-base       1.8.3-1ubuntu0.3+esm4
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8130-3
  https://ubuntu.com/security/notices/USN-8130-2
  https://ubuntu.com/security/notices/USN-8130-1
  CVE-2026-2921


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmopUA8ACgkQcpJm3tlz
hgEf1BAAog8otbi/BTG85tUDogT+evmR7ffLSyFKvuGjFzZvJEx1HlfUhLoI6LgT
nHQgQgG8i6M2appl8J1LvMNG4WDDUqjvoZa+1GWq17VEfWhgOrC2WTWYkDc08VxU
mujT4YO3EwOeaslsnRQPiqyvUsdD5jqRHse+O8QALip7UJZuR3nVU/ECOpzJnLtG
rnJSvghQpr1Oi5KgbUH4vWhUCitW+lAU9Wz6zF+eBJbom5Vdb5Eyy8L9HXcykvTZ
AeQzCyq6Xd3nTuDDo+/kWkXU/6XRg09t2N5l+dh4rXS3CPgrk6WUIO7liH1LhM10
YUQEkzX/WkaHqh7+CyYa5pTPkPdBxGe766SR2w09tG/lsHTK4GPbzWI/Qs3kLU9s
BL0sD8coRhI3CCa2naiinsLwXeH3K/ng5qkGcFJFJXG+oOF+LpbxQrbTSd+XDysx
Fr6uUrcJGSwy31Iy7V5zh2K3wuCfeXm4+0RvGCZcA8YysavuEmwmPS6B9XyMfG1+
eBcShdaE53XYESoN0okhKTcE19C8AFNPsOhVgYczq/74O7QLXqWXIzd22+kkM2xD
IA5Qs9eOU8UMcJkaf/fEBYTD/v6myaVNhxFl/AjA5bmePf7d+9ygg7GhTnci5ohg
maODFqLKsQUN8Tj3tzg/16+Iu8wxfhNFDXW5FhGSa9x2H4mhgE4=
=cvFp
-----END PGP SIGNATURE-----