Ubuntu Security Notices
USN-6798-1

USN-6798-1: GStreamer Base Plugins vulnerability

Publication date

29 May 2024

Overview

GStreamer Base Plugins could be made to crash or run programs as your login if it opened a specially crafted file.

Releases

24.04 LTS 23.10 22.04 LTS 20.04 LTS

Packages

gst-plugins-base1.0 - GStreamer plugins

Details

It was discovered that GStreamer Base Plugins incorrectly handled certain
EXIF metadata. An attacker could possibly use this issue to execute arbitrary
code or cause a crash.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
24.04 noble	gstreamer1.0-plugins-base – 1.24.2-1ubuntu0.1
23.10 mantic	gstreamer1.0-plugins-base – 1.22.6-1ubuntu0.1
22.04 jammy	gstreamer1.0-plugins-base – 1.20.1-1ubuntu0.2
20.04 focal	gstreamer1.0-plugins-base – 1.16.3-0ubuntu1.3

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2024-4453

CVE-2024-4453