USN-3135-2: GStreamer Good Plugins vulnerability | Ubuntu security notices

Packages

gst-plugins-good0.10 - GStreamer plugins
gst-plugins-good1.0 - GStreamer plugins

Details

USN-3135-1 fixed a vulnerability in GStreamer Good Plugins. The original
security fix was incomplete. This update fixes the problem.

Original advisory details:

Chris Evans discovered that GStreamer Good Plugins did not correctly handle
malformed FLC movie files. If a user were tricked into opening a crafted
FLC movie file with a GStreamer application, an attacker could cause a
denial of service via application crash, or execute arbitrary code with the
privileges of the user invoking the program.

USN-3135-1 fixed a vulnerability in GStreamer Good Plugins. The original
security fix was incomplete. This update fixes the problem.

Original advisory details:

Chris Evans discovered that GStreamer Good Plugins did not correctly handle
malformed FLC movie files. If a user were tricked into opening a crafted
FLC movie file with a GStreamer application, an attacker could cause a
denial of service via application crash, or execute arbitrary code with the
privileges of the user invoking the program.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
16.10 yakkety	gstreamer1.0-plugins-good – 1.8.3-1ubuntu1.2
16.04 xenial	gstreamer1.0-plugins-good – 1.8.2-1ubuntu0.3
14.04 trusty	gstreamer0.10-plugins-good – 0.10.31-3+nmu1ubuntu5.2
14.04 trusty	gstreamer1.0-plugins-good – 1.2.4-1~ubuntu1.3
12.04 precise	gstreamer0.10-plugins-good – 0.10.31-1ubuntu1.4

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

https://launchpad.net/bugs/1643901