USN-6291-1: GStreamer vulnerability
16 August 2023
GStreamer could be made to denial of service if it received a specially crafted datetime string.
Releases
Packages
- gstreamer1.0 - GObject introspection data for the GStreamer library
Details
Hanno Bock discovered that GStreamer incorrecly handled certain datetime
strings. An attacker could possibly use this issue to cause a denial
of service or expose sensitive information.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
gstreamer1.0-tools
-
1.8.3-1~ubuntu0.1+esm1
Available with Ubuntu Pro
-
libgstreamer1.0-0
-
1.8.3-1~ubuntu0.1+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.