网安资讯详情 - SecLens 情报雷达

USN-8130-3: GStreamer Base Plugins vulnerability

来源： ubuntu_security_notice · 发布时间 2026-06-10 19:30 (UTC+08:00) · 抓取时间 2026-06-10 21:35 (UTC+08:00)

原文链接

摘要

GStreamer Base Plugins could be made to crash or run programs if it opened a specially crafted file.

正文

USN-8130-1 fixed a vulnerability in GStreamer Base Plugins. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: It was discovered that GStreamer Base Plugins incorrectly handled certain AVI media files. A remote attacker could use this issue to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.

标签

• release:xenial
• USN

扩展字段

{
  "cve_ids": [
    "CVE-2026-2921"
  ],
  "guid": "https://ubuntu.com/security/notices/USN-8130-3",
  "instructions": "In general, a standard system update will make all the necessary changes.",
  "raw_pub_date": "Wed, 10 Jun 2026 11:30:13 +0000",
  "release_packages": {
    "xenial": [
      {
        "description": "GStreamer plugins",
        "is_source": true,
        "name": "gst-plugins-base1.0",
        "version": "1.8.3-1ubuntu0.3+esm4"
      },
      {
        "is_source": false,
        "is_visible": false,
        "name": "gir1.2-gst-plugins-base-1.0",
        "pocket": "esm-infra-legacy",
        "source_link": "https://launchpad.net/ubuntu/+source/gst-plugins-base1.0",
        "version": "1.8.3-1ubuntu0.3+esm4",
        "version_link": null
      },
      {
        "is_source": false,
        "is_visible": false,
        "name": "gstreamer1.0-alsa",
        "pocket": "esm-infra-legacy",
        "source_link": "https://launchpad.net/ubuntu/+source/gst-plugins-base1.0",
        "version": "1.8.3-1ubuntu0.3+esm4",
        "version_link": null
      },
      {
        "is_source": false,
        "is_visible": true,
        "name": "gstreamer1.0-plugins-base",
        "pocket": "esm-infra-legacy",
        "source_link": "https://launchpad.net/ubuntu/+source/gst-plugins-base1.0",
        "version": "1.8.3-1ubuntu0.3+esm4",
        "version_link": null
      },
      {
        "is_source": false,
        "is_visible": false,
        "name": "gstreamer1.0-plugins-base-apps",
        "pocket": "esm-infra-legacy",
        "source_link": "https://launchpad.net/ubuntu/+source/gst-plugins-base1.0",
        "version": "1.8.3-1ubuntu0.3+esm4",
        "version_link": null
      },
      {
        "is_source": false,
        "is_visible": false,
        "name": "gstreamer1.0-plugins-base-doc",
        "pocket": "esm-infra-legacy",
        "source_link": "https://launchpad.net/ubuntu/+source/gst-plugins-base1.0",
        "version": "1.8.3-1ubuntu0.3+esm4",
        "version_link": null
      },
      {
        "is_source": false,
        "is_visible": false,
        "name": "gstreamer1.0-x",
        "pocket": "esm-infra-legacy",
        "source_link": "https://launchpad.net/ubuntu/+source/gst-plugins-base1.0",
        "version": "1.8.3-1ubuntu0.3+esm4",
        "version_link": null
      },
      {
        "is_source": false,
        "is_visible": false,
        "name": "libgstreamer-plugins-base1.0-0",
        "pocket": "esm-infra-legacy",
        "source_link": "https://launchpad.net/ubuntu/+source/gst-plugins-base1.0",
        "version": "1.8.3-1ubuntu0.3+esm4",
        "version_link": null
      },
      {
        "is_source": false,
        "is_visible": false,
        "name": "libgstreamer-plugins-base1.0-dev",
        "pocket": "esm-infra-legacy",
        "source_link": "https://launchpad.net/ubuntu/+source/gst-plugins-base1.0",
        "version": "1.8.3-1ubuntu0.3+esm4",
        "version_link": null
      }
    ]
  },
  "releases": [
    {
      "codename": "xenial",
      "support_tag": "ESM",
      "version": "16.04"
    }
  ]
}