USN-8863-1: GStreamer Good Plugins vulnerabilities

Publication date

1 October 2026

Overview

Several security issues were fixed in GStreamer Good Plugins.


Packages

Details

Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled
certain FLAC audio streams. An attacker could possibly use this issue to
obtain sensitive information. (CVE-2026-17072)

Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed
certain AVI files. An attacker could possibly use this issue to cause a
denial of service or obtain sensitive information. (CVE-2026-73433)

Seonwook Kim discovered that GStreamer Good Plugins did not correctly parse
certain AVI files. An attacker could possibly use this issue to cause a
denial of service. (CVE-2026-73434)

Seonwook Kim discovered that GStreamer Good Plugins incorrectly handled
certain closed caption data. An attacker could possibly use this issue to
obtain sensitive information. This issue only affected Ubuntu 20.04 LTS,
Ubuntu...

Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled
certain FLAC audio streams. An attacker could possibly use this issue to
obtain sensitive information. (CVE-2026-17072)

Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed
certain AVI files. An attacker could possibly use this issue to cause a
denial of service or obtain sensitive information. (CVE-2026-73433)

Seonwook Kim discovered that GStreamer Good Plugins did not correctly parse
certain AVI files. An attacker could possibly use this issue to cause a
denial of service. (CVE-2026-73434)

Seonwook Kim discovered that GStreamer Good Plugins incorrectly handled
certain closed caption data. An attacker could possibly use this issue to
obtain sensitive information. This issue only affected Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.
(CVE-2026-88914)


Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
26.04 LTS resolute gstreamer1.0-gtk3 –  1.28.2-2ubuntu0.4
gstreamer1.0-plugins-good –  1.28.2-2ubuntu0.4
gstreamer1.0-pulseaudio –  1.28.2-2ubuntu0.4
gstreamer1.0-qt5 –  1.28.2-2ubuntu0.4
gstreamer1.0-qt6 –  1.28.2-2ubuntu0.4
24.04 LTS noble gstreamer1.0-gtk3 –  1.24.2-1ubuntu1.8
gstreamer1.0-plugins-good –  1.24.2-1ubuntu1.8
gstreamer1.0-pulseaudio –  1.24.2-1ubuntu1.8
gstreamer1.0-qt5 –  1.24.2-1ubuntu1.8
gstreamer1.0-qt6 –  1.24.2-1ubuntu1.8
libgstreamer-plugins-good1.0-0 –  1.24.2-1ubuntu1.8
libgstreamer-plugins-good1.0-dev –  1.24.2-1ubuntu1.8
22.04 LTS jammy gstreamer1.0-gtk3 –  1.20.3-0ubuntu1.10
gstreamer1.0-plugins-good –  1.20.3-0ubuntu1.10
gstreamer1.0-pulseaudio –  1.20.3-0ubuntu1.10
gstreamer1.0-qt5 –  1.20.3-0ubuntu1.10
libgstreamer-plugins-good1.0-0 –  1.20.3-0ubuntu1.10
libgstreamer-plugins-good1.0-dev –  1.20.3-0ubuntu1.10
20.04 LTS focal gstreamer1.0-gtk3 –  1.16.3-0ubuntu1.3+esm4  
gstreamer1.0-plugins-good –  1.16.3-0ubuntu1.3+esm4  
gstreamer1.0-pulseaudio –  1.16.3-0ubuntu1.3+esm4  
gstreamer1.0-qt5 –  1.16.3-0ubuntu1.3+esm4  
libgstreamer-plugins-good1.0-0 –  1.16.3-0ubuntu1.3+esm4  
libgstreamer-plugins-good1.0-dev –  1.16.3-0ubuntu1.3+esm4  
18.04 LTS bionic gstreamer1.0-gtk3 –  1.14.5-0ubuntu1~18.04.3+esm4  
gstreamer1.0-plugins-good –  1.14.5-0ubuntu1~18.04.3+esm4  
gstreamer1.0-pulseaudio –  1.14.5-0ubuntu1~18.04.3+esm4  
gstreamer1.0-qt5 –  1.14.5-0ubuntu1~18.04.3+esm4  
libgstreamer-plugins-good1.0-0 –  1.14.5-0ubuntu1~18.04.3+esm4  
libgstreamer-plugins-good1.0-dev –  1.14.5-0ubuntu1~18.04.3+esm4  
16.04 LTS xenial gstreamer1.0-plugins-good –  1.8.3-1ubuntu0.5+esm4  
gstreamer1.0-plugins-good-doc –  1.8.3-1ubuntu0.5+esm4  
gstreamer1.0-pulseaudio –  1.8.3-1ubuntu0.5+esm4  
libgstreamer-plugins-good1.0-0 –  1.8.3-1ubuntu0.5+esm4  
libgstreamer-plugins-good1.0-dev –  1.8.3-1ubuntu0.5+esm4  

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›