Home / mailings [USN-9038-1] GStreamer Good Plugins, GStreamer Base Plugins vulnerabilities
Posted on 10 November 2026
Ubuntu Security==========================================================================Ubuntu Security Notice USN-9038-1
November 10, 2026
gst-plugins-good1.0, gst-plugins-base1.0 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Summary:
Several security issues were fixed in GStreamer Good Plugins and GStreamer
Base Plugins.
Software Description:
- gst-plugins-base1.0: GStreamer plugins
- gst-plugins-good1.0: GStreamer plugins
Details:
It was discovered that GStreamer Good Plugins did not properly handle
certain network streams. A remote attacker could possibly use this issue
to cause an application crash or execute arbitrary code. This issue only
affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
(CVE-2026-3083, CVE-2026-3085)
It was discovered that GStreamer Good Plugins incorrectly handled certain
Matroska files. An attacker could possibly use this issue to cause an
application crash, resulting in a denial of service. This issue only
affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
(CVE-2026-39043)
It was discovered that GStreamer Good Plugins incorrectly handled certain
WAV files. An attacker could possibly use this issue to make GStreamer
Good Plugins crash, resulting in a denial of service. This issue only
affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
(CVE-2026-39044)
It was discovered that GStreamer Good Plugins incorrectly handled certain
MP4 audio tracks. An attacker could possibly use this issue to cause an
application crash, resulting in a denial of service. This issue only
affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
(CVE-2026-46470)
It was discovered that GStreamer Good Plugins incorrectly handled certain
MP4 files. An attacker could possibly use this issue to make GStreamer Good
Plugins crash, resulting in a denial of service, or obtain sensitive
information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-46471)
It was discovered that GStreamer Good Plugins incorrectly handled certain
WavPack audio files. An attacker could possibly use this issue to cause an
application crash, resulting in a denial of service, or execute arbitrary
code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and
Ubuntu 20.04 LTS. (CVE-2026-53705)
It was discovered that GStreamer Good Plugins and GStreamer Base Plugins
incorrectly handled certain network streams. A remote attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. (CVE-2026-111183)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.10
gir1.2-gst-plugins-base-1.0 1.28.7-1ubuntu0.1
gstreamer1.0-alsa 1.28.7-1ubuntu0.1
gstreamer1.0-gl 1.28.7-1ubuntu0.1
gstreamer1.0-gtk3 1.28.7-1ubuntu0.1
gstreamer1.0-plugins-base 1.28.7-1ubuntu0.1
gstreamer1.0-plugins-base-apps 1.28.7-1ubuntu0.1
gstreamer1.0-plugins-good 1.28.7-1ubuntu0.1
gstreamer1.0-pulseaudio 1.28.7-1ubuntu0.1
gstreamer1.0-qt5 1.28.7-1ubuntu0.1
gstreamer1.0-qt6 1.28.7-1ubuntu0.1
gstreamer1.0-x 1.28.7-1ubuntu0.1
libgstreamer-gl1.0-0 1.28.7-1ubuntu0.1
libgstreamer-plugins-base1.0-0 1.28.7-1ubuntu0.1
libgstreamer-plugins-base1.0-dev 1.28.7-1ubuntu0.1
Ubuntu 22.04 LTS
gir1.2-gst-plugins-base-1.0 1.20.1-1ubuntu0.8
gstreamer1.0-alsa 1.20.1-1ubuntu0.8
gstreamer1.0-gl 1.20.1-1ubuntu0.8
gstreamer1.0-gtk3 1.20.3-0ubuntu1.11
gstreamer1.0-plugins-base 1.20.1-1ubuntu0.8
gstreamer1.0-plugins-base-apps 1.20.1-1ubuntu0.8
gstreamer1.0-plugins-good 1.20.3-0ubuntu1.11
gstreamer1.0-pulseaudio 1.20.3-0ubuntu1.11
gstreamer1.0-qt5 1.20.3-0ubuntu1.11
gstreamer1.0-x 1.20.1-1ubuntu0.8
libgstreamer-gl1.0-0 1.20.1-1ubuntu0.8
libgstreamer-plugins-base1.0-0 1.20.1-1ubuntu0.8
libgstreamer-plugins-base1.0-dev 1.20.1-1ubuntu0.8
libgstreamer-plugins-good1.0-0 1.20.3-0ubuntu1.11
libgstreamer-plugins-good1.0-dev 1.20.3-0ubuntu1.11
Ubuntu 20.04 LTS
gir1.2-gst-plugins-base-1.0 1.16.3-0ubuntu1.4+esm4
Available with Ubuntu Pro
gstreamer1.0-alsa 1.16.3-0ubuntu1.4+esm4
Available with Ubuntu Pro
gstreamer1.0-gl 1.16.3-0ubuntu1.4+esm4
Available with Ubuntu Pro
gstreamer1.0-gtk3 1.16.3-0ubuntu1.3+esm5
Available with Ubuntu Pro
gstreamer1.0-plugins-base 1.16.3-0ubuntu1.4+esm4
Available with Ubuntu Pro
gstreamer1.0-plugins-base-apps 1.16.3-0ubuntu1.4+esm4
Available with Ubuntu Pro
gstreamer1.0-plugins-good 1.16.3-0ubuntu1.3+esm5
Available with Ubuntu Pro
gstreamer1.0-pulseaudio 1.16.3-0ubuntu1.3+esm5
Available with Ubuntu Pro
gstreamer1.0-qt5 1.16.3-0ubuntu1.3+esm5
Available with Ubuntu Pro
gstreamer1.0-x 1.16.3-0ubuntu1.4+esm4
Available with Ubuntu Pro
libgstreamer-gl1.0-0 1.16.3-0ubuntu1.4+esm4
Available with Ubuntu Pro
libgstreamer-plugins-base1.0-0 1.16.3-0ubuntu1.4+esm4
Available with Ubuntu Pro
libgstreamer-plugins-base1.0-dev 1.16.3-0ubuntu1.4+esm4
Available with Ubuntu Pro
libgstreamer-plugins-good1.0-0 1.16.3-0ubuntu1.3+esm5
Available with Ubuntu Pro
libgstreamer-plugins-good1.0-dev 1.16.3-0ubuntu1.3+esm5
Available with Ubuntu Pro
Ubuntu 18.04 LTS
gir1.2-gst-plugins-base-1.0 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
gstreamer1.0-alsa 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
gstreamer1.0-gl 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
gstreamer1.0-gtk3 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
gstreamer1.0-plugins-base 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
gstreamer1.0-plugins-base-apps 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
gstreamer1.0-plugins-good 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
gstreamer1.0-pulseaudio 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
gstreamer1.0-qt5 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
gstreamer1.0-x 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
libgstreamer-gl1.0-0 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
libgstreamer-plugins-base1.0-0 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
libgstreamer-plugins-base1.0-dev 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
libgstreamer-plugins-good1.0-0 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
libgstreamer-plugins-good1.0-dev 1.14.5-0ubuntu1~18.04.3+esm5
Available with Ubuntu Pro
Ubuntu 16.04 LTS
gir1.2-gst-plugins-base-1.0 1.8.3-1ubuntu0.3+esm6
Available with Ubuntu Pro
gstreamer1.0-alsa 1.8.3-1ubuntu0.3+esm6
Available with Ubuntu Pro
gstreamer1.0-plugins-base 1.8.3-1ubuntu0.3+esm6
Available with Ubuntu Pro
gstreamer1.0-plugins-base-apps 1.8.3-1ubuntu0.3+esm6
Available with Ubuntu Pro
gstreamer1.0-plugins-good 1.8.3-1ubuntu0.5+esm5
Available with Ubuntu Pro
gstreamer1.0-pulseaudio 1.8.3-1ubuntu0.5+esm5
Available with Ubuntu Pro
gstreamer1.0-x 1.8.3-1ubuntu0.3+esm6
Available with Ubuntu Pro
libgstreamer-plugins-base1.0-0 1.8.3-1ubuntu0.3+esm6
Available with Ubuntu Pro
libgstreamer-plugins-base1.0-dev 1.8.3-1ubuntu0.3+esm6
Available with Ubuntu Pro
libgstreamer-plugins-good1.0-0 1.8.3-1ubuntu0.5+esm5
Available with Ubuntu Pro
libgstreamer-plugins-good1.0-dev 1.8.3-1ubuntu0.5+esm5
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-9038-1
CVE-2026-111183, CVE-2026-3083, CVE-2026-3085, CVE-2026-39043,
CVE-2026-39044, CVE-2026-46470, CVE-2026-46471, CVE-2026-53705
Package Information:
https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.28.7-1ubuntu0.1
https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.28.7-1ubuntu0.1
https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.8
https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.11
--===============0636965439727507112==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
