Ubuntu Security Notices
USN-8797-1

USN-8797-1: GStreamer Base Plugins vulnerability

Publication date

21 September 2026

Overview

GStreamer Base Plugins could be made to crash or run programs as your login if it opened a specially crafted file.

Releases

26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS

Packages

gst-plugins-base1.0 - GStreamer plugins

Details

It was discovered that GStreamer Base Plugins incorrectly handled certain
OGG media files. A remote attacker could possibly use this issue to
execute arbitrary code if it opened a specially crafted file.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
26.04 LTS resolute	gir1.2-gst-plugins-base-1.0 – 1.28.2-1ubuntu0.1
	gstreamer1.0-alsa – 1.28.2-1ubuntu0.1
	gstreamer1.0-gl – 1.28.2-1ubuntu0.1
	gstreamer1.0-plugins-base – 1.28.2-1ubuntu0.1
	gstreamer1.0-plugins-base-apps – 1.28.2-1ubuntu0.1
	gstreamer1.0-x – 1.28.2-1ubuntu0.1
	libgstreamer-gl1.0-0 – 1.28.2-1ubuntu0.1
	libgstreamer-plugins-base1.0-0 – 1.28.2-1ubuntu0.1
	libgstreamer-plugins-base1.0-dev – 1.28.2-1ubuntu0.1
24.04 LTS noble	gir1.2-gst-plugins-base-1.0 – 1.24.2-1ubuntu0.5
	gstreamer1.0-alsa – 1.24.2-1ubuntu0.5
	gstreamer1.0-gl – 1.24.2-1ubuntu0.5
	gstreamer1.0-plugins-base – 1.24.2-1ubuntu0.5
	gstreamer1.0-plugins-base-apps – 1.24.2-1ubuntu0.5
	gstreamer1.0-x – 1.24.2-1ubuntu0.5
	libgstreamer-gl1.0-0 – 1.24.2-1ubuntu0.5
	libgstreamer-plugins-base1.0-0 – 1.24.2-1ubuntu0.5
	libgstreamer-plugins-base1.0-dev – 1.24.2-1ubuntu0.5
22.04 LTS jammy	gir1.2-gst-plugins-base-1.0 – 1.20.1-1ubuntu0.7
	gstreamer1.0-alsa – 1.20.1-1ubuntu0.7
	gstreamer1.0-gl – 1.20.1-1ubuntu0.7
	gstreamer1.0-plugins-base – 1.20.1-1ubuntu0.7
	gstreamer1.0-plugins-base-apps – 1.20.1-1ubuntu0.7
	gstreamer1.0-x – 1.20.1-1ubuntu0.7
	libgstreamer-gl1.0-0 – 1.20.1-1ubuntu0.7
	libgstreamer-plugins-base1.0-0 – 1.20.1-1ubuntu0.7
	libgstreamer-plugins-base1.0-dev – 1.20.1-1ubuntu0.7
20.04 LTS focal	gir1.2-gst-plugins-base-1.0 – 1.16.3-0ubuntu1.4+esm3
	gstreamer1.0-alsa – 1.16.3-0ubuntu1.4+esm3
	gstreamer1.0-gl – 1.16.3-0ubuntu1.4+esm3
	gstreamer1.0-plugins-base – 1.16.3-0ubuntu1.4+esm3
	gstreamer1.0-plugins-base-apps – 1.16.3-0ubuntu1.4+esm3
	gstreamer1.0-x – 1.16.3-0ubuntu1.4+esm3
	libgstreamer-gl1.0-0 – 1.16.3-0ubuntu1.4+esm3
	libgstreamer-plugins-base1.0-0 – 1.16.3-0ubuntu1.4+esm3
	libgstreamer-plugins-base1.0-dev – 1.16.3-0ubuntu1.4+esm3
18.04 LTS bionic	gir1.2-gst-plugins-base-1.0 – 1.14.5-0ubuntu1~18.04.3+esm4
	gstreamer1.0-alsa – 1.14.5-0ubuntu1~18.04.3+esm4
	gstreamer1.0-gl – 1.14.5-0ubuntu1~18.04.3+esm4
	gstreamer1.0-plugins-base – 1.14.5-0ubuntu1~18.04.3+esm4
	gstreamer1.0-plugins-base-apps – 1.14.5-0ubuntu1~18.04.3+esm4
	gstreamer1.0-x – 1.14.5-0ubuntu1~18.04.3+esm4
	libgstreamer-gl1.0-0 – 1.14.5-0ubuntu1~18.04.3+esm4
	libgstreamer-plugins-base1.0-0 – 1.14.5-0ubuntu1~18.04.3+esm4
	libgstreamer-plugins-base1.0-dev – 1.14.5-0ubuntu1~18.04.3+esm4
16.04 LTS xenial	gir1.2-gst-plugins-base-1.0 – 1.8.3-1ubuntu0.3+esm5
	gstreamer1.0-alsa – 1.8.3-1ubuntu0.3+esm5
	gstreamer1.0-plugins-base – 1.8.3-1ubuntu0.3+esm5
	gstreamer1.0-plugins-base-apps – 1.8.3-1ubuntu0.3+esm5
	gstreamer1.0-x – 1.8.3-1ubuntu0.3+esm5
	libgstreamer-plugins-base1.0-0 – 1.8.3-1ubuntu0.3+esm5
	libgstreamer-plugins-base1.0-dev – 1.8.3-1ubuntu0.3+esm5

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2026-18297

CVE-2026-18297