Ubuntu Security Notification for Gst-plugins-good0.10, Gst-plugins-good1.0 Vulnerability (USN-3135-1)

It was discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie files.

If a user were tricked into opening a crafted FLC movie file with a GStreamer application, an attacker could cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking the program.

Refer to Ubuntu advisory USN-3135-1 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

USN-3135-1: 14.04 (Kylin) on src (gstreamer0.10-plugins-good)

USN-3135-1: 16.10 (Yakkety) on src (gstreamer1.0-plugins-good)

USN-3135-1: 16.04 (Xenial) on src (gstreamer1.0-plugins-good)

USN-3135-1: 14.04 (Kylin) on src (gstreamer1.0-plugins-good)

USN-3135-1: 12.04 (Precise) on src (gstreamer0.10-plugins-good)