Notice USN-8863-1, dated October 1, 2026, covers vulnerabilities in GStreamer Good Plugins when processing certain FLAC audio streams, AVI files and closed-caption data. The supplied text is an automatic translation of the Ubuntu Security feed.
According to the notice, CVE-2026-17072 may expose sensitive information when certain FLAC streams are processed. CVE-2026-73433 and CVE-2026-73434 concern AVI files and may cause denial of service; the first may also expose sensitive information. CVE-2026-88914, involving caption data, may expose information and affects only Ubuntu 20.04 LTS, 22.04 LTS, 24.04 LTS and 26.04 LTS.
To assess exposure, identify the Ubuntu systems and GStreamer Good Plugins components in use. Consult the original Ubuntu Security notice to confirm the details and check which update information applies to your installation; the supplied text does not specify fixed versions.
If you use AI to summarize the notice or support an assessment, do not submit logs, media files or internal data without authorization. Review content before sending it and apply your organization’s policy for personal data. Verify technical conclusions against official sources before taking action.