Ubuntu Security Updates Address FFmpeg Vulnerabilities Across Multiple LTS Versions
Ubuntu has released critical security updates for the FFmpeg multimedia framework, addressing vulnerabilities across several Long Term Support (LTS) versions. The updates are crucial for users running Ubuntu 24.04 LTS (Noble), 22.04 LTS (Jammy), 20.04 LTS (Focal), 18.04 LTS (Bionic), and 16.04 LTS (Xenial). These updates are available through the Ubuntu Pro subscription via Extended Security Maintenance (ESM) Apps, with community fixes potentially forthcoming.
Affected Products and Versions
The vulnerabilities affect the following packages and versions:
- ffmpeg – Version 7:6.1.1-3ubuntu5+esm11 for 24.04 LTS, 7:4.4.2-0ubuntu0.22.04.1+esm13 for 22.04 LTS, 7:4.2.7-0ubuntu0.1+esm14 for 20.04 LTS, 7:3.4.11-0ubuntu0.1+esm13 for 18.04 LTS, and 7:2.8.17-0ubuntu0.1+esm15 for 16.04 LTS.
- libavcodec-dev – Same versions as ffmpeg.
- libavcodec-extra – Same versions as ffmpeg.
- libavdevice-dev – Same versions as ffmpeg.
- libavfilter-dev – Same versions as ffmpeg.
- libavformat-dev – Same versions as ffmpeg.
- libavutil-dev – Same versions as ffmpeg.
- libpostproc-dev – Same versions as ffmpeg.
- libswresample-dev – Same versions as ffmpeg.
- libswscale-dev – Same versions as ffmpeg.
Severity and Remediation
The vulnerabilities are considered significant, and users are strongly advised to apply the updates as soon as possible. The fixes are available through the Ubuntu Pro subscription, which provides access to ESM Apps. Users can find more information and apply the necessary updates by visiting the official Ubuntu security notice at Ubuntu Security Notices.
For those who do not have an Ubuntu Pro subscription, community fixes may be released in the future, but users should not rely solely on these potential updates for immediate remediation.
In summary, it is essential for administrators and users of affected Ubuntu LTS versions to prioritize these updates to mitigate potential security risks associated with the identified vulnerabilities in FFmpeg.
Follow Cyber Warriors Middle East for further cybersecurity resources, advisories and technical guidance.
