Tuesday, January 7, 2025

[USN-7188-1] FFmpeg vulnerability

-----BEGIN PGP SIGNATURE-----
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=0qw9
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-7188-1
January 08, 2025

ffmpeg vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

FFmpeg could be made to crash if it received specially crafted input.

Software Description:
- ffmpeg: Tools for transcoding, streaming and playing of multimedia files

Details:

It was discovered that FFmpeg incorrectly handled certain input, which
could lead to an integer overflow. An attacker could possibly use this
issue to cause a denial of service by crashing the application.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
  ffmpeg                          7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libavcodec-extra58              7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libavcodec58                    7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libavdevice58                   7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libavfilter-extra7              7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libavfilter7                    7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libavformat-extra58             7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libavformat58                   7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libavutil56                     7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libpostproc55                   7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libswresample3                  7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro
  libswscale5                     7:4.4.2-0ubuntu0.22.04.1+esm6
                                  Available with Ubuntu Pro

Ubuntu 20.04 LTS
  ffmpeg                          7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavcodec-extra58              7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavcodec58                    7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavdevice58                   7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavfilter-extra7              7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavfilter7                    7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavformat58                   7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavresample4                  7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavutil56                     7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libpostproc55                   7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libswresample3                  7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libswscale5                     7:4.2.7-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  ffmpeg                          7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavcodec-extra57              7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavcodec57                    7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavdevice57                   7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavfilter-extra6              7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavfilter6                    7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavformat57                   7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavresample3                  7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libavutil55                     7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libpostproc54                   7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libswresample2                  7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro
  libswscale4                     7:3.4.11-0ubuntu0.1+esm7
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  ffmpeg                          7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libav-tools                     7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libavcodec-ffmpeg-extra56       7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libavcodec-ffmpeg56             7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libavdevice-ffmpeg56            7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libavfilter-ffmpeg5             7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libavformat-ffmpeg56            7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libavresample-ffmpeg2           7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libavutil-ffmpeg54              7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libpostproc-ffmpeg53            7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libswresample-ffmpeg1           7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro
  libswscale-ffmpeg3              7:2.8.17-0ubuntu0.1+esm9
                                  Available with Ubuntu Pro

After a standard system update you need to restart FFmpeg to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7188-1
  CVE-2024-36617

No comments:

Post a Comment