Visão geral

O aviso de segurança USN-8716-2, da Ubuntu, trata de vulnerabilidades no FFmpeg. No Ubuntu 26.04 LTS (resolute), a versão corrigida é 7:8.0.1-3ubuntu2+esm4, e as correções exigem acesso ao Ubuntu Pro/ESM, conforme o aviso oficial. O aviso cobre 15 CVEs.

Dados do aviso

Identificação e metadados conforme fornecidos pela fonte:

{
"project": "ubuntu",
"event": "security",
"identifier": "USN-8716-2",
"version": null,
"announcementDate": "2026-09-09 17:27:15+00",
"officialSource": "https://ubuntu.com/security/notices/USN-8716-2",
"cves": [

Pacotes afetados

No Ubuntu 26.04 LTS (resolute), os pacotes afetados são ffmpeg, libavcodec62, libavcodec-extra62, libavfilter11, libavformat62 e libavformat-extra62.

Entradas de pacotes corrigidos, conforme a fonte:

],
"fixedPackages": [
{
"release": "26.04 LTS resolute",
"package": "ffmpeg",
"version": "7:8.0.1-3ubuntu2+esm4",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "26.04 LTS resolute",
"package": "libavcodec-extra62",
"version": "7:8.0.1-3ubuntu2+esm4",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "26.04 LTS resolute",
"package": "libavcodec62",
"version": "7:8.0.1-3ubuntu2+esm4",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "26.04 LTS resolute",
"package": "libavfilter11",
"version": "7:8.0.1-3ubuntu2+esm4",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "26.04 LTS resolute",
"package": "libavformat-extra62",
"version": "7:8.0.1-3ubuntu2+esm4",
"access": "Ubuntu Pro / ESM (see official notice)"
},
{
"release": "26.04 LTS resolute",
"package": "libavformat62",
"version": "7:8.0.1-3ubuntu2+esm4",
"access": "Ubuntu Pro / ESM (see official notice)"
}
],
"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
}

Versão corrigida

A versão corrigida é 7:8.0.1-3ubuntu2+esm4.

Vulnerabilidades (CVEs)

O aviso reúne 15 CVEs:

"CVE-2026-64830",
"CVE-2026-64831",
"CVE-2026-64832",
"CVE-2026-64833",
"CVE-2026-64834",
"CVE-2026-64835",
"CVE-2026-65703",
"CVE-2026-65704",
"CVE-2026-65705",
"CVE-2026-65706",
"CVE-2026-75141",
"CVE-2026-75142",
"CVE-2026-75143",
"CVE-2026-75144",
"CVE-2026-75146"

A listagem de CVEs no aviso não implica que todos os pacotes listados sejam afetados por todas as vulnerabilidades.

Acesso às correções

Conforme o aviso oficial, as correções exigem acesso ao Ubuntu Pro/ESM.