O aviso de segurança USN-8738-1, do projeto Ubuntu, cobre vulnerabilidades no FFmpeg e em bibliotecas relacionadas. A versão corrigida para o Ubuntu 26.04 LTS é 7:8.0.1-3ubuntu2+esm3, e o acesso à correção exige Ubuntu Pro/ESM.
Pacotes afetados
O aviso abrange o pacote ffmpeg e as bibliotecas relacionadas:
"package": "ffmpeg","package": "libavcodec-dev","package": "libavcodec-extra","package": "libavcodec-extra62","package": "libavcodec62","package": "libavdevice-dev","package": "libavdevice62","package": "libavfilter-dev","package": "libavfilter-extra","package": "libavfilter-extra11","package": "libavfilter11","package": "libavformat-dev","package": "libavformat-extra","package": "libavformat-extra62","package": "libavformat62","package": "libavutil-dev","package": "libavutil60","package": "libswresample-dev","package": "libswresample6","package": "libswscale-dev","package": "libswscale9",
Cada entrada de pacote repete os mesmos valores {, "release": "26.04 LTS resolute",, "version": "7:8.0.1-3ubuntu2+esm3",, "access": "Ubuntu Pro / ESM (see official notice)" e },.
Vulnerabilidades
O aviso menciona cinco CVEs: "CVE-2026-66036",, "CVE-2026-66038",, "CVE-2026-66039",, "CVE-2026-70628", e "CVE-2026-70632". A menção conjunta não implica que todas afetem igualmente cada versão listada.
Registro do aviso
O registro estruturado inclui ainda os valores "project": "ubuntu",, "event": "security",, "identifier": "USN-8738-1",, "version": null,, "announcementDate": "2026-09-08 17:01:04+00",, "officialSource": "https://ubuntu.com/security/notices/USN-8738-1",, "cves": [, ],, "fixedPackages": [, "editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue." e }.
