USN-8716-1：FFmpeg 漏洞
Ubuntu 于 2026-09-03 发布安全公告 USN-8716-1，涉及 FFmpeg 软件包中的多个漏洞，共修复 14 个 CVE。修复版本通过 Ubuntu Pro/ESM 提供。
涉及的 CVE
CVE-2026-64830、CVE-2026-64832、CVE-2026-64833、CVE-2026-64834、CVE-2026-64835、CVE-2026-65703、CVE-2026-65704、CVE-2026-65705、CVE-2026-65706、CVE-2026-75141、CVE-2026-75142、CVE-2026-75143、CVE-2026-75144、CVE-2026-75146。
修复版本
公告按发行版列出了以下软件包与版本，均通过 Ubuntu Pro/ESM 提供：
| 发行版 | 软件包 | 版本 |
|---|---|---|
| 24.04 LTS noble | ffmpeg、libavcodec-extra60、libavcodec60、libavfilter9、libavformat-extra60、libavformat60 | 7:6.1.1-3ubuntu5+esm13 |
| 22.04 LTS jammy | ffmpeg、libavcodec-extra58、libavcodec58、libavfilter7、libavformat-extra58、libavformat58 | 7:4.4.2-0ubuntu0.22.04.1+esm15 |
| 20.04 LTS focal | ffmpeg、libavcodec-extra58、libavcodec58、libavfilter7、libavformat58 | 7:4.2.7-0ubuntu0.1+esm16 |
| 18.04 LTS bionic | ffmpeg、libavcodec-extra57、libavcodec57、libavfilter6、libavformat57 | 7:3.4.11-0ubuntu0.1+esm15 |
| 16.04 LTS xenial | ffmpeg、libavcodec-ffmpeg-extra56、libavcodec-ffmpeg56、libavfilter-ffmpeg5、libavformat-ffmpeg56 | 7:2.8.17-0ubuntu0.1+esm17 |
公告未列出受影响的版本范围。
公告字段
{
"project": "ubuntu",
"event": "security",
"identifier": "USN-8716-1",
"version": null,
"announcementDate": "2026-09-03 11:06:14+00",
"officialSource": "https://ubuntu.com/security/notices/USN-8716-1",
"cves": [
"CVE-2026-64830",
"CVE-2026-64832",
"CVE-2026-64833",
"CVE-2026-64834",
"CVE-2026-64835",
"CVE-2026-65703",
"CVE-2026-65704",
"CVE-2026-65705",
"CVE-2026-65706",
"CVE-2026-75141",
"CVE-2026-75142",
"CVE-2026-75143",
"CVE-2026-75144",
"CVE-2026-75146"
],
"fixedPackages": [
"release": "24.04 LTS noble",
"package": "ffmpeg",
"version": "7:6.1.1-3ubuntu5+esm13",
"access": "Ubuntu Pro / ESM (see official notice)"
},
"package": "libavcodec-extra60",
"package": "libavcodec60",
"package": "libavfilter9",
"package": "libavformat-extra60",
"package": "libavformat60",
"release": "22.04 LTS jammy",
"version": "7:4.4.2-0ubuntu0.22.04.1+esm15",
"package": "libavcodec-extra58",
"package": "libavcodec58",
"package": "libavfilter7",
"package": "libavformat-extra58",
"package": "libavformat58",
"release": "20.04 LTS focal",
"version": "7:4.2.7-0ubuntu0.1+esm16",
"release": "18.04 LTS bionic",
"version": "7:3.4.11-0ubuntu0.1+esm15",
"package": "libavcodec-extra57",
"package": "libavcodec57",
"package": "libavfilter6",
"package": "libavformat57",
"release": "16.04 LTS xenial",
"version": "7:2.8.17-0ubuntu0.1+esm17",
"package": "libavcodec-ffmpeg-extra56",
"package": "libavcodec-ffmpeg56",
"package": "libavfilter-ffmpeg5",
"package": "libavformat-ffmpeg56",
}
"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
