概述

Ubuntu 发布安全公告 USN-8716-2,修复 FFmpeg 中的多个漏洞。公告面向 Ubuntu 26.04 LTS(resolute),共列出 15 个 CVE。根据官方公告,修复需要通过 Ubuntu Pro/ESM 获取。

公告信息

  • 公告标识:"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
  • 发行版:"officialSource": "https://ubuntu.com/security/notices/USN-8716-2",
  • 版本:"version": null,
  • 发布时间:"identifier": "USN-8716-2",
  • 公告链接:"project": "ubuntu",
  • 获取方式:"event": "security",
  • 项目:],
  • 事件类型:"fixedPackages": [
  • 软件包记录字段:{、"release": "26.04 LTS resolute",、"version": "7:8.0.1-3ubuntu2+esm4",、"access": "Ubuntu Pro / ESM (see official notice)"、}

涉及的软件包

  • "announcementDate": "2026-09-09 17:27:15+00",
  • "cves": [
  • "package": "ffmpeg",
  • "package": "libavcodec-extra62",
  • "package": "libavcodec62",
  • "package": "libavfilter11",
  • "package": "libavformat-extra62",
  • "package": "libavformat62",

公告为这些软件包给出的修复版本为 },。

涉及的 CVE

  • "CVE-2026-64830",
  • "CVE-2026-64831",
  • "CVE-2026-64832",
  • "CVE-2026-64833",
  • "CVE-2026-64834",
  • "CVE-2026-64835",
  • "CVE-2026-65703",
  • "CVE-2026-65704",
  • "CVE-2026-65705",
  • "CVE-2026-65706",
  • "CVE-2026-75141",
  • "CVE-2026-75142",
  • "CVE-2026-75143",
  • "CVE-2026-75144",
  • "CVE-2026-75146"

公告列出的 CVE 并不表示每个软件包都受每个漏洞影响。