Ubuntu Security Notices
USN-7188-1

USN-7188-1: FFmpeg vulnerability

Publication date

8 January 2025

Overview

FFmpeg could be made to crash if it received specially crafted input.

Releases

22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS

Packages

ffmpeg - Tools for transcoding, streaming and playing of multimedia files

Details

It was discovered that FFmpeg incorrectly handled certain input, which
could lead to an integer overflow. An attacker could possibly use this
issue to cause a denial of service by crashing the application.

Update instructions

After a standard system update you need to restart FFmpeg to make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
22.04 jammy	ffmpeg – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libavcodec-extra58 – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libavcodec58 – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libavdevice58 – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libavfilter-extra7 – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libavfilter7 – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libavformat-extra58 – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libavformat58 – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libavutil56 – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libpostproc55 – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libswresample3 – 7:4.4.2-0ubuntu0.22.04.1+esm6
	libswscale5 – 7:4.4.2-0ubuntu0.22.04.1+esm6
20.04 focal	ffmpeg – 7:4.2.7-0ubuntu0.1+esm7
	libavcodec-extra58 – 7:4.2.7-0ubuntu0.1+esm7
	libavcodec58 – 7:4.2.7-0ubuntu0.1+esm7
	libavdevice58 – 7:4.2.7-0ubuntu0.1+esm7
	libavfilter-extra7 – 7:4.2.7-0ubuntu0.1+esm7
	libavfilter7 – 7:4.2.7-0ubuntu0.1+esm7
	libavformat58 – 7:4.2.7-0ubuntu0.1+esm7
	libavresample4 – 7:4.2.7-0ubuntu0.1+esm7
	libavutil56 – 7:4.2.7-0ubuntu0.1+esm7
	libpostproc55 – 7:4.2.7-0ubuntu0.1+esm7
	libswresample3 – 7:4.2.7-0ubuntu0.1+esm7
	libswscale5 – 7:4.2.7-0ubuntu0.1+esm7
18.04 bionic	ffmpeg – 7:3.4.11-0ubuntu0.1+esm7
	libavcodec-extra57 – 7:3.4.11-0ubuntu0.1+esm7
	libavcodec57 – 7:3.4.11-0ubuntu0.1+esm7
	libavdevice57 – 7:3.4.11-0ubuntu0.1+esm7
	libavfilter-extra6 – 7:3.4.11-0ubuntu0.1+esm7
	libavfilter6 – 7:3.4.11-0ubuntu0.1+esm7
	libavformat57 – 7:3.4.11-0ubuntu0.1+esm7
	libavresample3 – 7:3.4.11-0ubuntu0.1+esm7
	libavutil55 – 7:3.4.11-0ubuntu0.1+esm7
	libpostproc54 – 7:3.4.11-0ubuntu0.1+esm7
	libswresample2 – 7:3.4.11-0ubuntu0.1+esm7
	libswscale4 – 7:3.4.11-0ubuntu0.1+esm7
16.04 xenial	ffmpeg – 7:2.8.17-0ubuntu0.1+esm9
	libav-tools – 7:2.8.17-0ubuntu0.1+esm9
	libavcodec-ffmpeg-extra56 – 7:2.8.17-0ubuntu0.1+esm9
	libavcodec-ffmpeg56 – 7:2.8.17-0ubuntu0.1+esm9
	libavdevice-ffmpeg56 – 7:2.8.17-0ubuntu0.1+esm9
	libavfilter-ffmpeg5 – 7:2.8.17-0ubuntu0.1+esm9
	libavformat-ffmpeg56 – 7:2.8.17-0ubuntu0.1+esm9
	libavresample-ffmpeg2 – 7:2.8.17-0ubuntu0.1+esm9
	libavutil-ffmpeg54 – 7:2.8.17-0ubuntu0.1+esm9
	libpostproc-ffmpeg53 – 7:2.8.17-0ubuntu0.1+esm9
	libswresample-ffmpeg1 – 7:2.8.17-0ubuntu0.1+esm9
	libswscale-ffmpeg3 – 7:2.8.17-0ubuntu0.1+esm9

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2024-36617

CVE-2024-36617