Ubuntu alert USN-7871-1 (ffmpeg) [LWN.net]

admin 






From:
 
[email protected]




To:
 
[email protected]




Subject:
 
[USN-7871-1] FFmpeg vulnerability




Date:
 
Mon, 17 Nov 2025 21:57:15 +0000




Message-ID:
 






==========================================================================

Ubuntu Security Notice USN-7871-1

November 16, 2025


ffmpeg vulnerability

==========================================================================


A security issue affects these releases of Ubuntu and its derivatives:


– Ubuntu 25.10

– Ubuntu 25.04


Summary:


FFmpeg could be made to crash if it opened a specially crafted

file.


Software Description:

– ffmpeg: Tools for transcoding, streaming and playing of multimedia files


Details:


It was discovered that FFmpeg incorrectly handled memory allocation in the

ALS audio decoder. If a user was tricked into loading a crafted media file,

a remote attacker could possibly use this issue to make FFmpeg crash,

resulting in a denial of service.


Update instructions:


The problem can be corrected by updating your system to the following

package versions:


Ubuntu 25.10

  ffmpeg                          7:7.1.1-1ubuntu4.1

  libavcodec61                    7:7.1.1-1ubuntu4.1

  libavformat61                   7:7.1.1-1ubuntu4.1


Ubuntu 25.04

  ffmpeg                          7:7.1.1-1ubuntu1.3

  libavcodec61                    7:7.1.1-1ubuntu1.3

  libavformat61                   7:7.1.1-1ubuntu1.3


In general, a standard system update will make all the necessary changes.


References:

  ubuntu.com/security/notices/USN-7871-1

  CVE-2025-7700


Package Information:

  launchpad.net/ubuntu/+source/ffmpeg/7:7.1.1-1ubun…

  launchpad.net/ubuntu/+source/ffmpeg/7:7.1.1-1ubun…





Attachment: signature.asc (type=application/pgp-signature)


—–BEGIN PGP SIGNATURE—–


iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmkbmLIACgkQcpJm3tlz

hgFSThAAlO+1SF/neSVwIccobNAFE/puVQmA5u/HS6KHxiVDJ3t9YMWaK7P4yE+y

m+/RizLtK6/eZbVCQ6Ei1HWO0uJqcyoTIF8lVwXvABy2kT4yXVzY2tiMQOcc5oFG

AL3I0NSNQ21wIb3Eh8Uclny/HBl7/CTI2TVQfM3ZSLh2b+56Ya6AJB+6a5N4YzU2

h1CKqIMR458BT7yVwKE7a7uUpDU6nYkDN+uGvhvsnqJZUHgS294OCU8kbIbwtk+W

dH6vM3U/EE9wzUCL9S/E57c9j9atVXrG490OEwDOHayF+3EGPyDu3dtFEhnUvGqu

leqLXRVFJmLfwc80eJZODJJ8aJlEi4r1eP5LVfC7pbgk/OTsVNzdgOhEDtIVPYNZ

XTdJByPHHRAb5GO8bYO/xS4HEPa3DiKTLfXkqJy7Wq4FOLzLLBxIMQRXszqCN9v+

YUWQhXW8hWDuJXgrz6TP+n1wQKwWrY7imZc38IWt7oAHclgcmWlGnqdRT2IJ+nvo

9An7DjTy9tgeXu3OEHPsEfsiiJdabDsmW+fwE1MGh9JiKTsnbTrG+n4K34GNJJ1V

IJL4F3Cu4bL87BziI/bYKip6RC5EamOHUpZXPnKkTlN+vVHAKCkYGEWsu1zJnpoG

6uNcahb0c47AVHV9dZ1EbhT1KlFyLsB6f5jnjdq1GZoGqYiJrpk=

=+mrt

—–END PGP SIGNATURE—–



            


Read more here: Source link