==========================================================================
Ubuntu Security Notice USN-7890-1
November 26, 2025

ffmpeg vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

FFmpeg could be made to crash if it opened a specially crafted file.

Software Description:
- ffmpeg: Tools for transcoding, streaming and playing of multimedia files

Details:

It was discovered that FFmpeg did not properly handle the parsing of
certain malformed HLS playlists. If a user were tricked into opening a
specially crafted HLS playlist, an attacker could possibly use this issue
to cause FFmpeg to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  ffmpeg                          7:2.8.17-0ubuntu0.1+esm13
                                  Available with Ubuntu Pro
  libavcodec-ffmpeg-extra56       7:2.8.17-0ubuntu0.1+esm13
                                  Available with Ubuntu Pro
  libavcodec-ffmpeg56             7:2.8.17-0ubuntu0.1+esm13
                                  Available with Ubuntu Pro
  libavdevice-ffmpeg56            7:2.8.17-0ubuntu0.1+esm13
                                  Available with Ubuntu Pro
  libavfilter-ffmpeg5             7:2.8.17-0ubuntu0.1+esm13
                                  Available with Ubuntu Pro
  libavformat-ffmpeg56            7:2.8.17-0ubuntu0.1+esm13
                                  Available with Ubuntu Pro
  libavutil-ffmpeg54              7:2.8.17-0ubuntu0.1+esm13
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7890-1
  CVE-2023-6603