libavcodec60 7:6.1.1-3ubuntu5+esm1: libavcodec60 7:6.1.1-3ubuntu5+esm1 for Ubuntu 24.04.5 LTS (noble)

libavcodec60 7:6.1.1-3ubuntu5+esm1, released April 19, 2024, fixes 7 CVEs in libavcodec60. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

8.8

Base score, 0 to 10

Highest EPSS

0.0155

75th percentile

Priority of the 7 CVEs

Patch now 0
                                Urgent 0
                                High 6
                                Routine 1

Fixed package versions

Product	Release	Fixed in
libavcodec60	Ubuntu 24.04.5 LTS (noble)	7:6.1.1-3ubuntu5+esm1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2023-49502	ffmpeg: Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via th...	8.8	0.0155	None reported
High	CVE-2024-31578	ffmpeg-4: Fixed heap use-after-free via the av_hwframe_ctx_init function (bsc#1223070).	7.5	0.0118	None reported
High	CVE-2023-49528	ffmpeg: Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code...	8.0	0.0040	None reported
High	CVE-2023-49501	ffmpeg: Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via th...	8.0	0.0039	None reported
High	CVE-2023-50008	ffmpeg: FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av_malloc function i...	7.8	0.0037	None reported
High	CVE-2024-31582	ffmpeg: FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle functi...	7.8	0.0034	None reported
Routine	CVE-2023-50007	ffmpeg: FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av_samples_set_s...	4.0	0.0035	None reported

Also fixes CVE-2023-49502

SUSE-SU-2025:0862-1
ffmpeg-4 on opensuse-leap 15.6, sles 15.6
ffmpeg 7:6.1.1-3ubuntu5+esm1
ffmpeg on Ubuntu 24.04.5 LTS (noble)
libavcodec-extra 7:6.1.1-3ubuntu5+esm1
libavcodec-extra on Ubuntu 24.04.5 LTS (noble)
libavcodec-extra60 7:6.1.1-3ubuntu5+esm1
libavcodec-extra60 on Ubuntu 24.04.5 LTS (noble)
libavdevice60 7:6.1.1-3ubuntu5+esm1
libavdevice60 on Ubuntu 24.04.5 LTS (noble)
libavfilter-extra 7:6.1.1-3ubuntu5+esm1
libavfilter-extra on Ubuntu 24.04.5 LTS (noble)
libavfilter-extra9 7:6.1.1-3ubuntu5+esm1
libavfilter-extra9 on Ubuntu 24.04.5 LTS (noble)
libavfilter9 7:6.1.1-3ubuntu5+esm1
libavfilter9 on Ubuntu 24.04.5 LTS (noble)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-noble-libavcodec60-7-6.1.1-3ubuntu5-esm1">libavcodec60 7:6.1.1-3ubuntu5+esm1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.