• [SECURITY] [DSA 5748-1] ffmpeg security update

    From Moritz Muehlenhoff@21:1/5 to All on Wed Aug 14 13:10:01 2024
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-5748-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 14, 2024 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : ffmpeg
    CVE ID : CVE-2024-7055 CVE-2024-7272

    Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the
    execution of arbitrary code if malformed files/streams are processed.

    For the stable distribution (bookworm), these problems have been fixed in version 7:5.1.6-0+deb12u1.

    We recommend that you upgrade your ffmpeg packages.

    For the detailed security status of ffmpeg please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/ffmpeg

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAma8jqUACgkQEMKTtsN8 Tjbh/A//RtTyTph1BfyvmrPoF2knaWzlgQVvLE4mFBHBAdFQb13WHzQmFWlxZYY6 vAzxeBvje+jdpFGkQQS3yoQ/3OwOX9GeWQF8WpVDzQijBg7D4DMn1NK0s84Wya2x L67VGaaBb32TXdIlbExfrQMjFYZo+CGxamVBe49CzkxfiRoBDbDTItqY3dSpfv3c TpJZYBq/hj7HPaOkdOb6xUkAOrDkDyEWdvsHiZy6tt+jpL4jtOD3UZffi9TmYgfb bzS+zhBY54kOeLa2eoLr7d3BiK9j3V0Ee5fmICnk6h4hnUwZnlGCHLQLcgN3YTJp 7YfRJ6OvYgZBwIUlZmQjM6tMT5EljXMZERfRGtATQ2fJws3KHFL5ZK/Tp/vsAJxP KkHiaWxQkQw//AUdT77m7ER13758LrFVI2Bm3HqEhrWwUUHvFa5tvk380zoWz8NR 7hIMjfAGJ6v024dBFAiLVrLOcwZP4K/NxtAr6lUysNQlaVSWknUO65HNBx64KWow NCEleMbiW7VHSAeoKl5cQAe/Vr6CN0rwbEH5TCJUPbzN1xb9lBftMQOR4z1igW3p PCGdW9yZDDNY/cFEtSNI0++qFsg1JIkEr+dcP4H2yxNaEmcrf+N/paP/mD0ltaMs fuHxJa94Wg4q4/RfPhqRiQbgG6LwUHu1W93m8ddv52Qmv9ElgsA=
    =3v1M
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)