Zum Inhalt springen.
Sympa Menü

it-securitynotifies - [IT-SecNots] [SECURITY] [DSA 5124-1] ffmpeg security update

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] [SECURITY] [DSA 5124-1] ffmpeg security update


Chronologisch Thread 
  • From: Moritz Muehlenhoff <jmm AT debian.org>
  • To: debian-security-announce AT lists.debian.org
  • Subject: [IT-SecNots] [SECURITY] [DSA 5124-1] ffmpeg security update
  • Date: Mon, 25 Apr 2022 18:25:13 +0000
  • List-archive: https://lists.debian.org/msgid-search/20220425182513.GA4486 AT seger.debian.org
  • List-id: <debian-security-announce.lists.debian.org>
  • List-url: <http://lists.debian.org/debian-security-announce/>
  • Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From: Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=VSPSfVf7incNKoQ/BkzVHS3MGoCfxBVSlmEFu1vkJb4=; b=fy 3G1CkTajFM6jWe3I3BPARKACIv/nI9bUg250ijKhqPq3exhyPH8BrePO4VKnFkFHKpYvdvB3AznTs uZYo98SRxtE//pSrXm1Sq0wn1bIPX4HVpY0O01SLeooF+REf4IWFWhAAmeR/VMHDV+OOgODNXgF2y ndfzlui6bca/tubPb7JoBvbVieCsOZGnZgMWhZAv0cc4COJYC1sBRj0Vw7lIs7gRoE7bkNqrBmhBy B/U9r9uKWwFcwYzhs9aa0WW3Asjqgaw93Ls9Q8E24G6Vspitvnyn/5JTGzygZmE+cugFA+qGXxw6h 4BHTEqzcjtap1nXmkGoTw0j60sKA/ihw==;
  • Old-return-path: <jmm AT seger.debian.org>
  • Priority: urgent
  • Resent-date: Mon, 25 Apr 2022 18:25:35 +0000 (UTC)
  • Resent-from: debian-security-announce AT lists.debian.org
  • Resent-message-id: <0q6qBNkSbYB.A.iOE.feuZiB@bendel>
  • Resent-sender: debian-security-announce-request AT lists.debian.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5124-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
April 25, 2022 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : ffmpeg

Several vulnerabilities have been discovered in the FFmpeg multimedia
framework, which could result in denial of service or potentially the
execution of arbitrary code if malformed files/streams are processed.

For the stable distribution (bullseye), this problem has been fixed in
version 7:4.3.4-0+deb11u1.

We recommend that you upgrade your ffmpeg packages.

For the detailed security status of ffmpeg please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ffmpeg

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=Zplb
-----END PGP SIGNATURE-----



  • [IT-SecNots] [SECURITY] [DSA 5124-1] ffmpeg security update, Moritz Muehlenhoff, 25.04.2022

Archiv bereitgestellt durch MHonArc 2.6.24.

Seitenanfang