[IT-SecNots] [SECURITY] [DSA 5748-1] ffmpeg security update

[Moritz Muehlenhoff <jmm AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5748-1                   security AT debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
August 14, 2024                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : ffmpeg
CVE ID         : CVE-2024-7055 CVE-2024-7272

Several vulnerabilities have been discovered in the FFmpeg multimedia
framework, which could result in denial of service or potentially the
execution of arbitrary code if malformed files/streams are processed.

For the stable distribution (bookworm), these problems have been fixed in
version 7:5.1.6-0+deb12u1.

We recommend that you upgrade your ffmpeg packages.

For the detailed security status of ffmpeg please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ffmpeg

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=3v1M
-----END PGP SIGNATURE-----