From: [email protected]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package : ffmpeg-debian
Vulnerability : several
Problem type : local(remote)
Debian-specific: no
CVE Id(s) : CVE-2009-4631 CVE-2009-4632 CVE-2009-4633 CVE-2009-4634 CVE-2009-4635 CVE-2009-4636 CVE-2009-4637 CVE-2009-4638 CVE-2009-4640

Several vulnerabilities have been discovered in ffmpeg, a multimedia
player, server and encoder, which also provides a range of multimedia
libraries used in applications like MPlayer:

Various programming errors in container and codec implementations
may lead to denial of service or the execution of arbitrary code
if the user is tricked into opening a malformed media file or stream.

Affected and updated have been the implementations of the following
codecs and container formats:

- - the Vorbis audio codec
- - the Ogg container implementation
- - the FF Video 1 codec
- - the MPEG audio codec
- - the H264 video codec
- - the MOV container implementation
- - the Oggedc container implementation

For the stable distribution (lenny), these problems have been fixed in
version 0.svn20080206-18+lenny1.

For the unstable distribution (sid), these problems have been fixed in
version 4:0.5+svn20090706-5.

We recommend that you upgrade your ffmpeg packages.

Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 5.0 alias lenny
- --------------------------------

Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/f/ffmpeg-debian/ffmpeg-debian_0.svn20080206-18+lenny1.diff.gz
Size/MD5 checksum: 47151 fed9d4a54eeabb8173d8d709a56cf095
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/ffmpeg-debian_0.svn20080206-18+lenny1.dsc
Size/MD5 checksum: 2095 7b95f9547056a2e3476086def011b460

Architecture independent packages:

http://security.debian.org/pool/updates/main/f/ffmpeg-debian/ffmpeg-doc_0.svn20080206-18+lenny1_all.deb
Size/MD5 checksum: 12122858 8a18d72784468ee18742ad46efe87ea1

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libavutil-dev_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 76368 331d6316aaa9ddf160a219b1a334d04a
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libavutil49_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 60340 11e42949f12f2cec51e7fb2f083179b1
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libswscale-dev_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 110932 1fe5fb7d4d26fd30b9b9ed5dfbd12300
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libpostproc51_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 59168 153af9684d71c484fecce4778a6a36ee
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libpostproc-dev_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 60700 6e39c2745e05534987b6839b884af9b1
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libavformat52_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 356280 64568359b94e3faf23927eaaf6654901
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libavdevice52_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 48808 dd58f41ecb4f8c549016b406e309df10
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libavdevice-dev_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 53758 3c215a4b4cd94762745cb13bb8112d40
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libavcodec51_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 2088016 e1c3c0cbcdd178e5a3dd88ad3e4ba537
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/ffmpeg_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 233984 b7c5646a1973c51ea894ca9f098d3dab
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/ffmpeg-dbg_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 3699706 a88fa8d49c0672cfc9def436bf132613
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libavformat-dev_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 546800 4fef24b017a4781c418552fc3994648a
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libswscale0_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 91658 87aede2da75c79231f7eba4759039437
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libavcodec-dev_0.svn20080206-18+lenny1_alpha.deb
Size/MD5 checksum: 2448334 10264d01add22851466437ac2bd89b17

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libavformat-dev_0.svn20080206-18+lenny1_amd64.deb
Size/MD5 checksum: 402922 de07340d2f8bd1bb05b13d969bd99578
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libpostproc51_0.svn20080206-18+lenny1_amd64.deb
Size/MD5 checksum: 51276 1003864ecbd0e7c81ea584ef969013d2
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libpostproc-dev_0.svn20080206-18+lenny1_amd64.deb
Size/MD5 checksum: 51968 fa6fa9eeac06f05e06503c569cb27b29
http://security.debian.org/pool/updates/main/f/ffmpeg-debian/libavutil-dev_0.svn20080206-18+lenny1_amd64.deb
Size/MD5 checksum: 67936 fa1e07989b7d2e5b984113661013dcc1

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)