• [SECURITY] [DSA 4258-1] ffmpeg security update

    From Moritz Muehlenhoff@1:229/2 to All on Sun Jul 29 23:20:01 2018
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4258-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff
    July 29, 2018 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : ffmpeg
    CVE ID : CVE-2018-14395

    Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the
    execution of arbitrary code if malformed files/streams are processed.

    For the stable distribution (stretch), this problem has been fixed in
    version 7:3.2.12-1~deb9u1.

    We recommend that you upgrade your ffmpeg packages.

    For the detailed security status of ffmpeg please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/ffmpeg

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlteLQIACgkQEMKTtsN8 TjYoyw//VrXFddjzF5iTTMx7kWLwFnrprOrNEmANfoGb0J9cB2EhjDdnvESM0hY9 PzaWu+L31yMFZb0mGw/cVGttUI9ld1eZ/Rkwi685/sC/NXvUcdGnIantGaLNnFQg l4HXzqIzA/QOK7W+8mKbGYFS68bBPwmII5ziEpMt8kAvGSRu0+VixSDFS/e3W7Dk fo+NUcLSUUoVLFvlPe6MmLdP1Tm3zORQiGQBC/mGmtIyvJ6OzQFp9e+xRTOXwcv2 lo4sw+HZ8el9B4fE8TnjTH39mSwR3t0huTc0/eORFzAEqIDqAfec6G467qMY8AEA qfPF/M1D6jt8GGqpSVTFqymQh2rukZTe6MRgvPK9G2jgow84egmSTCAbBXixMXQ1 gFUrgJ/CoTbFn6xsGwQMUKmcJ29rFcACBwRfe4Pj8bDJj/4IYEwD5Gjns+BMAA5p Kbf4gLPlk+/4lF9s/zcyZbPdrMTtpXWjdN5AHseiJIrbCMvMumcoiTdh2O5+5Mhx cNfGupy5cKtPWZIj9dF7jyLZzFIHg9pQIM0jbLuu0Wm4S19zWrYkh5ZRwVF0cbzJ tkbpuyTykBiMKwQF9VOr7703WC95GN9eCdI1kT08Jug1pKRSVBOnsry+iv2NosbS tqSEXHp0/UKZAUjoC8QHTCGJjJ3iO3GvolEM3NxBVqCrwsSrkEk=
    =J6yS
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)