DSA-5552: -1 ffmpeg -- security update
ffmpeg - security update
Other sources
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:5.1.9-0+deb12u1
Event History
Frequently Asked Questions
What is DSA-5552-1?
DSA-5552-1 is a security update for the FFmpeg multimedia framework.
What are the risks associated with DSA-5552-1?
The risks associated with DSA-5552-1 include denial of service and potential execution of arbitrary code if malformed files/streams are processed.
Which software is affected by DSA-5552-1?
The FFmpeg multimedia framework from the Debian source 'debian/ffmpeg' is affected by DSA-5552-1.
Are there any known vulnerabilities associated with DSA-5552-1?
Yes, there are known vulnerabilities associated with DSA-5552-1. One of them is CVE-2022-4907.
How can I find more information about DSA-5552-1?
You can find more information about DSA-5552-1 on the Debian Security Tracker at https://security-tracker.debian.org/tracker/CVE-2022-4907, and on the official Debian website at https://www.debian.org/security/2023/dsa-5552.