[DSA 6007-1] ffmpeg security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6007-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
September 21, 2025                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : ffmpeg
CVE ID         : CVE-2025-1594 CVE-2025-7700 CVE-2025-10256

Several vulnerabilities have been discovered in the FFmpeg multimedia
framework, which could result in denial of service or potentially the
execution of arbitrary code if malformed files/streams are processed.

For the stable distribution (trixie), these problems have been fixed in
version 7:7.1.2-0+deb13u1.

We recommend that you upgrade your ffmpeg packages.

For the detailed security status of ffmpeg please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ffmpeg

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=F4UU
-----END PGP SIGNATURE-----