[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index] [SECURITY] [DSA 6353-1] gst-libav1.0 security update To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 6353-1] gst-libav1.0 security update From: Moritz Muehlenhoff <jmm@debian.org> Date: Fri, 19 Jun 2026 18:15:20 +0000 Message-id: <[🔎] ajWHOKtLTx_I4x4j@seger.debian.org> Reply-to: debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6353-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff June 19, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : gst-libav1.0 CVE ID : CVE-2026-52717 It was discovered that incorrect memory management in the ffmpeg plugin for GStreamer could result in heap memory corruption. For the stable distribution (trixie), this problem has been fixed in version 1.26.2-1+deb13u1. We recommend that you upgrade your gst-libav1.0 packages. For the detailed security status of gst-libav1.0 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/gst-libav1.0 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmo1hvAACgkQEMKTtsN8 TjZmxA//ctpLgt+sX5OzXOeRlAOhgZa2+VXxMc7n9n3uQfaZTMzGolxYWp5bHAvv CiHYIkpkpWJyUIv4T5iBqKkhjs2jsS9peBX1blq4N0LODQgU2typNaDORaN65p3L o0kFsfZEHTqBp1Mn1HmcT5j4MaMS3bPt4Njqo/KeCHfmYEiLyeQZMMUfr73vXmLF /uBvMtMllR5leW4aLxxvHP9mkGdpY70f5DkbxC5oybAMnKXfsjowJQ63uQFPvI98 r3ypf8ARcyUWq6M93dyTM1Zhzv9VYDqQghP09cCj+TRJSP27NLiUdXk/DPo9Y2EF zPoSqbHbi6RAqBiCBgWc0URGzkDRT6g6iKfaSqukrjPIvU5jQSiwIR6Ev8OmPBBB SE4mqviaI0zItRJgNPyqtKCwoNl9WVN4WlvEYVSJZmyyvLacWqVo++hY1FTdETrG 5VaBtXqLwY0snS+v1V3eWhFAOgyMxZbZALaiv4eaqpQU+u5bGboaPx4fl2+3jvJp PXRtoWxddOiRoYEsPhFryDx7CaWIJplR8mIh1eX1dkovSdYnfJbE80aLqpWcZpAd XayNLCtYE3aDcou2JOKNxFKH/HzLvlpOnKie7TvRCSnuK2UdI6F/Fc9zTSsAMT4i kLNyfIrhFhDmgAoWfDBNuDiEKIXysx0QnPrjbrSpxwZqaJygeag= =BO/7 -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Moritz Muehlenhoff (on-list) Moritz Muehlenhoff (off-list) Prev by Date: [SECURITY] [DSA 6351-1] chromium security update Next by Date: [SECURITY] [DSA 6354-1] libconfig-inifiles-perl security update Previous by thread: [SECURITY] [DSA 6351-1] chromium security update Next by thread: [SECURITY] [DSA 6354-1] libconfig-inifiles-perl security update Index(es): Date Thread