Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 11 DLA-4241-1 critical: ffmpeg input parsing issues

debian lts
Calendar Grey July 14, 2025
Dist Debian Esm H88
Critical updates for Debian LTS users address multiple vulnerabilities in FFmpeg; secure your system with the latest patches.
Multiple vulnerabilities have been fixed in the multimedia framework FFmpeg
Topics%20covered

Topics Covered

security advisory critical debian multimedia ffmpeg input parsing

Summary

CVE-2023-6601

Triggering arbitrary demuxers via base64 data URIs

CVE-2023-6602

Improper parsing of input files in HLS playlists

CVE-2023-6604

Demuxing of arbitrary data as XBIN-formatted data

CVE-2023-6605

Arbitrary HTTP GET requests via crafted DASH playlist

For Debian 11 bullseye, these problems have been fixed in version
7:4.3.9-0+deb11u1.

We recommend that you upgrade your ffmpeg packages.

For the detailed security status of ffmpeg please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/ffmpeg

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: ffmpeg
Version: 7:4.3.9-0+deb11u1
CVE ID: CVE-2023-6601 CVE-2023-6602 CVE-2023-6604 CVE-2023-6605

Topics%20covered

Topics Covered

security advisory critical debian multimedia ffmpeg input parsing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here