-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6502-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : mkvtoolnix CVE ID : CVE-2026-90783 A buffer overflow was found in the ODML parser of MKVToolNix, a set of command-line tools (and GUI) to work with Matroska files, which could potentially result in the execution of arbitrary code when processing malformed .mkv files. For the stable distribution (trixie), this problem has been fixed in version 92.0-1+deb13u1. We recommend that you upgrade your mkvtoolnix packages. For the detailed security status of mkvtoolnix please refer to its security tracker page at: https://security-tracker.debian.org/tracker/mkvtoolnix Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: [email protected] -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmqq4gQACgkQEMKTtsN8 Tjb5yg//V0Mie0AinunbknK6tPzWJ23hnbWhwdM+192QTkIfjjwV5cGRTu+PnV+R +OOOBimUmQta7Fb/NPv45IGQnxnl34PeX2Gp9joNozZsORzP9sce8RnxneXMJYiu bBYsO5sFOOyIPyhQfe6IIq+mvYtgpQoP9zzwcsyPTED1kUWre/5V5R07ZmsRVXuh Id6h++qQTppcjmb0V9jEQExM/0KkJh3xpvxGshld6mNOeFRfNBXQFtUOYvaK3XWs YCb0JDgJYKj+OYKCb9iZcECzQZjykOMBjEFdiJumijb4ktER4G+GnqVSRu4+68FJ Dq+IJumGE6n/clJjPOpr5zRKvl5KVC14jcBPZWqpTlNER7t9y4eUAOAuuuTD5mSm b1Lc8fLDIKUrkAgb4qzpWHFt2UQW1qOYJyfT63QfEeXErS9A6+lwit1aqjo1bBNm rPHmu1vaEc2FVArqhN9Pi5qosizKD9JdZujVVJ7iexZSyC9Z1MNP/th4WNSGg5af bI9UahJsNgqhctOFkg1xv4eOsJPm7/RUTpnv955T530AbImHm46HuChxHpTnWo8K ot1wbKCDCkbU3l5PgPkjHMBPAJLgR7PHnNs2YTnfyqgUbWUYu3yyIOJmhR1gaaTU pjlibmnuqt6Omgl5T0dZ4SaCV3qgpb27tQLKyPmUyKTTrnGnAbk= =cCfL -----END PGP SIGNATURE-----
