-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 10:03:02 +0200 Source: mkvtoolnix Architecture: source Version: 74.0.0-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Christian Marillat <marillat@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: mkvtoolnix (74.0.0-1+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2026-90783 heap buffer overflow in bundled avilib Checksums-Sha1: 382ff39f4476abb20169fa0e39b1c14ee65cc583 2463 mkvtoolnix_74.0.0-1+deb12u1.dsc db043a37cfcc8cba6b9b1d5eb3dcc63b53926540 11001540 mkvtoolnix_74.0.0.orig.tar.xz 26691cd89c923160a9ade2c2008a37d53c7f9e7d 12148 mkvtoolnix_74.0.0-1+deb12u1.debian.tar.xz ca82fc7d369e1468818cb91e13af6b9ef4479390 12405 mkvtoolnix_74.0.0-1+deb12u1_source.buildinfo Checksums-Sha256: 6467bf8875945a4c8638971a0f841dc66d24f2ec46178652992ec25bb0d79c88 2463 mkvtoolnix_74.0.0-1+deb12u1.dsc b7dc8be6cb9170030de06b983f256ff3cb21efa3209f0efe8e079656fa3d5643 11001540 mkvtoolnix_74.0.0.orig.tar.xz 4cc645897f8996899b4927723e419a6638891f87425cfc6dd24eadcfbecc75c9 12148 mkvtoolnix_74.0.0-1+deb12u1.debian.tar.xz c57af05dcb4e02c218b4010cf05c08524a06d7b900dd96e5c808db810fde8e0b 12405 mkvtoolnix_74.0.0-1+deb12u1_source.buildinfo Files: d9f03784be717eaf460605c784a929d1 2463 graphics optional mkvtoolnix_74.0.0-1+deb12u1.dsc 84ce134a3531d6030c851642df9077a8 11001540 graphics optional mkvtoolnix_74.0.0.orig.tar.xz 8389fffa75ef564f8efe042c892d51f0 12148 graphics optional mkvtoolnix_74.0.0-1+deb12u1.debian.tar.xz ecebe69b5dd289650b75262055119cb4 12405 graphics optional mkvtoolnix_74.0.0-1+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmq9P/VfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR5TTEACeAn5X8F4SThyfMG0mAktBIlhJSHkU 4ZTK8IVITkzGzTpvTY0mtRQ0sJjFADDhHrjD36tahkr7qpU15GY71uvrpOyaNx1L oOwSZ4ApxfZzgupltVDiPCMvkitfzvZMojmMsvWLwmDh9+1Mjs9t4CQkKjq5nNWQ uNvdYSZhtrJxde+qq0UZdjEdU7dBwmUr02afSSgt9faf7dxth0VsGdKJ4SeuLltS ESYWMfUcRce6v6Xk0t+PbhmUOHZiXj+9Dq200yMNaOLfzJR553IxdaQTlQ8CCtcl jZD9boqjR+HcRb4x+vhDrFZkyLyAbsuH8gv71VV/xysSho6wMIgnfbxzIRgIEIZj shTmVWCODU3h2MqMal6Dv2eTBXVmLW4yVAI900814qVC1/QHFtm3mzaGHGr6KFMJ nahEPVK+vZGP7OcxrvYRbLYMybDz3xc369tvYxXJkzA2ikfLuWoRVsxeKfak5L/A ya5hy8sY6J4VSY/dLgZ0i8zhyCvVf5xo0QaQdPWtf0tts8Yqsl4A8HGwmEiK8Dtx PKKFj/lvbP0IBHs15HHvbOAcOtqzNBnL9eF5inW6f0v2nXn0jV4n3CnGIHayVSL+ CshVV5rnWFZ9UbkzWd9wDw7LC2E3JsEa0wedme+LeF3BToUC1z96gtK7B+acuNfm YvICWcl4JqgeoA== =mu30 -----END PGP SIGNATURE-----