[DSA 6413-1] libde265 security update
Aron Xu <[email protected]>
| Newsgroups | gmane.linux.debian.user.security.announce |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6413-1 [email protected] https://www.debian.org/security/ Aron Xu August 06, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libde265 CVE ID : CVE-2024-38949 CVE-2024-38950 CVE-2025-61147 CVE-2026-45382 CVE-2026-45383 CVE-2026-49295 CVE-2026-49337 CVE-2026-49346 CVE-2026-54240 CVE-2026-54241 Debian Bug : 1074416 1129257 1140431 Multiple security issues were discovered in libde265, an open source implementation of the H.265/HEVC video codec, which may result in denial of service, memory exhaustion or potentially the execution of arbitrary code if a malformed media file is processed. For the stable distribution (trixie), these problems have been fixed in version 1.0.15-1+deb13u1. We recommend that you upgrade your libde265 packages. For the detailed security status of libde265 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libde265 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: [email protected] -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmp0U8IACgkQ+GQ1dHE8 m65zywf7BBmW3sqj5R8zOrgFQiqOxicDJtUOi+Ww9g+QudhTA7GQbdsTnlA9YaMT nWivEagGj8SPMgPPzjlpwpDFL3Cz7peWQFjN1Tahybb6xTUIPfDL4FiYSi//d/fX CvntUli+o5HIKCAt0ov7jiRpKuOIcULG2d2YZUWZZH0BGMRzGbZJo9lMvU1ar5R+ XX2D9IYUuWai5hkXgNqreo7A8rivuC+pshtchoX/hLGsS/VhbppW2gRqBDworUus XD2OY+kUPmpnPcWSLNdtfDGJinIwR7xyewREm1+bg/LItaI6Dp/BHHDdb7Wuk6Xd u4S+/4trT23OzNUrIfYRO5GnefsxQg== =Zbh3 -----END PGP SIGNATURE-----