-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 29 Dec 2023 23:03:02 +0100 Source: libde265 Architecture: source Version: 1.0.11-0+deb11u3 Distribution: bullseye Urgency: high Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 1059275 Changes: libde265 (1.0.11-0+deb11u3) bullseye; urgency=high . * Non-maintainer upload by the LTS Team. (Closes: #1059275) * CVE-2023-49465 heap-buffer-overflow in derive_spatial_luma_vector_prediction() * CVE-2023-49467 heap-buffer-overflow in derive_combined_bipredictive_merging_candidates() * CVE-2023-49468 global buffer overflow in read_coding_unit() Checksums-Sha1: 0c26d4fa618735a921ef71a6f8cbe3f53b7c887f 2417 libde265_1.0.11-0+deb11u3.dsc 107e0bc48b2748adfd535e15186d0f84a6e152fe 845996 libde265_1.0.11.orig.tar.gz da7a64f59992632cd366a6122e1dfcda356ba9fb 15888 libde265_1.0.11-0+deb11u3.debian.tar.xz bbf3c662d20e6985d891ec92259fade77a21a4ae 13399 libde265_1.0.11-0+deb11u3_amd64.buildinfo Checksums-Sha256: 177af83ab7702633fb189e7cb6d3bd57784fb12c7ba1d94f80ee03535fb72e4b 2417 libde265_1.0.11-0+deb11u3.dsc 2f8f12cabbdb15e53532b7c1eb964d4e15d444db1be802505e6ac97a25035bab 845996 libde265_1.0.11.orig.tar.gz cf769aa3b145af3bed5a12912102dcc8442b54b57ab1553b94c38061e6d50f27 15888 libde265_1.0.11-0+deb11u3.debian.tar.xz 62e8aaeb588b4affceddac7c82851bce4e77db4559c123ab05a5cbb82efd70a8 13399 libde265_1.0.11-0+deb11u3_amd64.buildinfo Files: 4ffb4a1ba75cb087a5f90c30ca58e239 2417 libs optional libde265_1.0.11-0+deb11u3.dsc 2b07416559819212aed2fd75f74fd393 845996 libs optional libde265_1.0.11.orig.tar.gz 4f49bf724643314c9de4cf346dddf6a0 15888 libs optional libde265_1.0.11-0+deb11u3.debian.tar.xz e27686a0f397425fcdc466fb841fcc03 13399 libs optional libde265_1.0.11-0+deb11u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmW74v1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRzxCD/0YP4LLD01gKrxLPF5Y2H+LRMEUOHBO slTpFbYMbyjDbmSzZ0dxgzhc9fe2OuioFBFCWrYZ1EgMDPa1kn1B4rMsO0HKe6xA 1gypjUuN0gp+lsjbH4kP0LBUNQ5XXK4xv6olCJEWm+sb7fLlcbLHCYeNmEMr4nit olElw/3QNLZbHkHsFHik0v+jTdJXZ7CWdYDl0ek4dneVfLZhuCv0pZK1Xyxx1kIU PUTFQFC0YACNa+12EBPTzlMnd7B6/kG7ShEPXXSaEAFVGgSnUvy4Ewngz9/1zmje QTQophxDst/Y5+7U3uAK9UNXbiHYD3DOlMO9CPdJN2oa17FjCO0YdhNobuTYAZ8T J7LH6kn3cbFRFyWdLf2v9IAqZ2aHxnDHop+u52/o5StSHvvvVhqfdy0AlJlpUvqK sAJ1W5drKn5CF3d6IfzIoGxwUB20xssaVkcOha5Ti7GZyHMAW/zk/QqoUM1j/nPd XQRFxYH5tyV/fHfLVl+h9TbTO6QT4ZkOHPNAgmaQDdRDZ6uE0XljUAILwpG2BYAg CGGfy3Oe2xqjkg5PEcWJ0Oevs89YV76nLLC07bOo2AH6zKvGIlFjUMwDZ/UDMIYK G8AySiTOCsc9cXxATWM8j3eqYOJYxX/z9SxMbjIaHLPSoYphGFV8btH1NaqACdYr pQTBtwxkXR6SMg== =3a0J -----END PGP SIGNATURE-----