-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 23 Apr 2026 12:45:20 +0200 Source: libde265 Architecture: source Version: 1.0.11-0+deb11u4 Distribution: bullseye-security Urgency: high Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org> Changed-By: Andreas Henriksson <andreas@fatal.se> Closes: 1131468 1131469 Changes: libde265 (1.0.11-0+deb11u4) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2023-51792: check validity of conformance window parameters * CVE-2026-33164 + CVE-2026-33165: fix reallocation of metadata array... ... when ctb size changes (Closes: #1131468, #1131469) Checksums-Sha1: 04bfbb7853f45647e08eed5125940ba7481d4ddc 2258 libde265_1.0.11-0+deb11u4.dsc 107e0bc48b2748adfd535e15186d0f84a6e152fe 845996 libde265_1.0.11.orig.tar.gz 0d256d235b4529776078f54a38479b039cfce068 16656 libde265_1.0.11-0+deb11u4.debian.tar.xz efdef80141c38e4d711c2352671835b915c59e34 7086 libde265_1.0.11-0+deb11u4_source.buildinfo Checksums-Sha256: 1b5744cb0062b4a5698227c3f5f4af1047be09ef91224cee2221c67f75806289 2258 libde265_1.0.11-0+deb11u4.dsc 2f8f12cabbdb15e53532b7c1eb964d4e15d444db1be802505e6ac97a25035bab 845996 libde265_1.0.11.orig.tar.gz 6e848a9b0827ab6dc48d289f0deeae9015f8eb39fefe430485ceb386987e7572 16656 libde265_1.0.11-0+deb11u4.debian.tar.xz e77d213cb4db7f45c7fe19ab97eb663ff8ca4870dd2f57c1a37a4f4e69bc1fe5 7086 libde265_1.0.11-0+deb11u4_source.buildinfo Files: 99c3497ece126250cc6cf9f1b0ef95a9 2258 libs optional libde265_1.0.11-0+deb11u4.dsc 2b07416559819212aed2fd75f74fd393 845996 libs optional libde265_1.0.11.orig.tar.gz fca6b41c6dc0e26c175f94e197049f73 16656 libs optional libde265_1.0.11-0+deb11u4.debian.tar.xz 0c1feb39219c2379366dd174fc7fa8e3 7086 libs optional libde265_1.0.11-0+deb11u4_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+uHltkZSvnmOJ4zCC8R9xk0TUwYFAmnuZy0ACgkQC8R9xk0T UwYVjg/8CaakEt0rJWhUtWdpKkGwuxa8nbWa1K0bIl58pPrPIYGcW5Z51RxsFBF9 URTu6kio94B+4L/bK+xTxkofErIfSFygYG1U30sa9TX+QQQVXi26D08BwzfcJZ+o Hv+fDOqmrCBA80/aBkY4IxVZksQVdzAWsfsE1pu24YizuUFbQtwWG8tjxNU+kmY8 J/MQ0N1qeQo0EBTZrgZTt0EVV9hHW7eOne/YPfHVBmn2jQg6MCqoSHfAl4VycH4q GUpe8OmcT8lFfRgrAMP2NlcLgZReMulXo//7ILhfME7KNyucjZlRRRApSWo6NMTI kKfxp96N6q0KayS5L1XZeUfbePwYuB+lCYVySXcLBz9Ydc6yIDqZXG83MwHPrqyG J/g9dzu+ZPkiCXG5aCZDlGKKJNGQfgtJGpKJ4Iihrc3TFaFHJbr3ElzWqUF34CaN EK6lUitTKgQWv9NpNC0ykygtnvgksdYHPIai4cFuiAc6UBt9YkgKPowAXHjLY4vu hOovPS5E9oGhlD+VhVSBZFQXV0sA3DnaLI1rPBQe9rRCh0OCbKElZ/IsNQOfYzn7 Tt7XWLPz5gnXxV/uurLwYgk5SY92pGYr6XmYqmYIvPzkeY8lIiLhb3wA+yLyXbVT ZCl64/jrZ4m5W/kjXEdu+NvUpxb2JX3DyNHi1VBVNQPMcEnzymc= =w35f -----END PGP SIGNATURE-----
