-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 03 Sep 2026 10:13:54 +0200
Source: libde265
Built-For-Profiles: noudeb
Architecture: source
Version: 1.1.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Joachim Bauch <fancycode@debian.org>
Changes:
libde265 (1.1.2-1) unstable; urgency=medium
.
* New upstream version 1.1.2
* Fixes heap use-after-free and double free in multi-threaded (WPP)
decoding. See upstream commits eb34678, 7803c6e and ce8d65c
(GHSA-xp3h-6f5r-8cxp).
* Fixes heap use-after-free after de265_reset().
See upstream commit 07bc500 (GHSA-mm7m-v26f-wf8x).
Checksums-Sha1:
9f069dd4f471217b1799cb76cfdaa7e521741d57 2217 libde265_1.1.2-1.dsc
5795fe8865bf58133a25821dea131cfae0cc57fa 319593 libde265_1.1.2.orig.tar.gz
1c81a558d3823c7e011c4db3a68ffb29c720ae72 136432 libde265_1.1.2-1.debian.tar.xz
0a6524dec9e8f58dd16768716938724fb2056f91 17313 libde265_1.1.2-1_source.buildinfo
Checksums-Sha256:
0c9ac3ff39debf968939b9a44cf8e9e4116cdeeb20d16da8118ad1931e1ad529 2217 libde265_1.1.2-1.dsc
eaacd1943ab0c452c19f6136a36ca227e6b761b39a81eaca8454d48c147e1f67 319593 libde265_1.1.2.orig.tar.gz
054206d548ce172cba0ff114434f703bd949d42c9ce3d10ca6149af9b31aa65a 136432 libde265_1.1.2-1.debian.tar.xz
2482f0649d388666793add398954b96553beb544edc46196ac8d206e6d86ce22 17313 libde265_1.1.2-1_source.buildinfo
Files:
2aca4d9f35d9585d1d61b74ee7e4ac3a 2217 libs optional libde265_1.1.2-1.dsc
1d667b04a2b95e55ddd1bafe8ef12ed6 319593 libs optional libde265_1.1.2.orig.tar.gz
bd844c6c9d90be5ca7024cbc13409863 136432 libs optional libde265_1.1.2-1.debian.tar.xz
901104d2b973ed84aeb0357b9b354575 17313 libs optional libde265_1.1.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=5c6d
-----END PGP SIGNATURE-----
