-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 20 Sep 2026 13:47:08 +0200 Source: libde265 Architecture: source Version: 1.0.11-1+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org> Changed-By: Tobias Frost <tobi@debian.org> Closes: 1074416 1131468 1131469 1140431 Changes: libde265 (1.0.11-1+deb12u3) bookworm-security; urgency=high . * Non-maintainer upload by the LTS Team. * Backport fixes for: - CVE-2023-51792 - Buffer-Overflow - CVE-2026-33164 - DoS (crash) (Closes: #1131469) - CVE-2026-33165 - heap out-of-bounds write (Closes: #1131468) - CVE-2024-38949 - Heap Buffer Overflow (Closes: #1074416) - CVE-2024-38950 - Heap Buffer Overflow (same bug/patch as 2024-38949) - CVE-2024-45382 - Heap Buffer Read Overflow - CVE-2026-45383 - Heap Buffer Read Overflow - CVE-2026-49295 - Out-of-bounds write (Closes: #1140431) - CVE-2026-49337 - Unbounded memory accumulation (also #1140431) - CVE-2026-49346 - Heap buffer overflow (also #1140431) - CVE-2026-54240 - Heap Buffer Overflow - CVE-2026-54241 - Heap Buffer Overflow * Backport security fixes without CVE assigned yet: - GHSA-xp3h-6f5r-8cxp - Use after free / double free in concurrent execution enviornments (race conditions) - GHSA-mm7m-v26f-wf8x - heap-use-after-free Checksums-Sha1: 4e399fce21589138e27e48b30f7f096f0e509e5c 2221 libde265_1.0.11-1+deb12u3.dsc 107e0bc48b2748adfd535e15186d0f84a6e152fe 845996 libde265_1.0.11.orig.tar.gz 7c000fdb548133c97487f7f6f82188aa0b67a028 28308 libde265_1.0.11-1+deb12u3.debian.tar.xz ebd4c822d562256b9b338d608136bac0a5813657 6884 libde265_1.0.11-1+deb12u3_source.buildinfo Checksums-Sha256: 16f23e3613dae4a6d5a25be5a884448d61963628118d0508111052b715a48544 2221 libde265_1.0.11-1+deb12u3.dsc 2f8f12cabbdb15e53532b7c1eb964d4e15d444db1be802505e6ac97a25035bab 845996 libde265_1.0.11.orig.tar.gz ccdd55e4bf2aa04155de5d00fbc677e4cf620d961fd4584a43a37f13993d0f94 28308 libde265_1.0.11-1+deb12u3.debian.tar.xz 63afa70fe398f0376f646633a6d33f43f9101289cba1c67d0dc37694733b1e42 6884 libde265_1.0.11-1+deb12u3_source.buildinfo Files: d65c16ff6cb0d4d784a1de7d59e36fcd 2221 libs optional libde265_1.0.11-1+deb12u3.dsc 2b07416559819212aed2fd75f74fd393 845996 libs optional libde265_1.0.11.orig.tar.gz cf1b5784c5a1b7ec3f4936c6fca4c260 28308 libs optional libde265_1.0.11-1+deb12u3.debian.tar.xz 2577e55a15f05cf74316a9e748058e6f 6884 libs optional libde265_1.0.11-1+deb12u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmqvycQACgkQkWT6HRe9 XTaMXQ/9GP8NUHKlfjZL9XeiJZLwRMGT2fdTES1Lew186S/rOxB7zwRkMcZobTn3 LroV/UmKsgxUZoBWmwZYXndK/pHGtsnQ/beMB1T+AOZbHObGwxhNA182hjtUWHzS 8cRo9zbk/PdGK2N5GsKTite/lZJ3iLKZSBRQ09p2SNO9eNq5V5JiK3boRcytXSW8 4KBdDlWuccBD+bBoG7mjAUwTWMa3oJl26U+pQ5+is/xibN5Xt6EbobM3YaxraLCr lFEE5//U/Ph9h0+8PQkdsSpb+vv2+oPEhzHd3GxfAkG2jLikQhPGkxfc6m6D71bN FHY+KylLUEnPUDLPh54JHEHgjpbc7qKwahvAaXwZQdxAMamNSsB8AFqmIJbFA/zK RSWlkyCgt1bL0EBtgZurS2L0W5Vz/maitrf2DfC0QglPyA8IylXiFUWXJ1c+k1da jHTNrWu/xZNctFmtAdHIc5/HtCjP0UeA0JFtBWnO0iO10oLqds2UIbSpSEig/w58 mvenaQG+XPSGn6tJj/aD3uMBdCh4vyMbrmE8UL1m7wXfm2Ut30DGQoM/1ySAFwjd Tr2EldDfFnS9ygK7Ucrtw4NTNV/65rnukulmyNZM6FZkgRRA72ddaJKg1qSlInbu DWMqoGFVGtqC7CNZdPz3fPFac2rqlK8xcQ/IR/OHwnEbDw7l51k= =HgLt -----END PGP SIGNATURE-----
