[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index] [SECURITY] [DSA 6413-1] libde265 security update To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 6413-1] libde265 security update From: Aron Xu <aron@debian.org> Date: Thu, 06 Aug 2026 09:38:17 +0000 Message-id: <[🔎] E1wruYL-00000000fI5-2FcK@seger.debian.org> Reply-to: debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6413-1 security@debian.org https://www.debian.org/security/ Aron Xu August 06, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libde265 CVE ID : CVE-2024-38949 CVE-2024-38950 CVE-2025-61147 CVE-2026-45382 CVE-2026-45383 CVE-2026-49295 CVE-2026-49337 CVE-2026-49346 CVE-2026-54240 CVE-2026-54241 Debian Bug : 1074416 1129257 1140431 Multiple security issues were discovered in libde265, an open source implementation of the H.265/HEVC video codec, which may result in denial of service, memory exhaustion or potentially the execution of arbitrary code if a malformed media file is processed. For the stable distribution (trixie), these problems have been fixed in version 1.0.15-1+deb13u1. We recommend that you upgrade your libde265 packages. For the detailed security status of libde265 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libde265 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmp0U8IACgkQ+GQ1dHE8 m65zywf7BBmW3sqj5R8zOrgFQiqOxicDJtUOi+Ww9g+QudhTA7GQbdsTnlA9YaMT nWivEagGj8SPMgPPzjlpwpDFL3Cz7peWQFjN1Tahybb6xTUIPfDL4FiYSi//d/fX CvntUli+o5HIKCAt0ov7jiRpKuOIcULG2d2YZUWZZH0BGMRzGbZJo9lMvU1ar5R+ XX2D9IYUuWai5hkXgNqreo7A8rivuC+pshtchoX/hLGsS/VhbppW2gRqBDworUus XD2OY+kUPmpnPcWSLNdtfDGJinIwR7xyewREm1+bg/LItaI6Dp/BHHDdb7Wuk6Xd u4S+/4trT23OzNUrIfYRO5GnefsxQg== =Zbh3 -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Aron Xu (on-list) Aron Xu (off-list) Prev by Date: [SECURITY] [DSA 6412-1] botan3 security update Previous by thread: [SECURITY] [DSA 6412-1] botan3 security update Index(es): Date Thread