Debian alert DLA-4550-1 (libde265)

From:
             
 
Andreas Henriksson <andreas@fatal.se>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4550-1] libde265 security update
Date:
             
 
Mon, 27 Apr 2026 14:11:32 +0200
Message-ID:
             
 
<5n3m7olxdv5dre6cx4qhuindeonuwhjs373zesefidqlg56shx@67py3im4oq2a>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4550-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                   Andreas Henriksson
April 27, 2026                                https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : libde265
Version        : 1.0.11-0+deb11u4
CVE ID         : CVE-2023-51792 CVE-2026-33164 CVE-2026-33165
Debian Bug     : 1131468 1131469

It was found that libde265, an open source implementation of the H.265 video
codec, had multiple vulnerabilities which could lead to both stack and heap
out of bound writes that could lead to denial of service, etc.

For Debian 11 bullseye, these problems have been fixed in version
1.0.11-0+deb11u4.

We recommend that you upgrade your libde265 packages.

For the detailed security status of libde265 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libde265

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=Etxw
-----END PGP SIGNATURE-----