ELA-1027-1 libde265 security update

buffer overflow

2023-12-31
Packagelibde265
Version1.0.11-0+deb9u6 (stretch)
Related CVEs CVE-2023-49465 CVE-2023-49467 CVE-2023-49468


Three issues have been found in libde265, an open H.265 video codec implementation. All issues are related to heap-buffer-overflow or global buffer overflow in different functions.



For Debian 9 stretch, these problems have been fixed in version 1.0.11-0+deb9u6.

We recommend that you upgrade your libde265 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.