ELA-1004-1 libde265 security update

segmentation violation of bufer overflow

2023-11-20
Packagelibde265
Version1.0.11-0+deb9u4 (stretch)
Related CVEs CVE-2023-27102 CVE-2023-27103 CVE-2023-47471


Several issues have been found in libde265, an open H.265 video codec implementation. They are related to segmentation faults and buffer overflows in different functions, which might result in denial of service.



For Debian 9 stretch, these problems have been fixed in version 1.0.11-0+deb9u4.

We recommend that you upgrade your libde265 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.