portage-ng / portage / media-libs / libde265 / 1.1.3
portage-ng glsa
2 advisories reference media-libs/libde265 · none place version 1.1.3 in a vulnerable range
▸ GLSA 202408-20 libde265: Multiple Vulnerabilities this version unaffected normal local 2024-08-10

Multiple vulnerabilities have been discovered in libde265, the worst of which could lead to arbitrary code execution.

Announced
2024-08-10
Revised
2024-08-10
Access
local
Bugs
#813486 #889876
Advisory
https://security.gentoo.org/glsa/202408-20

Affected packages

PackageArchVulnerableUnaffected
media-libs/libde265*< 1.0.11>= 1.0.11

Background

Open h.265 video codec implementation.

Description

Multiple vulnerabilities have been discovered in libde265. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All libde265 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/libde265-1.0.11"

References

▸ GLSA 201811-06 libde265: Multiple vulnerabilities this version unaffected normal remote 2018-11-10

Multiple vulnerabilities have been found in libde265, the worst of which allows remote attackers to execute arbitrary code.

Announced
2018-11-10
Revised
2018-11-10
Access
remote
Bugs
#665520
Advisory
https://security.gentoo.org/glsa/201811-06

Affected packages

PackageArchVulnerableUnaffected
media-libs/libde265*< 1.0.3>= 1.0.3

Background

Open h.265 video codec implementation.

Description

Multiple vulnerabilities have been discovered in libde265. Please review libde265 changelog referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted media file using libde265 or linked applications, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All libde265 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/libde265-1.0.3"

References