[ubuntu/noble-security] libde265 1.0.15-1ubuntu0.1 (Accepted)

[Kyle Kernick]

libde265 (1.0.15-1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: dec265: Heap buffer overflow in SDL
    - debian/patches/CVE-2024-389XX.patch: Fix SDL OOB on 4:4:4 resolution
      change in dec265/dec265.cc, ../sdl.cc, and ../sdl.hh
    - CVE-2024-38949
    - CVE-2024-38950
  * SECURITY UPDATE: Segmentation fault in decoder.
    - debian/patches/CVE-2025-61147.patch: Check for valid integer command
      line parameters in dec265/dec265.cc
    - debian/patches/CVE-2026-3316X.patch: fix reallocation of metadata
      array in libde265/image.cc and ../image.h
    - CVE-2025-61147
    - CVE-2026-33164
    - CVE-2026-33165
  * SECURITY UPDATE: CTB OOB
    - debian/patches/CVE-2026-45382.patch: Fix CTB OOB access when pps.sps
      mismatches active sps in libde265/decctx.cc
    - debian/patches/CVE-2026-45383.patch: Prevent reading past end of
      CtbAddrRStoTS[] in crafted WPP images in libde265/decctx.cc
    - CVE-2026-45382
    - CVE-2026-45383
  * SECURITY UPDATE: OOB in decoder.
    - debian/patches/CVE-2026-49295.patch: Bound aggregate short-term RPS
      size in libde265/refpic.cc
    - CVE-2026-49295
  * SECURITY UPDATE: Denial of service in read_slice_NAL
    - debian/patches/CVE-2026-49337.patch: Free orphaned slice header when
      no active image unit in libde265/decctx.cc
    - CVE-2026-49337
  * SECURITY UPDATE: Integer overflow in image plane allocation
    - debian/patches/CVE-2026-49346.patch: Fix integer overflow in
      libde265/image.cc
    - CVE-2026-49346
  * SECURITY UPDATE: Integer overflow on large frames
    - debian/patches/CVE-2026-5424X.patch: Fix pixel-accessor integer
      overflow on large frames in
      libde265/de265.cc,
      ../image-io.cc,
      ../image.cc,
      ../image.h,
      ../intrapred.h,
      ../motion.cc,
      ../sao.cc,
      ../sei.cc,
      ../sps.cc, and
      ../sps.h
    - CVE-2026-54240
    - CVE-2026-54241

Date: 2026-07-17 21:53:10.973967+00:00
Changed-By: Kyle Kernick <kyle.kernick at canonical.com>
https://launchpad.net/ubuntu/+source/libde265/1.0.15-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.