[Git][security-tracker-team/security-tracker][master] two libde265 issues fixed

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b85bd533 by Moritz Muehlenhoff at 2026-07-01T10:11:54+02:00
two libde265 issues fixed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -274551,17 +274551,19 @@ CVE-2024-39242 (A cross-site scripting (XSS) vulnerability in skycaiji v2.8 allo
 CVE-2024-39241 (Cross Site Scripting (XSS) vulnerability in skycaiji 2.8 allows attack ...)
 	NOT-FOR-US: skycaiji
 CVE-2024-38950 (Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attacker ...)
-	- libde265 <unfixed> (bug #1074416)
+	- libde265 1.1.1-1 (bug #1074416)
 	[trixie] - libde265 <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - libde265 <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - libde265 <no-dsa> (Minor issue)
 	NOTE: https://github.com/strukturag/libde265/issues/460
+	NOTE: https://github.com/strukturag/libde265/commit/4089de0845e0009e019be4ca5cbebaf2aee0a8ce (v1.0.19)
 CVE-2024-38949 (Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attacker ...)
-	- libde265 <unfixed> (bug #1074416)
+	- libde265 1.1.1-1 (bug #1074416)
 	[trixie] - libde265 <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - libde265 <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - libde265 <no-dsa> (Minor issue)
 	NOTE: https://github.com/strukturag/libde265/issues/460
+	NOTE: https://github.com/strukturag/libde265/commit/4089de0845e0009e019be4ca5cbebaf2aee0a8ce (v1.0.19)
 CVE-2024-38527 (ZenUML is JavaScript-based diagramming tool that requires no server, u ...)
 	NOT-FOR-US: ZenUML
 CVE-2024-38520 (SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Pro ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b85bd53349bf9250e0cadf62306901ded3bf7422

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b85bd53349bf9250e0cadf62306901ded3bf7422
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260701/96444757/attachment.htm>