Alerts This Week
Warning Icon 1 975
Alerts This Week
Warning Icon 1 975

Gentoo Linux: GLSA-202408-20 Normal: libde265 Arbitrary Code Execution

gentoo
Calendar Grey August 10, 2024
Dist Gentoo Esm H88
Multiple vulnerabilities in libde265 could allow arbitrary code execution. Upgrade to mitigate risk.
Multiple vulnerabilities have been discovered in libde265, the worst of which could lead to arbitrary code execution.

Summary

Multiple vulnerabilities have been discovered in libde265. Please review the CVE identifiers referenced below for details.

Topics%20covered

Topics Covered

security advisory gentoo arbitrary code execution normal severity libde265

Resolution

All libde265 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libde265-1.0.11"

References

[ 1 ] CVE-2020-21594 https://nvd.nist.gov/vuln/detail/CVE-2020-21594 [ 2 ] CVE-2020-21595 https://nvd.nist.gov/vuln/detail/CVE-2020-21595 [ 3 ] CVE-2020-21596 https://nvd.nist.gov/vuln/detail/CVE-2020-21596 [ 4 ] CVE-2020-21597 https://nvd.nist.gov/vuln/detail/CVE-2020-21597 [ 5 ] CVE-2020-21598 https://nvd.nist.gov/vuln/detail/CVE-2020-21598 [ 6 ] CVE-2020-21599 https://nvd.nist.gov/vuln/detail/CVE-2020-21599 [ 7 ] CVE-2020-21600 https://nvd.nist.gov/vuln/detail/CVE-2020-21600 [ 8 ] CVE-2020-21601 https://nvd.nist.gov/vuln/detail/CVE-2020-21601 [ 9 ] CVE-2020-21602 https://nvd.nist.gov/vuln/detail/CVE-2020-21602 [ 10 ] CVE-2020-21603 https://nvd.nist.gov/vuln/detail/CVE-2020-21603 [ 11 ] CVE-2020-21604 https://nvd.nist.gov/vuln/detail/CVE-2020-21604 [ 12 ] CVE-2020-21605 https://nvd.nist.gov/vuln/detail/CVE-2020-21605 [ 13 ] CVE-2020-21606 https://nvd.nist.gov/vuln/detail/CVE-2020-21606 [ 14 ] CVE-2021-35...

Read the Full Advisory

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/202408-20
style>.gentoo_availability{display:block;}

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity: Normal
Title: libde265: Multiple Vulnerabilities
Date: August 10, 2024
Bugs: #813486, #889876
ID: 202408-20

Topics%20covered

Topics Covered

security advisory gentoo arbitrary code execution normal severity libde265

Synopsis

Multiple vulnerabilities have been discovered in libde265, the worst of which could lead to arbitrary code execution.

Background

Open h.265 video codec implementation.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Package Vulnerable Unaffected ------------------- ------------ ------------ media-libs/libde265 < 1.0.11 >= 1.0.11

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Your message here