– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
Gentoo Linux Security Advisory GLSA 202408-20
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –
https:\/\/security.gentoo.org\/
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –<\/p>\n
Severity: Normal
Title: libde265: Multiple Vulnerabilities
Date: August 10, 2024
Bugs: #813486, #889876
ID: 202408-20<\/p>\n
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –<\/p>\n
Synopsis
========<\/p>\n
Multiple vulnerabilities have been discovered in libde265, the worst of
which could lead to arbitrary code execution.<\/p>\n
Background
==========<\/p>\n
Open h.265 video codec implementation.<\/p>\n
Affected packages
=================<\/p>\n
Package Vulnerable Unaffected
——————- ———— ————
media-libs\/libde265 < 1.0.11 >= 1.0.11<\/p>\n
Description
===========<\/p>\n
Multiple vulnerabilities have been discovered in libde265. Please review
the CVE identifiers referenced below for details.<\/p>\n
Impact
======<\/p>\n
Please review the referenced CVE identifiers for details.<\/p>\n
Workaround
==========<\/p>\n
There is no known workaround at this time.<\/p>\n
Resolution
==========<\/p>\n
All libde265 users should upgrade to the latest version:<\/p>\n
# emerge –sync
# emerge –ask –oneshot –verbose “>=media-libs\/libde265-1.0.11”<\/p>\n
References
==========<\/p>\n
[ 1 ] CVE-2020-21594
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21594
[ 2 ] CVE-2020-21595
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21595
[ 3 ] CVE-2020-21596
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21596
[ 4 ] CVE-2020-21597
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21597
[ 5 ] CVE-2020-21598
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21598
[ 6 ] CVE-2020-21599
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21599
[ 7 ] CVE-2020-21600
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21600
[ 8 ] CVE-2020-21601
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21601
[ 9 ] CVE-2020-21602
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21602
[ 10 ] CVE-2020-21603
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21603
[ 11 ] CVE-2020-21604
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21604
[ 12 ] CVE-2020-21605
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21605
[ 13 ] CVE-2020-21606
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-21606
[ 14 ] CVE-2021-35452
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-35452
[ 15 ] CVE-2021-36408
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-36408
[ 16 ] CVE-2021-36409
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-36409
[ 17 ] CVE-2021-36410
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-36410
[ 18 ] CVE-2021-36411
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-36411
[ 19 ] CVE-2022-1253
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-1253
[ 20 ] CVE-2022-43235
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43235
[ 21 ] CVE-2022-43236
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43236
[ 22 ] CVE-2022-43237
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43237
[ 23 ] CVE-2022-43238
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43238
[ 24 ] CVE-2022-43239
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43239
[ 25 ] CVE-2022-43240
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43240
[ 26 ] CVE-2022-43241
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43241
[ 27 ] CVE-2022-43242
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43242
[ 28 ] CVE-2022-43243
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43243
[ 29 ] CVE-2022-43244
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43244
[ 30 ] CVE-2022-43245
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43245
[ 31 ] CVE-2022-43248
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43248
[ 32 ] CVE-2022-43249
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43249
[ 33 ] CVE-2022-43250
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43250
[ 34 ] CVE-2022-43252
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43252
[ 35 ] CVE-2022-43253
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-43253
[ 36 ] CVE-2022-47655
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-47655
[ 37 ] CVE-2022-47664
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-47664
[ 38 ] CVE-2022-47665
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-47665
[ 39 ] CVE-2023-24751
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-24751
[ 40 ] CVE-2023-24752
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-24752
[ 41 ] CVE-2023-24754
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-24754
[ 42 ] CVE-2023-24755
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-24755
[ 43 ] CVE-2023-24756
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-24756
[ 44 ] CVE-2023-24757
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-24757
[ 45 ] CVE-2023-24758
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-24758
[ 46 ] CVE-2023-25221
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-25221<\/p>\n
Availability
============<\/p>\n
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:<\/p>\n
https:\/\/security.gentoo.org\/glsa\/202408-20<\/p>\n
Concerns?
=========<\/p>\n
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users’ machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https:\/\/bugs.gentoo.org.<\/p>\n
License
=======<\/p>\n
Copyright 2024 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).<\/p>\n
The contents of this document are licensed under the
Creative Commons – Attribution \/ Share Alike license.<\/p>\n
https:\/\/creativecommons.org\/licenses\/by-sa\/2.5<\/p>\n","protected":false},"excerpt":{"rendered":"
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –Gentoo Linux Security Advisory GLSA 202408-20– – – – – – – – – – – – – – – …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-58834","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58834","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=58834"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58834\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=58834"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=58834"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=58834"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}