global-buffer-overflow in read_coding_unit about libde265 HOT 8 CLOSED

Thank you. Fixed in the above commit.

from libde265.

CVE-2023-49468 is apparently assigned for this issue.

from libde265.

Hello. I am still getting a block pipeline because of this vulnerability: https://security-tracker.debian.org/tracker/CVE-2023-49468.

from libde265.

@aiakubovich Can I interpret your comment such that you'd like to have a new release?

from libde265.

@farindk, I am not familiar with how those fixes work. It seems like this issue has been resolved, but for some reason, it still appears as an unresolved vulnerability on debian.org. This issue is causing blocked deployment pipelines when I try to deploy the application because the container vulnerability scanner indicates that a vulnerability is detected.

from libde265.

Ok, so you need a new release because these fixes are not in an official release yet. :-)

from libde265.

Yes, please, a new release is needed.

from libde265.

New release is waiting for packaging.

from libde265.