I've worked during October 2026 on the below listed packages, for Freexian LTS/ELTS [1]
Many thanks to Freexian and sponsors [2] for providing this opportunity! libde265 (WIP) ============= A fix included in DLA-4789-1/ELA-1821-1 was missing an upstream follow-up fix, which can cause regressions with certain HEVC/HEIF inputs. The update has been prepared with the follow-up fix included. Additionally, a new vulnerability has been reported, CVE-2026-88373. The update will include a fix for this vulnerability as well. The update is currently being coordinated with the security team and has not yet been uploaded. zlib (WIP) ========== Following up on our previous work on CVE-2026-85091, we contacted upstream to clarify the scope and affected versions of the vulnerability. Upstream confirmed that CVE-2026-85091 also applies to the additional failure mode we identified. The updates have now been prepared and are undergoing testing. Coordination with the pending updates for the non-(E)LTS releases is still ongoing. [1] https://www.freexian.com/lts/ [2] https://www.freexian.com/lts/debian/#sponsors Cheers, -- tobi
signature.asc
Description: PGP signature
