Gnoppix Security has released a security update for libde265, addressing a critical vulnerability that could allow remote code execution.
Vulnerability Details
The flaw affects libde265 versions prior to 1.0.15. An attacker can trigger a heap-based buffer overflow by sending a specially crafted HEVC video file.
Affected Systems
- Gnoppix 23/25 (stable) requires an immediate update.
- Gnoppix 25 (testing) must also apply the fix.
Update Instructions
Update the libde265 package using the standard package manager. No restart is necessary.
Critical Warning: Exploitation is possible without user interaction beyond opening a malicious file.
The Gnoppix Security Team recommends applying the update immediately. - Please update your systems.