libde265 (1.0.11-0+deb9u7) stretch-security; urgency=high

  * Non-maintainer upload by the LTS Security Team.
  * CVE-2023-51792: check validity of conformance window parameters
  * CVE-2026-33164 + CVE-2026-33165: fix reallocation of metadata array...
    ... when ctb size changes (Closes: #1131468, #1131469)

 -- Andreas Henriksson <andreas@fatal.se>  Thu, 23 Apr 2026 12:00:56 +0200

libde265 (1.0.11-0+deb9u6) stretch-security; urgency=high

  * Non-maintainer upload by the ELTS Team.
  * CVE-2023-49465
    heap-buffer-overflow in derive_spatial_luma_vector_prediction()
  * CVE-2023-49467
    heap-buffer-overflow in derive_combined_bipredictive_merging_candidates()
  * CVE-2023-49468
    global buffer overflow in read_coding_unit()

 -- Thorsten Alteholz <debian@alteholz.de>  Fri, 29 Dec 2023 23:03:02 +0100

libde265 (1.0.11-0+deb9u5) stretch-security; urgency=high

  * Non-maintainer upload by the ELTS Team.
  * CVE-2023-43887 
    fix buffer over-read in pic_parameter_set::dump 

 -- Thorsten Alteholz <debian@alteholz.de>  Sat, 25 Nov 2023 22:03:02 +0100

libde265 (1.0.11-0+deb9u4) stretch-security; urgency=high

  * Non-maintainer upload by the ELTS Team.
  * CVE-2023-27102
    fix segmentation violation in the
    function decoder_context::process_slice_segment_header
  * CVE-2023-27103
    fix heap buffer overflow in the
    function derive_collocated_motion_vectors
  * CVE-2023-47471
    fix buffer overflow in the slice_segment_header function

 -- Thorsten Alteholz <debian@alteholz.de>  Sun, 19 Nov 2023 18:03:02 +0100

libde265 (1.0.11-0+deb9u3) stretch-security; urgency=medium

  * Non-maintainer upload by the LTS Security Team.
  * Import new upstream version, based on the 1.0.11-0+deb10u4 package
    from buster.
    - fixing:
      CVE-2023-24751, CVE-2023-24752, CVE-2023-24754, CVE-2023-24755,
      CVE-2023-24756, CVE-2023-24757, CVE-2023-24758 and CVE-2023-25221.
    - dropping no longer needed patches that have been integrated or
      made obsolete by the new upstream version.

 -- Tobias Frost <tobi@debian.org>  Sun, 05 Mar 2023 09:01:53 +0100

libde265 (1.0.2-2+deb9u2) stretch-security; urgency=medium

  * Non-maintainer upload by the LTS Security Team.
  * Cherry-pick and backport upstream patches for:
    CVE-2020-21594, CVE-2020-21595, CVE-2020-21596, CVE-2020-21597,
    CVE-2020-21598, CVE-2020-21600, CVE-2020-21601, CVE-2020-21602,
    CVE-2020-21603, CVE-2020-21604, CVE-2020-21605, CVE-2020-21606,
    CVE-2022-43235, CVE-2022-43236, CVE-2022-43237, CVE-2022-43238,
    CVE-2022-43239, CVE-2022-43240, CVE-2022-43241, CVE-2022-43242,
    CVE-2022-43243, CVE-2022-43244, CVE-2022-43245, CVE-2022-43248,
    CVE-2022-43249, CVE-2022-43250, CVE-2022-43252, CVE-2022-43253,
    CVE-2022-47655
    (Closes: #1029357, #1029397, #1025816, #1027179, #1014999, #1014977)

 -- Tobias Frost <tobi@debian.org>  Thu, 26 Jan 2023 15:56:37 +0100

libde265 (1.0.2-2+deb9u1) stretch-security; urgency=medium

  * Non-maintainer upload by the LTS Security Team.
  * Cherry-pick/Adapt upstream patches for:
    - CVE-2020-21599 (See #1014999)
    - CVE-2021-35452, CVE-2021-36409, CVE-2021-36410 and
      CVE-2021-36411 (Closes: #1014977)

 -- Tobias Frost <tobi@debian.org>  Fri, 16 Dec 2022 11:56:17 +0100

libde265 (1.0.2-2) unstable; urgency=low

  [ Joachim Bauch ]
  * Added patch by Andreas Cadhalpun to fix compilation with FFmpeg 2.9
    (Closes: #803834)
  * Updated symbols file for new C++11 symbols.

  [ Sebastian Ramacher ]
  * Migrate to automatic dbg packages.
  * debian/control: Remove some unnecessary Build-Depends.

 -- Joachim Bauch <bauch@struktur.de>  Mon, 11 Jan 2016 19:12:19 +0100

libde265 (1.0.2-1) unstable; urgency=low

  * Imported Upstream version 1.0.2
  * Added new files to copyright information.
  * Only export decoder API and update symbols for new version.

 -- Joachim Bauch <bauch@struktur.de>  Thu, 16 Jul 2015 11:07:46 +0200

libde265 (0.9-1) unstable; urgency=low

  * Updated symbols to make all "std::vector" symbols optional.
  * Imported Upstream version 0.9
  * Removed deprecated patch to update symbols visibility. Changes were
    applied upstream.
  * Upstream supports compiling against Qt5, prefer that over Qt4.
  * Added new symbols from new upstream release.

 -- Joachim Bauch <bauch@struktur.de>  Tue, 16 Sep 2014 18:47:14 +0200

libde265 (0.8-1) unstable; urgency=low

  * Initial release. (Closes: #744190)

 -- Joachim Bauch <bauch@struktur.de>  Fri, 08 Aug 2014 17:23:37 +0200
