Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libheif for openSUSE:Factory checked in at 2026-09-01 15:46:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libheif (Old) and /work/SRC/openSUSE:Factory/.libheif.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libheif" Tue Sep 1 15:46:32 2026 rev:57 rq:1374814 version:1.23.2 Changes: -------- --- /work/SRC/openSUSE:Factory/libheif/libheif.changes 2026-08-04 21:29:24.117651700 +0200 +++ /work/SRC/openSUSE:Factory/.libheif.new.1265/libheif.changes 2026-09-01 15:46:59.770907899 +0200 @@ -1,0 +2,59 @@ +Thu Aug 27 16:25:23 UTC 2026 - Andreas Stieger <[email protected]> + +- Update to version 1.23.2: + * CVE-2026-XXXXX (GHSA-g89c-p67h-r497) Heap buffer overflow in + scale_nearest_neighbor() via duplicate alpha planes from nested + iden/auxl items. (critical) + * (GHSA-2jg2-4ch7-h545) Out-of-bounds read and write in derived- + item and pixel-plane handling. Through iden and auxl item + chains, a crafted file could attach pixel planes whose size + differs from the image geometry; crop, scale, and plane- + extraction code then indexed those planes with the wrong size. + A working code-execution exploit was confirmed. Plane sizes are + now validated wherever they are consumed. (critical) + * CVE-2026-XXXXX (GHSA-24wx-9w62-c96w) brotli/zlib decompression + of mime metadata and unci image data had no effective output- + size limit, so a decompression bomb could exhaust memory. + Decompressed output is now bounded by the security limits. + (high) + * CVE-2026-XXXXX (GHSA-x8xm-cm2c-cfc8) Chains of derived-image + references (grid, iovl, iden) bypassed decode caching and + memory limits, causing CPU and memory amplification. (high) + * CVE-2026-XXXXX (GHSA-xw34-mjcp-jqh8) Sequence sample-timing + initialization could produce non-terminating decode loops and + unbounded memory, bypassing max_sequence_frames. (high) + * CVE-2026-XXXXX (GHSA-j264-xvrp-5v7q) Out-of-bounds write in the + unci encoder when heif_context_add_image_tile() is given a tile + whose planes do not match its declared size. (high) + * CVE-2026-XXXXX (GHSA-p58j-h3vm-3fp5) Heap out-of-bounds read in + the inline-mask region API when mask_data_len does not match + the region geometry. (medium) + * C++ exceptions such as std::bad_alloc can no longer escape the + C API read/decode entry points; they are returned as a + heif_error instead of aborting the process + * assert()s in the pixel-image plane allocation were replaced by + runtime errors + * stts/ctts tables describing more samples than the track can + have are rejected + * pclr (JPEG 2000 palette) box: the number of palette entries is + bounded by the box size + * BitReader::skip_bytes() is now constant time (fixes a fuzzer + timeout on bogus alignment values) + * iden items now validate the decoded image size like all other + items + * The uncompressed (unci) encoder rejects images without pixel + planes + * meta, mini, and moov boxes with size 0 (extending to the end of + the file) are now parsed correctly + * Fixed an integer overflow when probing the file size + * Fixed undefined behavior (signed shift) when reading the NAL + unit length in the OpenH264 decoder + * heif_region_item_add_region_inline_mask_data() now requires + non-zero width and height and the mask_data_len must equal + the expected (width * height + 7) / 8; otherwise it returns + an error instead of storing the mask + * heif_image_add_plane() returns an error instead of aborting + for bit depths outside 1..128 or interleaved component counts + outside 1..255 + +------------------------------------------------------------------- Old: ---- libheif-1.23.1.tar.gz New: ---- libheif-1.23.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libheif.spec ++++++ --- /var/tmp/diff_new_pack.Eo7t2u/_old 2026-09-01 15:47:00.527934367 +0200 +++ /var/tmp/diff_new_pack.Eo7t2u/_new 2026-09-01 15:47:00.530934472 +0200 @@ -2,6 +2,7 @@ # spec file for package libheif # # Copyright (c) 2026 SUSE LLC and contributors +# Copyright (c) 2026 Andreas Stieger <[email protected]> # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -46,7 +47,7 @@ %bcond_with heif_view Name: libheif%{?psuffix} -Version: 1.23.1 +Version: 1.23.2 Release: 0 Summary: HEIF/AVIF file format decoder and encoder License: LGPL-3.0-only AND MIT @@ -403,62 +404,75 @@ %files -n libheif1 %license COPYING -%{_libdir}/libheif.so.* +%{_libdir}/libheif.so.1{,.*} %dir %{_libexecdir}/libheif %files aom +%license COPYING %{_libexecdir}/libheif/libheif-aomdec.so %{_libexecdir}/libheif/libheif-aomenc.so %files dav1d +%license COPYING %{_libexecdir}/libheif/libheif-dav1d.so %files ffmpeg +%license COPYING %{_libexecdir}/libheif/libheif-ffmpegdec.so %files jpeg +%license COPYING %{_libexecdir}/libheif/libheif-jpegdec.so %{_libexecdir}/libheif/libheif-jpegenc.so %if %{with kvazaar} %files kvazaar +%license COPYING %{_libexecdir}/libheif/libheif-kvazaar.so %endif %if %{with openjpeg} %files openjpeg +%license COPYING %{_libexecdir}/libheif/libheif-j2kdec.so %{_libexecdir}/libheif/libheif-j2kenc.so %endif %files openh264 +%license COPYING %{_libexecdir}/libheif/libheif-openh264dec.so %if %{with openjph} %files openjph +%license COPYING %{_libexecdir}/libheif/libheif-jphenc.so %endif %files rav1e +%license COPYING %{_libexecdir}/libheif/libheif-rav1e.so %if %{with svtenc} %files svtenc +%license COPYING %{_libexecdir}/libheif/libheif-svtenc.so %endif %if %{with x264} %files x264 +%license COPYING %{_libexecdir}/libheif/libheif-x264.so %endif %if %{with x265} %files HEIF +%license COPYING %{_libexecdir}/libheif/libheif-libde265.so %{_libexecdir}/libheif/libheif-x265.so %endif %files devel +%license COPYING %doc README.md %{_includedir}/libheif %{_libdir}/libheif.so @@ -466,10 +480,12 @@ %{_libdir}/pkgconfig/libheif.pc %files -n gdk-pixbuf-loader-libheif +%license COPYING %{_libdir}/gdk-pixbuf-2.0/%{gdk_pixbuf_binary_version}/loaders/*.so %if %{with x265} %files -n heif-examples +%license COPYING %{_bindir}/heif-convert %{_bindir}/heif-dec %{_bindir}/heif-enc @@ -479,6 +495,7 @@ %{_mandir}/man1/heif-info.1%{?ext_man} %files -n heif-thumbnailer +%license COPYING %{_bindir}/heif-thumbnailer %dir %{_datadir}/thumbnailers %{_datadir}/thumbnailers/heif.thumbnailer ++++++ libheif-1.23.1.tar.gz -> libheif-1.23.2.tar.gz ++++++ ++++ 5703 lines of diff (skipped)
