-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 27 Aug 2026 22:59:53 +0200
Source: libheif
Built-For-Profiles: noudeb
Architecture: source
Version: 1.23.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Joachim Bauch <fancycode@debian.org>
Changes:
libheif (1.23.2-1) unstable; urgency=medium
.
* New upstream version 1.23.2
* Fixes heap buffer overflow in scale_nearest_neighbor() via duplicate
alpha planes from nested iden/auxl items. See upstream commit f4fb8bd.
* Fixes out-of-bounds read and write in derived-item and pixel-plane
handling. Upstream commits f4fb8bd, cd365da, bc7cf37, c0a63aa,
1fcada5, c664797, 328c4f9, 3d81d56, 578ab47 and 4dd71d7.
* Fixes missing memory limits when doing brotli/zlib decompression.
See upstream commits 21893e8 and 6b6757b.
* Fixes CPU and memory amplification when decoding derived-image
references (grid, iovl, iden). See upstream commit 30b52a4.
* Fixes non-terminating decode loops and unbounded memory when decoding
sequence images. See upstream commit 3a7a69a.
* Fixes out-of-bounds write in the unci encoder.
See upstream commit e65071f.
* Fixes heap out-of-bounds read in the inline-mask region API.
See upstream commit 646d85f.
Checksums-Sha1:
656030a2fe2742d2a5745fd8d1f6d2c1c43a884d 3844 libheif_1.23.2-1.dsc
cfe86c36f5dbe32cdaa55cc28cb3f6a6e6cf96ac 2111195 libheif_1.23.2.orig.tar.gz
acc70c817d36c27f57d559055cbffa0ee4cb3056 14544 libheif_1.23.2-1.debian.tar.xz
fc7b501f23553a8feaafd3f028301aac22d94fc9 16098 libheif_1.23.2-1_source.buildinfo
Checksums-Sha256:
bd30bf840cc49d4959f9ecea941f6f279c9b5d6cd860222cf1901de42edb49a6 3844 libheif_1.23.2-1.dsc
8bd5d41d19dc84536d118b04774709f244df6104ef66d623dad5fa4650143405 2111195 libheif_1.23.2.orig.tar.gz
b860d1229da544554b6fea087a8ba3a2c9d27a639f506adcf10d77de61f021bb 14544 libheif_1.23.2-1.debian.tar.xz
94a542bc9db529bf676da4634921d84cc6511e1bf86aece722580128d0298ea0 16098 libheif_1.23.2-1_source.buildinfo
Files:
e8afd89e22ec7b0708849a8f5db0971e 3844 libs - libheif_1.23.2-1.dsc
a23d847fc18f1ecf499232fb937d584f 2111195 libs - libheif_1.23.2.orig.tar.gz
577c979c94421f983ca707ac685b5a1b 14544 libs - libheif_1.23.2-1.debian.tar.xz
596d7c3617d580bd5afefd4ea8209463 16098 libs - libheif_1.23.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=RvUZ
-----END PGP SIGNATURE-----
