From 5feefc6be00f40e6333feb9b2a9710c0c463fee6 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sun, 4 Oct 2026 10:09:40 +0200 Subject: [PATCH] package/libheif: security bump version to 1.23.5 https://github.com/strukturag/libheif/releases/tag/v1.23.5 Fixes the following CVEs: (CVE numbers will be added when assigned.) CVE-2026-XXXXX (GHSA-v8qw-hwjv-44hw) CVE-2026-XXXXX (GHSA-qwpf-5wf7-r996) CVE-2026-XXXXX (GHSA-9c75-9g8r-4728) CVE-2026-XXXXX (GHSA-r7gr-2xm2-23wf) CVE-2026-XXXXX (GHSA-q492-cfcm-895h) Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard --- package/libheif/libheif.hash | 4 ++-- package/libheif/libheif.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libheif/libheif.hash b/package/libheif/libheif.hash index 78f59f6b67..30265f4aab 100644 --- a/package/libheif/libheif.hash +++ b/package/libheif/libheif.hash @@ -1,4 +1,4 @@ -# From https://github.com/strukturag/libheif/releases/tag/v1.23.4 -sha256 d0c02b4b0e978f34a1974b6f3eea7975a537bf7a9195ffeea38e7242ff316fdd libheif-1.23.4.tar.gz +# From https://github.com/strukturag/libheif/releases/tag/v1.23.5 +sha256 fd9036064c4432f0550d15072ddf34956a248279ee9aeaff0fba3fa0f77d8f1a libheif-1.23.5.tar.gz # Locally computed: sha256 fa81ce652315b013359d6e8e4744335f31a50c7c192907176d3632f78a3b4596 COPYING diff --git a/package/libheif/libheif.mk b/package/libheif/libheif.mk index 3428646016..cd171b9637 100644 --- a/package/libheif/libheif.mk +++ b/package/libheif/libheif.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBHEIF_VERSION = 1.23.4 +LIBHEIF_VERSION = 1.23.5 LIBHEIF_SITE = https://github.com/strukturag/libheif/releases/download/v$(LIBHEIF_VERSION) LIBHEIF_LICENSE = LGPL-3.0+ LIBHEIF_LICENSE_FILES = COPYING