From 69c37d796e1dea153297fb1589ee95778a563c0c Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 15 Sep 2026 00:02:37 +0200 Subject: [PATCH] package/libheif: security bump version to 1.23.4 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit https://github.com/strukturag/libheif/releases/tag/v1.23.4 Fixes the following CVEs: (CVE numbers will be added when assigned.) CVE-2026-XXXXX (GHSA-vg7w-rp49-4fc2) CVE-2026-XXXXX (GHSA-xrp2-63fq-jm8q) CVE-2026-XXXXX (GHSA-prgh-72vc-3xmc) CVE-2026-XXXXX (GHSA-fqpw-fj22-78w4) CVE-2026-XXXXX (GHSA-4rv4-953r-p24q) CVE-2026-XXXXX (GHSA-rhgw-q5g8-xjh2) Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit 053c724d6efad1412f2a6c4b460b0f0c36517085) Signed-off-by: Raphaël Mélotte --- package/libheif/libheif.hash | 4 ++-- package/libheif/libheif.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libheif/libheif.hash b/package/libheif/libheif.hash index 6001e84ce9..78f59f6b67 100644 --- a/package/libheif/libheif.hash +++ b/package/libheif/libheif.hash @@ -1,4 +1,4 @@ -# From https://github.com/strukturag/libheif/releases/tag/v1.23.3 -sha256 11c1179e0e4bec33624b87f22ec42c1e993a40d946d44d26f9c431cf1456a863 libheif-1.23.3.tar.gz +# From https://github.com/strukturag/libheif/releases/tag/v1.23.4 +sha256 d0c02b4b0e978f34a1974b6f3eea7975a537bf7a9195ffeea38e7242ff316fdd libheif-1.23.4.tar.gz # Locally computed: sha256 fa81ce652315b013359d6e8e4744335f31a50c7c192907176d3632f78a3b4596 COPYING diff --git a/package/libheif/libheif.mk b/package/libheif/libheif.mk index 1614dafc74..3428646016 100644 --- a/package/libheif/libheif.mk +++ b/package/libheif/libheif.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBHEIF_VERSION = 1.23.3 +LIBHEIF_VERSION = 1.23.4 LIBHEIF_SITE = https://github.com/strukturag/libheif/releases/download/v$(LIBHEIF_VERSION) LIBHEIF_LICENSE = LGPL-3.0+ LIBHEIF_LICENSE_FILES = COPYING