From f69e07002d7d2e39442494060df22e8eb3828d09 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 26 May 2026 22:06:40 +0200 Subject: [PATCH] package/libheif: security bump version to 1.22.2 https://github.com/strukturag/libheif/releases/tag/v1.22.2 "Fixes missing heif_image_get_bayer_pattern_size() function." https://github.com/strukturag/libheif/releases/tag/v1.22.1 "Security - CVE TBD (GHSA-r7qj-cg5r-r6vf) - Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder - (GHSA-5hqq-636x-r3cr) - Out-of-bounds write in inline mask region API when source mask exceeds declared region" Removed patch which is included in version 1.22.1. Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard (cherry picked from commit 08f3757b0f2133b0ed50e1ef3d7a5a1d9c80de1c) Signed-off-by: Thomas Perale --- ...eif_properties.h-fix-bad_pixels-type.patch | 28 ------------------- package/libheif/libheif.hash | 4 +-- package/libheif/libheif.mk | 2 +- 3 files changed, 3 insertions(+), 31 deletions(-) delete mode 100644 package/libheif/0001-heif_properties.h-fix-bad_pixels-type.patch diff --git a/package/libheif/0001-heif_properties.h-fix-bad_pixels-type.patch b/package/libheif/0001-heif_properties.h-fix-bad_pixels-type.patch deleted file mode 100644 index 69c5d170fe..0000000000 --- a/package/libheif/0001-heif_properties.h-fix-bad_pixels-type.patch +++ /dev/null @@ -1,28 +0,0 @@ -From ef124f9988e57a06ad6d102c236d2bb4b82aef5d Mon Sep 17 00:00:00 2001 -From: =?UTF-8?q?=C8=98tefan=20Talpalaru?= -Date: Wed, 20 May 2026 00:37:24 +0200 -Subject: [PATCH] heif_properties.h: fix "bad_pixels" type - -Upstream: https://github.com/strukturag/libheif/commit/ef124f9988e57a06ad6d102c236d2bb4b82aef5d - -Signed-off-by: Bernd Kuhls ---- - libheif/api/libheif/heif_properties.h | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/libheif/api/libheif/heif_properties.h b/libheif/api/libheif/heif_properties.h -index 9432bd46..0dec3a37 100644 ---- a/libheif/api/libheif/heif_properties.h -+++ b/libheif/api/libheif/heif_properties.h -@@ -335,7 +335,7 @@ heif_error heif_image_add_sensor_bad_pixels_map(heif_image*, - uint32_t num_bad_columns, - const uint32_t* bad_columns, - uint32_t num_bad_pixels, -- const heif_bad_pixel* bad_pixels); -+ const struct heif_bad_pixel* bad_pixels); - - // Returns the number of sensor bad pixels maps on this image (0 if none). - LIBHEIF_API --- -2.47.3 - diff --git a/package/libheif/libheif.hash b/package/libheif/libheif.hash index b88784b309..22697f307c 100644 --- a/package/libheif/libheif.hash +++ b/package/libheif/libheif.hash @@ -1,4 +1,4 @@ -# From https://github.com/strukturag/libheif/releases/tag/v1.22.0 -sha256 8bd20cfa3201997b8f63266cddfabea2e1481467d7f992e6a2595e0bec691fc2 libheif-1.22.0.tar.gz +# From https://github.com/strukturag/libheif/releases/tag/v1.22.2 +sha256 eea48e4841f83fbe51d029337ffd2d14512d0203015dad40b90213d872958af3 libheif-1.22.2.tar.gz # Locally computed: sha256 fa81ce652315b013359d6e8e4744335f31a50c7c192907176d3632f78a3b4596 COPYING diff --git a/package/libheif/libheif.mk b/package/libheif/libheif.mk index e47620b167..4b23f1fda3 100644 --- a/package/libheif/libheif.mk +++ b/package/libheif/libheif.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBHEIF_VERSION = 1.22.0 +LIBHEIF_VERSION = 1.22.2 LIBHEIF_SITE = https://github.com/strukturag/libheif/releases/download/v$(LIBHEIF_VERSION) LIBHEIF_LICENSE = LGPL-3.0+ LIBHEIF_LICENSE_FILES = COPYING