UbuntuUpdates.org

Package "libheif-plugin-libde265"

Name: libheif-plugin-libde265

Description:

ISO/IEC 23008-12:2017 HEIF file format decoder - libde265 plugin
Latest version: 1.17.6-1ubuntu4.9
Release: noble (24.04)
Level: updates
Repository: main
Head package: libheif
Homepage: http://www.libheif.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libheif-plugin-libde265"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libheif-plugin-libde265" in Noble

Repository Area Version
base main 1.17.6-1ubuntu4
security main 1.17.6-1ubuntu4.9

Changelog

Version: 1.17.6-1ubuntu4.9 2026-09-29 20:07:18 UTC

libheif (1.17.6-1ubuntu4.9) noble-security; urgency=medium

  * SECURITY UPDATE: Denial of service in HEIF or AVIF metadata parsing
    - debian/patches/CVE-2026-84384.patch: bound brotli/zlib decompression
      output in libheif/metadata_compression.cc
    - CVE-2026-84384
  * SECURITY UPDATE: Denial of service in
    heif_region_item_add_region_inline_mask_data
    - debian/patches/CVE-2026-84448-pre1.patch: advance the parse offset after
      inline mask data in libheif/region.cc
    - debian/patches/CVE-2026-84448.patch: Validate inline mask data length
      in region writer API in libheif/heif_regions.cc and
      ../heif_regions.h
    - CVE-2026-84448
  * SECURITY UPDATE: Integer overflow in image plane stride handling
    - debian/patches/CVE-2026-84449.patch: changed internal stride types
      from int to size_t and added an overflow guard at the public C API
      boundary in libheif/heif.cc, ../heif.h, ../uncompressed_image.cc,
      ../color-conversion/chroma_sampling.cc, ../hdr_sdr.cc,
      ../monochrome.cc, ../rgb2rgb.cc, ../rgb2yuv.cc,
      ../rgb2yuv_sharp.cc, ../yuv2rgb.cc, libheif/context.cc,
      ../pixelimage.cc, ../pixelimage.h, and libheif/mask_image.cc.
    - CVE-2026-84449

 -- Kyle Kernick Mon, 28 Sep 2026 11:26:33 -0600
Source diff to previous version
CVE-2026-84384 libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can caus
CVE-2026-84448 libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inline_mask_data() function in li
CVE-2026-84449 libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in

Version: 1.17.6-1ubuntu4.8 2026-08-26 21:07:30 UTC
No changelog available yet.
Source diff to previous version

Version: 1.17.6-1ubuntu4.7 2026-08-19 16:08:05 UTC
No changelog available yet.
Source diff to previous version

Version: 1.17.6-1ubuntu4.6 2026-07-14 20:09:16 UTC

  libheif (1.17.6-1ubuntu4.6) noble-security; urgency=medium

  * SECURITY UPDATE: Integer overflow when parsing uncC.
    - debian/patches/CVE-2026-47709.patch: Prevent integer overflow
      when parsing uncC in libheif/uncompressed_image.cc
    - CVE-2026-47709
  * SECURITY UPDATE: Integer overflow in inline mask size calculation
    - debian/patches/CVE-2026-47714.patch: Fix computation of size of inline
      region mask in libheif/region.cc
    - CVE-2026-47714

 -- Kyle Kernick <email address hidden> Mon, 13 Jul 2026 16:00:17 -0600
Source diff to previous version

Version: 1.17.6-1ubuntu4.5 2026-07-09 21:08:24 UTC

  libheif (1.17.6-1ubuntu4.5) noble; urgency=medium

  * d/p/do-not-stop-with-error-when-items-are-referenced-tha.patch,
    d/p/libheif-support-shared-alpha-thumbnails-and-content-.patch:
    - Backport upstream support for shared auxiliary image references
      (alpha, thumbnails, metadata), fixing "Too many auxiliary image
      references" errors when reading iOS 18 HEIC files. (LP: #2091957)
  * d/p/fix-check-whether-Exif-IFD-table-fits-within-given-m.patch
    - Backport upstream fix for inverted EXIF IFD bounds check that
      prevented the orientation tag from being reset after pixel
      rotation, causing double-rotation in converted images.

 -- Charles <email address hidden> Tue, 30 Jun 2026 08:58:32 +0100
2091957 [SRU] libheif cannot open iOS 18 HEIC files


About   -   Send Feedback to @ubuntu_updates