| Message ID | 20231226150717.440864-1-fontaine.fabrice@gmail.com |
|---|---|
| State | Accepted |
| Headers | show |
| Series | [1/1] package/libheif: security bump to version 1.17.6 | expand |
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes: > A couple of build fixes and bug fixes detected by fuzzing. > Corrects these issues: > - CVE-2023-49462 > - CVE-2023-49463 > https://github.com/strukturag/libheif/releases/tag/v1.17.6 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Committed to 2023.11.x, thanks.
diff --git a/package/libheif/libheif.hash b/package/libheif/libheif.hash index 6ea3ba6eec..a2ca065b7a 100644 --- a/package/libheif/libheif.hash +++ b/package/libheif/libheif.hash @@ -1,3 +1,3 @@ # Locally computed: -sha256 38ab01938ef419dbebb98346dc0b1c8bb503a0449ea61a0e409a988786c2af5b libheif-1.17.5.tar.gz +sha256 8390baf4913eda0a183e132cec62b875fb2ef507ced5ddddc98dfd2f17780aee libheif-1.17.6.tar.gz sha256 b2eb4f6588b005bebac44cfb2dfd23f6a16c5ca9b8a619a315158b0215a917a3 COPYING diff --git a/package/libheif/libheif.mk b/package/libheif/libheif.mk index 419a864ef3..bd307deb7b 100644 --- a/package/libheif/libheif.mk +++ b/package/libheif/libheif.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBHEIF_VERSION = 1.17.5 +LIBHEIF_VERSION = 1.17.6 LIBHEIF_SITE = https://github.com/strukturag/libheif/releases/download/v$(LIBHEIF_VERSION) LIBHEIF_LICENSE = LGPL-3.0+ LIBHEIF_LICENSE_FILES = COPYING
A couple of build fixes and bug fixes detected by fuzzing. Corrects these issues: - CVE-2023-49462 - CVE-2023-49463 https://github.com/strukturag/libheif/releases/tag/v1.17.6 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> --- package/libheif/libheif.hash | 2 +- package/libheif/libheif.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)