Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libheif for openSUSE:Factory checked in at 2026-08-01 18:29:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libheif (Old) and /work/SRC/openSUSE:Factory/.libheif.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libheif" Sat Aug 1 18:29:23 2026 rev:55 rq:1368660 version:1.23.1 Changes: -------- --- /work/SRC/openSUSE:Factory/libheif/libheif.changes 2026-06-09 14:12:50.622045430 +0200 +++ /work/SRC/openSUSE:Factory/.libheif.new.16738/libheif.changes 2026-08-01 18:30:14.833645318 +0200 @@ -1,0 +2,29 @@ +Thu Jul 30 06:58:39 UTC 2026 - Richard Rahl <[email protected]> + +- Update to version 1.23.1: + + FFmpeg decoder plugin gains AV1, VVC, JPEG, and JPEG 2000/HTJ2K + decoding + + SVT-AV1 encoder: new tune=iq and ms-ssim tune parameters + + C++ API: added getters/setters for the CLLI and MDCV HDR + metadata boxes + + Sequence decoder now scales the alpha auxiliary track to the + main image size + + Fixed pixi box writing for multi-channel images + + Corrected the placement of the TAI clock_type field into the + top 2 bits + + Empty/unset plugin directory is no longer scanned + + CVE-2026-62289 (GHSA-jc8f-p23p-5hjg) Integer underflow in + Fraction constructor via double clap transform application + + CVE-2026-62291 (GHSA-xpw3-9rhw-482x) Heap out of bounds write in + libheif uncompressed encoder when writing images with mismatched + auxiliary alpha dimensions + + CVE-2026-62292 (GHSA-73p7-m7gg-w2jv) Out-of-bounds read in + uncompressed unci tile range slicing + + CVE-2026-62377 (GHSA-9ww4-9v47-m7pj) Reachable assertion in + HeifContext::get_track() aborts on a valid-but-empty HEIF + sequence file + + (GHSA-46rp-pcq2-rpmr) Heap out-of-bounds write in the + uncompressed encoder for RRGGBB images with interleaved + bit-depth ≤ 8 + +------------------------------------------------------------------- Old: ---- libheif-1.23.0.tar.gz New: ---- libheif-1.23.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libheif.spec ++++++ --- /var/tmp/diff_new_pack.jD7eSE/_old 2026-08-01 18:30:15.505668192 +0200 +++ /var/tmp/diff_new_pack.jD7eSE/_new 2026-08-01 18:30:15.505668192 +0200 @@ -46,7 +46,7 @@ %bcond_with heif_view Name: libheif%{?psuffix} -Version: 1.23.0 +Version: 1.23.1 Release: 0 Summary: HEIF/AVIF file format decoder and encoder License: LGPL-3.0-only AND MIT ++++++ libheif-1.23.0.tar.gz -> libheif-1.23.1.tar.gz ++++++ ++++ 1779 lines of diff (skipped)
