[ubuntu/resolute-updates] libheif 1.21.2-3ubuntu0.5 (Accepted)

[Ubuntu Archive Robot]

libheif (1.21.2-3ubuntu0.5) resolute-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write in decoder/encoder
    - debian/patches/CVE-2026-62291.patch: Reject uncompressed encode of
      images with mismatched component plane sizes in
      libheif/image-items/unc_image.cc and ../unc_image.h
    - CVE-2026-62291
  * SECURITY UPDATE: Denial of service in heif_context_read_from_memory
    - debian/patches/CVE-2026-62377.patch: Return error instead of asserting
      in libheif/context.cc
    - CVE-2026-62377

Date: 2026-09-15 17:35:12.651624+00:00
Changed-By: Kyle Kernick <kyle.kernick at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/libheif/1.21.2-3ubuntu0.5
-------------- next part --------------
Sorry, changesfile not available.