[Bug 275873] graphics/libheif: Update to 1.17.6

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 21 Dec 2023 21:02:21 UTC

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275873

            Bug ID: 275873
           Summary: graphics/libheif: Update to 1.17.6
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
               URL: https://github.com/strukturag/libheif/releases/tag/v1.
                    17.6
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: makc@FreeBSD.org
          Reporter: diizzy@FreeBSD.org
             Flags: maintainer-feedback?(makc@FreeBSD.org)
          Assignee: makc@FreeBSD.org

Created attachment 247188
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=247188&action=edit
Patch for libheif

Fixes following CVEs:
CVE-2023-49462
CVE-2023-49463

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-49462
https://nvd.nist.gov/vuln/detail/CVE-2023-49463

Compile and runtime tested on FreeBSD 13.2-RELEASE (amd64) (make, make
check-plist, make test)

Poudriere testport OK 13.2-RELEASE (amd64)
Poudriere testport OK 12.4-RELEASE (amd64)

Tested with following consumers in Poudriere, 13.2-RELEASE:
astro/siril
graphics/ImageMagick6
graphics/ImageMagick7
graphics/cimg
graphics/darktable
graphics/digikam
graphics/geeqie
graphics/gimp-app
graphics/imv
graphics/kf5-kimageformats
graphics/krita
graphics/openimageio
graphics/py-openimageio
graphics/py-pillow-heif
graphics/vips
x11/swayimg
x11/wallutils

-- 
You are receiving this mail because:
You are the assignee for the bug.