* [Buildroot] [PATCH 1/1] package/libheif: security bump version to 1.23.6
@ 2026-10-19 21:28 Bernd Kuhls
2026-10-19 21:53 ` Thomas Petazzoni via buildroot
0 siblings, 1 reply; 2+ messages in thread
From: Bernd Kuhls @ 2026-10-19 21:28 UTC (permalink / raw)
To: buildroot
https://github.com/strukturag/libheif/releases/tag/v1.23.6
Fixes the following CVEs:
(CVE numbers will be added when assigned.)
CVE-2026-XXXXX (GHSA-h4h8-qgvc-m7r2)
CVE-2026-XXXXX (GHSA-fcmw-5764-7rq8)
CVE-2026-XXXXX (GHSA-6fqc-p7r8-2g36)
CVE-2026-XXXXX (GHSA-q7mw-2fmm-5q94)
CVE-2026-XXXXX (GHSA-vv35-6hxg-95x8)
CVE-2026-XXXXX (GHSA-8p2c-9wv4-rx4p)
CVE-2026-XXXXX (GHSA-86ch-j429-fpr2)
CVE-2026-XXXXX (GHSA-3gwx-cjv4-jr74)
GHSA-hqpw-h8p6-22q9
GHSA-hvwh-xpj6-ph5x
GHSA-v5rj-g4wv-j5w3
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/4bfdf5e1cd6169d20971e8bd1f9731b85e65e9f5
package/libheif/libheif.hash | 4 ++--
package/libheif/libheif.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/libheif/libheif.hash b/package/libheif/libheif.hash
index 30265f4aab..44e9c54781 100644
--- a/package/libheif/libheif.hash
+++ b/package/libheif/libheif.hash
@@ -1,4 +1,4 @@
-# From https://github.com/strukturag/libheif/releases/tag/v1.23.5
-sha256 fd9036064c4432f0550d15072ddf34956a248279ee9aeaff0fba3fa0f77d8f1a libheif-1.23.5.tar.gz
+# From https://github.com/strukturag/libheif/releases/tag/v1.23.6
+sha256 4484346dc5995319dbc11e3a1c35d0a2ec46511ce370900869337fd2c7033125 libheif-1.23.6.tar.gz
# Locally computed:
sha256 fa81ce652315b013359d6e8e4744335f31a50c7c192907176d3632f78a3b4596 COPYING
diff --git a/package/libheif/libheif.mk b/package/libheif/libheif.mk
index cd171b9637..179c952566 100644
--- a/package/libheif/libheif.mk
+++ b/package/libheif/libheif.mk
@@ -4,7 +4,7 @@
#
################################################################################
-LIBHEIF_VERSION = 1.23.5
+LIBHEIF_VERSION = 1.23.6
LIBHEIF_SITE = https://github.com/strukturag/libheif/releases/download/v$(LIBHEIF_VERSION)
LIBHEIF_LICENSE = LGPL-3.0+
LIBHEIF_LICENSE_FILES = COPYING
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-10-19 21:53 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-19 21:28 [Buildroot] [PATCH 1/1] package/libheif: security bump version to 1.23.6 Bernd Kuhls
2026-10-19 21:53 ` Thomas Petazzoni via buildroot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.