Security
Security
Multiple vulnerabilities have been found in libheif, the worst of which could result in arbitrary code execution.
| Package | media-libs/libheif on all architectures |
|---|---|
| Affected versions | < 1.23.7 |
| Unaffected versions | >= 1.23.7 |
libheif is an ISO/IEC 23008-12 HEIF and AVIF (AV1 Image File Format) file format decoder and encoder. HEIC and AVIF are new image file formats employing HEVC (H.265) or AV1 image coding, respectively, for the best compression ratios currently possible.
Multiple vulnerabilities have been discovered in libheif. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All libheif users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libheif-1.23.7"