2 Commits

Author SHA1 Message Date
Gyorgy Sarvari 260662ca32 libheif: CVE-2026-3949
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-3949

Backport the patch that is referenced by the NVD report (in the description)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:32 -07:00
Gyorgy Sarvari d4bc3fe962 libheif: upgrade 1.20.2 -> 1.21.2
Changelog:

1.21.2:
- build script for JS/WASM now supports building with JPEG2000
  and "ISO23001-17 Uncompressed" support.
- image sequence SAI data now works when using the OpenH264 decoder plugin

1.21.1:
- This patch release only fixes a build error with some GCC versions
  because of a missing #include.

1.21.0:
- CVE-2025-68431 fixed
- This release adds full support for reading and writing HEIF image sequences.
- libheif will now encode HEIF image sequences with all included codecs.
- Since HEIF image sequences are very similar to MP4 videos, this new version
  is also capable of decoding most MP4 videos (without audio, of course).
- Support for image sequences with alpha channels. For most codecs, the alpha
  channel will be stored in a separate, auxiliary, monochrome track. For
  ISO/IEC 23001-17 (uncompressed) streams, the alpha channel is stored in
  the main video track.
- Support for sequence track edit lists to define the number of sequence
  repetitions (without actually repeating the video data).
- New encoder plugin using x264 to write H.264-compressed video streams and images.
- The FFmpeg decoder plugin will now decode both H.265 and H.264.
- Support for HEIF text items and language properties

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:17 -07:00