Files
Leon Anavi 17afdec9d8 libheif: Upgrade 1.21.2 -> 1.23.1
Upgrade to release 1.23.1.

New features:
- FFmpeg decoder plugin gains AV1, VVC, JPEG, and JPEG 2000/HTJ2K
  decoding
- SVT-AV1 encoder: new tune=iq and ms-ssim tune parameters
- C++ API: added getters/setters for the CLLI and MDCV HDR metadata
  boxes
- Sequence decoder now scales the alpha auxiliary track to the main
  image size

Bug fixes:
- Fixed pixi box writing for multi-channel images
- Corrected the placement of the TAI clock_type field into the top
  2 bits
- Empty/unset plugin directory is no longer scanned

Security fixes:
- CVE-TBD (GHSA-jc8f-p23p-5hjg) Integer underflow in Fraction
  constructor via double clap transform application
- CVE-TBD (GHSA-73p7-m7gg-w2jv) Out-of-bounds read in uncompressed
  unci tile range slicing
= CVE-TBD (GHSA-xpw3-9rhw-482x) Heap out of bounds write in libheif
  uncompressed encoder when writing images with mismatched
  auxiliary alpha dimensions
- CVE-TBD (GHSA-9ww4-9v47-m7pj) Reachable assertion in
  HeifContext::get_track() aborts on a valid-but-empty HEIF
  sequence file
- (GHSA-46rp-pcq2-rpmr) Heap out-of-bounds write in the
  uncompressed encoder for RRGGBB images with interleaved bit-depth
  lower or equal to 8

Remove CVE-2026-3949.patch because the fix has been included in
the source code for this release of libheif.

This work was sponsored by GOVCERT.LU.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-07-07 11:22:41 -07:00

27 lines
1.4 KiB
BlitzBasic

SUMMARY = "libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF (AV1 Image File Format) file format decoder and encoder"
HOMEPAGE = "https://github.com/strukturag/libheif"
LICENSE = "LGPL-3.0-only"
LIC_FILES_CHKSUM = "file://COPYING;md5=9c0edc7369719b2c47d44e80ba74b4b7"
LICENSE_FLAGS = "commercial"
COMPATIBLE_MACHINE:powerpc64le = "null"
SRC_URI = "git://github.com/strukturag/libheif.git;protocol=https;branch=master;tag=v${PV}"
SRCREV = "2c4bbb54c2738d4a5efbbe3e5fa1d5d76bb88eb0"
inherit cmake pkgconfig
DEPENDS += "gdk-pixbuf x265 libde265 tiff zlib libpng libwebp"
PACKAGECONFIG += "dav1d jpeg jpeg2000 ffmpeg aom openh264"
PACKAGECONFIG:remove:riscv32 = "openh264"
PACKAGECONFIG[aom] = "-DWITH_AOM_ENCODER=ON -DWITH_AOM_DECODER=ON,-DWITH_AOM_ENCODER=OFF -DWITH_AOM_DECODER=OFF,aom"
PACKAGECONFIG[dav1d] = "-DWITH_DAV1D=ON, -DWITH_DAV1D=OFF,dav1d"
PACKAGECONFIG[svt-av1] = "-DWITH_SvtEnc=ON,-DWITH_SvtEnc=OFF,svt-av1"
PACKAGECONFIG[jpeg] = "-DWITH_JPEG_DECODER=ON -DWITH_JPEG_ENCODER=ON,-DWITH_JPEG_ENCODER=OFF -DWITH_JPEG_DECODER=OFF,jpeg"
PACKAGECONFIG[ffmpeg] = "-DWITH_FFMPEG_DECODER=ON,-DWITH_FFMPEG_DECODER=OFF,ffmpeg"
PACKAGECONFIG[jpeg2000] = "-DWITH_OpenJPEG_ENCODER=ON -DWITH_OpenJPEG_DECODER=ON,-DWITH_OpenJPEG_ENCODER=OFF -DWITH_OpenJPEG_DECODER=OFF,openjpeg"
PACKAGECONFIG[openh264] = ",,openh264"
FILES:${PN} += "${libdir}/libheif ${datadir}/thumbnailers ${libdir}/gdk-pixbuf*"