libheif_1.23.2-1_source.changes ACCEPTED into unstable

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 27 Aug 2026 22:59:53 +0200
Source: libheif
Built-For-Profiles: noudeb
Architecture: source
Version: 1.23.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers <[email protected]>
Changed-By: Joachim Bauch <[email protected]>
Changes:
 libheif (1.23.2-1) unstable; urgency=medium
 .
   * New upstream version 1.23.2
   * Fixes heap buffer overflow in scale_nearest_neighbor() via duplicate
     alpha planes from nested iden/auxl items. See upstream commit f4fb8bd.
   * Fixes out-of-bounds read and write in derived-item and pixel-plane
     handling. Upstream commits f4fb8bd, cd365da, bc7cf37, c0a63aa,
     1fcada5, c664797, 328c4f9, 3d81d56, 578ab47 and 4dd71d7.
   * Fixes missing memory limits when doing brotli/zlib decompression.
     See upstream commits 21893e8 and 6b6757b.
   * Fixes CPU and memory amplification when decoding derived-image
     references (grid, iovl, iden). See upstream commit 30b52a4.
   * Fixes non-terminating decode loops and unbounded memory when decoding
     sequence images. See upstream commit 3a7a69a.
   * Fixes out-of-bounds write in the unci encoder.
     See upstream commit e65071f.
   * Fixes heap out-of-bounds read in the inline-mask region API.
     See upstream commit 646d85f.
Checksums-Sha1:
 656030a2fe2742d2a5745fd8d1f6d2c1c43a884d 3844 libheif_1.23.2-1.dsc
 cfe86c36f5dbe32cdaa55cc28cb3f6a6e6cf96ac 2111195 libheif_1.23.2.orig.tar.gz
 acc70c817d36c27f57d559055cbffa0ee4cb3056 14544 libheif_1.23.2-1.debian.tar.xz
 fc7b501f23553a8feaafd3f028301aac22d94fc9 16098 libheif_1.23.2-1_source.buildinfo
Checksums-Sha256:
 bd30bf840cc49d4959f9ecea941f6f279c9b5d6cd860222cf1901de42edb49a6 3844 libheif_1.23.2-1.dsc
 8bd5d41d19dc84536d118b04774709f244df6104ef66d623dad5fa4650143405 2111195 libheif_1.23.2.orig.tar.gz
 b860d1229da544554b6fea087a8ba3a2c9d27a639f506adcf10d77de61f021bb 14544 libheif_1.23.2-1.debian.tar.xz
 94a542bc9db529bf676da4634921d84cc6511e1bf86aece722580128d0298ea0 16098 libheif_1.23.2-1_source.buildinfo
Files:
 e8afd89e22ec7b0708849a8f5db0971e 3844 libs - libheif_1.23.2-1.dsc
 a23d847fc18f1ecf499232fb937d584f 2111195 libs - libheif_1.23.2.orig.tar.gz
 577c979c94421f983ca707ac685b5a1b 14544 libs - libheif_1.23.2-1.debian.tar.xz
 596d7c3617d580bd5afefd4ea8209463 16098 libs - libheif_1.23.2-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEvj2K8Ga27IB5Zn/Xd8HSLVPhXwIFAmqQp3wACgkQd8HSLVPh
XwL/1RAAwg8pnnBtXPsxjk3lY5CsALDdDhp/juKT9cF9iuMu92wso5SMPlbEkC5C
XFErhJaVIrhp3xkh9lodiDXL1MI/qkwciIeLgOUt+YtYMqqEbVYNYkuygzMI9xL2
KEQmL2kqU2DTr8Pk6GwxRNR4aQ3+GAG5FRa7lE61kFDjDqt5f+F6Ozknpr94MvTT
LAiQCFGkwrBvMLtSOGAd9Iz3+fSLfpc8NlqB+HhbYz/AkX9badCAbPvjlccpzd+I
wIfqCWODQlNiCfC8YUSBhZwefZApLzJdz/5ZeiJm5IlERTtPNSaARMsC3R98rdbl
vDN6tDgEjJclnXYn5/aQtD26weTurthfYtdOHZBJHKrjH8XgRq0BMTMQjuGw2MNE
bt0JUYkdG8c3TiiWJEimGBWwwlqtoIvZi+M+yBeojJR1sl/PdIO3mSfHZp3jb6LI
A8gpWqU3Jfl2IjXgc27zhU5n/9hX95mMqLvQO64sIEldh1rLr2+OopMKzZrpcySx
skyBmJV6zGCuHI8z58g5C3ZVDY4b/5DZKsj17yzFB0b/YeAZXLOQcmncOlpwqjYF
68+wVPyk3fKN+0no3i8uPJN1RxebYXqAVGUt4y0AdMtrkqRV4jFsGz1auTHRGXiM
qLFbYUsHF7/WRCoQ9mCrO1WmoKk+/q1ZIZhNcClmcLrJE/rwlFY=
=RvUZ
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCapCtqAAKCRCb9qggYcy5
IXXDAP9eF4BoVDfjyFx9iWuUCrS9hpqF3Y2hy0PcRO9O/31cvgEAlZcgmNw2kRf3
ktI0d9e+QgAit1OIwFM9qtuzvO0DmQg=
=u4zf
-----END PGP SIGNATURE-----