[CLSA-2026:1793832093] Fix CVE(s): CVE-2024-25269, CVE-2026-47247, CVE-2026-84449
Type:
security
Severity:
Important
Release date:
2026-11-04 22:41:44 UTC
Description:
* SECURITY UPDATE: fix memory leak in the heif-convert JPEG writer for >8-bit images - debian/patches/CVE-2024-25269.patch: fix memory leak in the heif-convert JPEG writer for >8-bit images - CVE-2024-25269 * SECURITY UPDATE: zero-initialise image planes so uncovered grid areas do not expose heap memory - debian/patches/CVE-2026-47247.patch: zero-initialise image planes so uncovered grid areas do not expose heap memory - CVE-2026-47247 * SECURITY UPDATE: use size_t strides in RGB to YCbCr conversion to avoid integer overflow - debian/patches/CVE-2026-84449.patch: use size_t strides in RGB to YCbCr conversion to avoid integer overflow - CVE-2026-84449
CVEs fixed:
Updated packages:
  • heif-gdk-pixbuf_1.11.0-1+deb11u2+tuxcare.els2_amd64.deb
    sha:40f9fd40f1dad016745f28ecab51441ff48c1a02
  • heif-thumbnailer_1.11.0-1+deb11u2+tuxcare.els2_amd64.deb
    sha:d65afb79356d1181b69952d552f3288f3410ba2a
  • libheif-dev_1.11.0-1+deb11u2+tuxcare.els2_amd64.deb
    sha:0eb1cfd2cf9dcb2e527e8341cc6e45ac26d01c83
  • libheif-examples_1.11.0-1+deb11u2+tuxcare.els2_amd64.deb
    sha:ea9ff023ee5840006d2836c4169d3cf759896370
  • libheif1_1.11.0-1+deb11u2+tuxcare.els2_amd64.deb
    sha:443c14c766d0a43660a3e94e2fe2d83f847e5839
  • heif-gdk-pixbuf_1.11.0-1+deb11u2+tuxcare.els2_arm64.deb
    sha:9e2dc498daba71e4ac5dfb1b5f3e907bc55d6437
  • heif-thumbnailer_1.11.0-1+deb11u2+tuxcare.els2_arm64.deb
    sha:b5b656176523aea2f0089cb6ac35f99b4c3ef9e6
  • libheif-dev_1.11.0-1+deb11u2+tuxcare.els2_arm64.deb
    sha:b352ec3a42e3a4edd342685f7be0d8d4dad530a4
  • libheif-examples_1.11.0-1+deb11u2+tuxcare.els2_arm64.deb
    sha:d4326807ba8f7600b60eb8392cc9596f14eee675
  • libheif1_1.11.0-1+deb11u2+tuxcare.els2_arm64.deb
    sha:01a4af468dd52e1a19b5bd30191b40b2d4df383d
  • heif-gdk-pixbuf_1.11.0-1+deb11u2+tuxcare.els2_armel.deb
    sha:ca12a7f74eb3f80cf94c07aea35936537095431c
  • heif-thumbnailer_1.11.0-1+deb11u2+tuxcare.els2_armel.deb
    sha:537a8fdcabadc29e8753f32edb1cad762b90e208
  • libheif-dev_1.11.0-1+deb11u2+tuxcare.els2_armel.deb
    sha:54c53cbdb7b1ec8bb45f8b282ed07cb95fb427eb
  • libheif-examples_1.11.0-1+deb11u2+tuxcare.els2_armel.deb
    sha:b35099dd56cab54864265f3ae861c03dc4b4e68b
  • libheif1_1.11.0-1+deb11u2+tuxcare.els2_armel.deb
    sha:519911b4318ab3aec6f143d86dc6635051e3b307
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.