[CLSA-2026:1792485017] Fix CVE(s): CVE-2025-68431
Type:
security
Severity:
Important
Release date:
2026-10-20 08:30:27 UTC
Description:
* SECURITY UPDATE: heap buffer over-read in HeifPixelImage::overlay() - debian/patches/CVE-2025-68431.patch: backport upstream 85e21ad (clip right/bottom border with int64 before left/top) and b8c12a7 (fix copy width for overlays placed past the left border) in heif_image.cc and heif_context.cc - CVE-2025-68431
CVEs fixed:
Updated packages:
  • heif-gdk-pixbuf_1.11.0-1+deb11u2+tuxcare.els1_amd64.deb
    sha:69a3f3807855eb23437d5507a2161e109c1757d9
  • heif-thumbnailer_1.11.0-1+deb11u2+tuxcare.els1_amd64.deb
    sha:69d86c04cd97f5a4d47aecc089c1036d3804f321
  • libheif-dev_1.11.0-1+deb11u2+tuxcare.els1_amd64.deb
    sha:49fb8473a218bd351e3592f5dee5f3d57dda4a6f
  • libheif-examples_1.11.0-1+deb11u2+tuxcare.els1_amd64.deb
    sha:431a8ee543b5caf55866f12bc6b12127ddf68b4e
  • libheif1_1.11.0-1+deb11u2+tuxcare.els1_amd64.deb
    sha:efe812b7679715c642a94c3bcc84fcc287335ba2
  • heif-gdk-pixbuf_1.11.0-1+deb11u2+tuxcare.els1_arm64.deb
    sha:d2beb429ac79c49818b752db78a18bb39ebb8765
  • heif-thumbnailer_1.11.0-1+deb11u2+tuxcare.els1_arm64.deb
    sha:46be13180412eea483bb7268d08f2fc3abd06584
  • libheif-dev_1.11.0-1+deb11u2+tuxcare.els1_arm64.deb
    sha:61e17f3665e2f2ef9e086ec2593be84fdfbe72db
  • libheif-examples_1.11.0-1+deb11u2+tuxcare.els1_arm64.deb
    sha:b96bbb32189efa96c25d60b2d58bd013a4b0e2ab
  • libheif1_1.11.0-1+deb11u2+tuxcare.els1_arm64.deb
    sha:4394926ba46d521398c65e60616d0236eb10a73c
  • heif-gdk-pixbuf_1.11.0-1+deb11u2+tuxcare.els1_armel.deb
    sha:91e0204f2a4c6c90909d420b45555f713f439801
  • heif-thumbnailer_1.11.0-1+deb11u2+tuxcare.els1_armel.deb
    sha:0a345904c4ac915d6cf806bc3e09ad583e4a4e05
  • libheif-dev_1.11.0-1+deb11u2+tuxcare.els1_armel.deb
    sha:dd710b092da492b2dd820802d1fa850f28be66c9
  • libheif-examples_1.11.0-1+deb11u2+tuxcare.els1_armel.deb
    sha:b81550b52ed9bc1d0f3b5971ef51ef43ec1f6915
  • libheif1_1.11.0-1+deb11u2+tuxcare.els1_armel.deb
    sha:95685cf0b05b57021f16e079db5bf8be703bb9ef
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.