Packages / Alpine Linux 3.21 / heif-thumbnailer

[Source: libheif]

Package: heif-thumbnailer (1.19.5-r0)

Decoder und Encoder für das HEIF-Dateiformat nach ISO/IEC 23008-12:2017 (Thumbnailer)

Other Packages Related to heif-thumbnailer:

  • dep: so:libc.musl-aarch64.so.1

    Package not available

  • dep: so:libgcc_s.so.1

    Package not available

  • dep: so:libheif.so.1

    Package not available

  • dep: so:libpng16.so.16

    Package not available

  • dep: so:libstdc++.so.6

    Package not available

Download heif-thumbnailer

ArchitecturePackage sizeInstalled sizeFilesPackage
aarch6411 KiB66 KiBlist of filesNot published
x86_6410 KiB30 KiBlist of filesNot published

Paketdateiabdeckung (nicht beobachtet)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.21 community aarch64

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.19.5-r0v3.21 / communityaarch64Alpine Linux 3.21 · community · aarch6411 KiB66 KiBNot reported
1.19.5-r0v3.21 / communityx86_64Alpine Linux 3.21 · community · x86_6410 KiB30 KiBNot reported

Field source: Alpine Linux 3.21 community aarch64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-50142]

Published:

libheif: CVE-2026-50142

High(7.5)Unbekannt
Details (2)

  • 1.19.5-r0 · aarch64 · v3.21

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2026-32740]

Published:

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 6

High(8.8)Unbekannt
Details (2)

  • 1.19.5-r0 · aarch64 · v3.21

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2026-32739]

Published:

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_duration(), consuming 10

Medium(6.5)Unbekannt
Details (2)

  • 1.19.5-r0 · aarch64 · v3.21

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2026-32738]

Published:

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes an unsigned integer unde

Medium(6.5)Unbekannt
Details (2)

  • 1.19.5-r0 · aarch64 · v3.21

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2025-68431]

Published:

libheif vulnerabilities

High(7.3)Unbekannt
Details (2)

  • 1.19.5-r0 · aarch64 · v3.21

    Unbekannt · Behoben: 1.21.2-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unbekannt · Behoben: 1.21.2-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2023-49462]

Published:

libheif: CVE-2023-49462

High(7.5)Unbekannt
Details (2)

  • 1.19.5-r0 · aarch64 · v3.21

    Unbekannt · Behoben: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unbekannt · Behoben: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2023-49463]

Published:

libheif: CVE-2023-49463

High(7.5)Unbekannt
Details (2)

  • 1.19.5-r0 · aarch64 · v3.21

    Unbekannt · Behoben: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unbekannt · Behoben: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.19.5-r0 / aarch64Beobachtet Sep 1, 2026apk-checksum Q1S7bN6fDvX3…W1pnxJk=Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (apk-checksum): Q1S7bN6fDvX3tZZ/WSgE1DW1pnxJk=

Field source: Alpine Linux 3.21 community aarch64

1.19.5-r0 / x86_64Beobachtet Sep 1, 2026apk-checksum Q1BIrpRTs1ZL…moHYDXs=Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (apk-checksum): Q1BIrpRTs1ZLQ3uKha1FQ3moHYDXs=

Field source: Alpine Linux 3.21 community x86_64

Quellen

  • Alpine Linux 3.21 community aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    v3-21-community-aarch64:6d1639bb68111bc6380b811544def4ae1402cd2cfa7951198cfe3e436c16d7d4

    Repository-signature verification record
    Signed-object SHA-256
    279f8a6a83fc0feb444bebd893ca04cca06191038774aacfd1e7cd82c9ce7086
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Alpine Linux 3.21 community x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    v3-21-community-x86-64:794508fb0cc85267c4bdac308aaabf05686b1e864a5e51a294e0a00f8eaf8409

    Repository-signature verification record
    Signed-object SHA-256
    7ef0a4300dff2958d96d72458a15ac39d41d7b8c54cdd093f4f42277790a3eb3
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026