Packages / Alpine Linux 3.23 / heif-thumbnailer

[Source: libheif]

Package: heif-thumbnailer (1.23.0-r0)

Decoder und Encoder für das HEIF-Dateiformat nach ISO/IEC 23008-12:2017 (Thumbnailer)

Other Packages Related to heif-thumbnailer:

  • dep: so:libc.musl-aarch64.so.1

    Package not available

  • dep: so:libgcc_s.so.1

    Package not available

  • dep: so:libheif.so.1

    Package not available

  • dep: so:libpng16.so.16

    Package not available

  • dep: so:libstdc++.so.6

    Package not available

Download heif-thumbnailer

ArchitecturePackage sizeInstalled sizeFilesPackage
aarch6412 KiB66 KiBlist of filesNot published
x86_6411 KiB30 KiBlist of filesNot published

Paketdateiabdeckung (nicht beobachtet)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.23 main aarch64

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.23.0-r0v3.23 / mainaarch64Alpine Linux 3.23 · main · aarch6412 KiB66 KiBNot reported
1.23.0-r0v3.23 / mainx86_64Alpine Linux 3.23 · main · x86_6411 KiB30 KiBNot reported

Field source: Alpine Linux 3.23 main aarch64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-50142]

Published:

libheif: CVE-2026-50142

High(7.5)Unbekannt
Details (2)

  • 1.23.0-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.23.0-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2026-32740]

Published:

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 6

High(8.8)Unbekannt
Details (2)

  • 1.23.0-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.23.0-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2026-32739]

Published:

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_duration(), consuming 10

Medium(6.5)Unbekannt
Details (2)

  • 1.23.0-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.23.0-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2026-32738]

Published:

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes an unsigned integer unde

Medium(6.5)Unbekannt
Details (2)

  • 1.23.0-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.23.0-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2025-68431]

Published:

libheif vulnerabilities

High(7.3)Unbekannt
Details (2)

  • 1.23.0-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 1.21.2-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.23.0-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 1.21.2-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2023-49462]

Published:

libheif: CVE-2023-49462

High(7.5)Unbekannt
Details (2)

  • 1.23.0-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.23.0-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2023-49463]

Published:

libheif: CVE-2023-49463

High(7.5)Unbekannt
Details (2)

  • 1.23.0-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.23.0-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.23.0-r0 / aarch64Beobachtet Sep 1, 2026apk-checksum Q1jS+ZLpPVcf…nyvUaGg=Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (apk-checksum): Q1jS+ZLpPVcfgshdiBBoignyvUaGg=

Field source: Alpine Linux 3.23 main aarch64

1.23.0-r0 / x86_64Beobachtet Sep 1, 2026apk-checksum Q1W+rkt2pEZF…GWvzyjQ=Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (apk-checksum): Q1W+rkt2pEZFiRP8FbiXkvGWvzyjQ=

Field source: Alpine Linux 3.23 main x86_64

Quellen

  • Alpine Linux 3.23 main aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    v3-23-main-aarch64:3c193cdb4a3ae8c5a08d7ef5282971be76249c13d1db367323e06212ec30d230

    Repository-signature verification record
    Signed-object SHA-256
    f399e7803b7b52f81a6307739a8951c6edcdbf54e825d0d34c309a2cd305569d
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Alpine Linux 3.23 main x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    v3-23-main-x86-64:aecb4d45d58b2e08e09c841a9132ab6f77239d8117232bea8385b33090e25fbb

    Repository-signature verification record
    Signed-object SHA-256
    eae8fa0146127c33cd9a723915001f535277687349397f0d34f313638e33fc18
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026