CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

graphics/libheif1.23.6

ISO/IEC 23008-12:2017 HEIF file format de- and encoder

Maintainer
makc@FreeBSD.org
Packages
libheif 1.23.6
Upstream
up to date
CPE
struktur:libheif from the port
WWW
https://github.com/strukturag/libheif
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (88)

Max Brazhnikov (makc) · 1.23.6
graphics/libheif: Improve

Group options by codec and update descriptions
ecf241ab46
Max Brazhnikov (makc) · 1.23.6
graphics/libheif: Update to 1.23.6

- Add an X264 option (AVC encoding via multimedia/libx264), on by default.

Release notes:	https://github.com/strukturag/libheif/releases/tag/v1.23.6
PR:		299263
daa64daac3
Gleb Popov (arrowd) · 1.22.2_5
*: Bump PORTREVISION on multimedia/x265 consumers

PR:		299194
e8660dbf74
Gleb Popov (arrowd) · 1.22.2_4
*: Bump PORTREVISION on multimedia/x265 consumers

PR:		298481
d98c0147b3
Po-Chuan Hsieh (sunpoet) · 1.22.2_3
graphics/openjph: Update to 0.32.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
728e27ab70
Po-Chuan Hsieh (sunpoet) · 1.22.2_2
graphics/openjph: Update to 0.31.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
0729b4b837
Po-Chuan Hsieh (sunpoet) · 1.22.2_1
graphics/openjph: Update to 0.30.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
e5d2df7136
Max Brazhnikov (makc) · 1.22.2
graphics/libheif: Update to 1.22.2

Release notes:	https://github.com/strukturag/libheif/releases/tag/v1.22.0
		https://github.com/strukturag/libheif/releases/tag/v1.22.1
		https://github.com/strukturag/libheif/releases/tag/v1.22.2
990ee581e6
Po-Chuan Hsieh (sunpoet) · 1.21.2_3
graphics/openjph: Update to 0.27.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
926bc32d6a
Jan Beich (jbeich) · 1.21.2_2
graphics/libheif: unbreak after 17339df99b0c

libheif/plugins/encoder_svt.cc:850:37: error: assigning to 'PredStructure' from \
incompatible type 'int'
  850 | 	svt_config.pred_structure = 2; // RANDOM_ACCESS
      |                                     ^

Reported by:	Tatsuki Makino, mfechner
Regressed by:	https://gitlab.com/AOMediaCodec/SVT-AV1/-/commit/3b5e5e8d4dda
Obtained from:	upstream (open PR)
2a7e351195
Jan Beich (jbeich) · 1.21.2_1
multimedia/svt-av1: update to 4.0.0

Changes:	https://gitlab.com/AOMediaCodec/SVT-AV1/-/releases/v4.0.0
Reported by:	GitLab (notify releases)
4b390bd6db
Max Brazhnikov (makc) · 1.21.2
graphics/libheif: Update to 1.21.2

Release notes: https://github.com/strukturag/libheif/releases/tag/v1.20.2
               https://github.com/strukturag/libheif/releases/tag/v1.21.0
               https://github.com/strukturag/libheif/releases/tag/v1.21.2
e2df165911
Max Brazhnikov (makc) · 1.20.1
graphics/libheif: Update to 1.20.1

Release notes: https://github.com/strukturag/libheif/releases/tag/v1.20.0
               https://github.com/strukturag/libheif/releases/tag/v1.20.1
21b2f47bee
Po-Chuan Hsieh (sunpoet) · 1.19.8_7
graphics/openjph: Update to 0.26.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
d6c9802a4a
Baptiste Daroussin (bapt) · 1.19.8_6
multimedia/ffmpeg: bump revision to chase lib version change
18ea9c7108
Robert Clausecker (fuz) · 1.19.8_5
*/*: bump PORTREVISION following lib/libx265.so soname change

Reported by:	vvd
e6242cd11e
Po-Chuan Hsieh (sunpoet) · 1.19.8_4
graphics/openjph: Update to 0.25.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
4d835e846e
Po-Chuan Hsieh (sunpoet) · 1.19.8_3
graphics/openjph: Update to 0.24.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
49b2153e79
Koichiro Iwao (meta) · 1.19.8_2
*/*: Bump multimedia/openh264 consumers after dc94e01

net/freerdp{,3} have been already bumped in e447cd0, so not being bumped
again.

Bumped by the following one-liner:

  $ git grep -l libopenh264 | \
      grep '^.*/.*/Makefile$'| \
      xargs -t -n1 portedit bump-revision -i

Approved by:	portmgr (blanket)
4a75e65503
Jan Beich (jbeich) · 1.19.8_1
multimedia/rav1e: update to 0.8.0

Changes:	https://github.com/xiph/rav1e/releases/tag/v0.8.0
Reported by:	GitHub (watch releases)
64cbb40909
Max Brazhnikov (makc) · 1.19.8
graphics/libheif: update to 1.19.8
a65d1d21c0
Charlie Li (vishwin) · 1.19.7
gnome.mk: rename gdkpixbuf2 to gdkpixbuf to prepare for port move

The GTK 1-based gdk-pixbuf has not existed for some time.

No functional or package changes.
e87d8134a3
Max Brazhnikov (makc) · 1.19.7
graphics/libheif: update to 1.19.7

Release notes: https://github.com/strukturag/libheif/releases/tag/v1.19.6
               https://github.com/strukturag/libheif/releases/tag/v1.19.7
65d9058e7c
Jan Beich (jbeich) · 1.19.5_2
multimedia/svt-av1: update to 3.0.0

Changes:	https://gitlab.com/AOMediaCodec/SVT-AV1/-/releases/v3.0.0
Reported by:	/r/AV1
9253060fd1
Po-Chuan Hsieh (sunpoet) · 1.19.5_1
graphics/openjph: Update to 0.21.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
8843447582
Max Brazhnikov (makc) · 1.19.5
graphics/libheif: update to 1.19.5

Release notes: https://github.com/strukturag/libheif/releases/tag/v1.19.4
               https://github.com/strukturag/libheif/releases/tag/v1.19.5
65a4cd13c8
Baptiste Daroussin (bapt) · 1.19.3_1
graphics/libheif: chase upgrade of openjph

PR: 	282543
9c6fd40d48
Max Brazhnikov (makc) · 1.19.3
graphics/libheif: update to 0.19.3

Release notes: https://github.com/strukturag/libheif/releases/tag/v1.19.2
               https://github.com/strukturag/libheif/releases/tag/v1.19.3
167ecf6119
Xin LI (delphij) · 1.19.1_1
graphics/libheif: restore API compatibility.

PR:		ports/282675
Approved by:	maintainer (makc@)
b280ef6a26
Max Brazhnikov (makc) · 1.19.1
graphics/libheif: update to 1.19.1

Drop stale patch.
Add new options and enable them by default:
 - OPENH264 for AVC decoding,
 - OPENJPH for HT-J2K encoding.

Release notes: https://github.com/strukturag/libheif/releases/tag/v1.19.0
               https://github.com/strukturag/libheif/releases/tag/v1.19.1
61a70ba8b9
Robert Clausecker (fuz) · 1.18.2_1
*/*: bump port revisions of dependents following x265 updates

PR:		281680
90e15809d9
Max Brazhnikov (makc) · 1.18.2
graphics/libheif: update to 1.18.2
f67fb578ae
Max Brazhnikov (makc) · 1.18.1
graphics/libheif: do not create compatibility link

Reported by:	sunpoet
68e75b2e5c
Max Brazhnikov (makc) · 1.18.1
graphics/libheif: update to 1.18.1

Release notes:
	https://github.com/strukturag/libheif/releases/tag/v1.18.0
	https://github.com/strukturag/libheif/releases/tag/v1.18.1
7eac71bf19
Jan Beich (jbeich) · 1.17.6_2
multimedia/svt-av1: update to 2.0.0

Changes:	https://gitlab.com/AOMediaCodec/SVT-AV1/-/releases/v2.0.0
Reported by:	Repology, /r/AV1
0f3f19c00c
Jan Beich (jbeich) · 1.17.6_1
multimedia/rav1e: update to 0.7.0

Changes:	https://github.com/xiph/rav1e/releases/tag/v0.7.0
Reported by:	GitHub (watch releases)
d513c9a9ea
Daniel Engberg (diizzy) · 1.17.6
graphics/libheif: Update to 1.17.6

Fixes following CVEs:
CVE-2023-49462
CVE-2023-49463

Changelog: https://github.com/strukturag/libheif/releases/tag/v1.17.6

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-49462
https://nvd.nist.gov/vuln/detail/CVE-2023-49463

PR:		275873
Reviewed by:	makc (maintainer)
Sponsored by:	Blinkinblox
68e951bfdd
Jan Beich (jbeich) · 1.17.4_1
multimedia/x265: force rebuild consumers after 645419c8e465

$ ffmpeg
ld-elf.so.1: Shared object "libx265.so.192" not found, required by "libavcodec.so.60"

PR:		274526
Reported by:	vvd (on dev-commits-ports-main@ list)
Reported by:	Kevin Oberman (on multimedia@ list)
10be66c9da
Daniel Engberg (diizzy) · 1.17.4
graphics/libheif: Update to 1.17.4

Changelog: https://github.com/strukturag/libheif/releases/tag/v1.17.4

PR:		275311
Reviewed by:	makc (maintainer)
Sponsored by:	Blinkinblox
06b8dee07d
Daniel Engberg (diizzy) · 1.17.3
graphics/libheif: Update to 1.17.3

Changelog: https://github.com/strukturag/libheif/releases/tag/v1.17.3

PR:		274898
Reviewed by:	makc (maintainer)
Sponsored by:	Blinkinblox
c5d6c38ab5
Daniel Engberg (diizzy) · 1.17.1
graphics/libheif: Update to 1.17.1

- Replace libde265 with FFmpeg as HEVC decoder
- Enable JPEG and OpenJPEG 2000 support
- Disable Doxygen detection

While FFmpeg's default configuration can be a bit on the heavy side
it's also relatively easy to tailor it to fit your needs and if libheif
is needed you're likely to have other related ports depending on FFmpeg
installed. Support is relatively new so there may be bugs lurking.
Looking back libde265 has also been hit by several CVEs which is another
reason for the switch.

References:
https://www.opencve.io/cve?vendor=struktur&product=libde265

PR:		274546
Reviewed by:	makc (maintainer)
5b0594f2a4
Jan Beich (jbeich) · 1.16.1_2
devel/cargo-c: update to 0.9.27

- Rebuild consumers of consumers after SONAME change

Changes:	https://github.com/lu-zero/cargo-c/releases/tag/v0.9.27
Reported by:	GitHub (watch releases)
d377612f4a
Jan Beich (jbeich) · 1.16.1_1
multimedia/dav1d: update to 1.3.0

Changes:	https://code.videolan.org/videolan/dav1d/-/tags/1.3.0
Reported by:	Repology
4fb0230f7f
Daniel Engberg (diizzy) · 1.16.1
graphics/libheif: Update to 1.16.1

Changelog:
https://github.com/strukturag/libheif/releases/tag/v1.16.0
https://github.com/strukturag/libheif/releases/tag/v1.16.1

Approved by:	makc (implicit via private email)
6735ac880e
Daniel Engberg (diizzy) · 1.15.2
graphics/libheif: Update to 1.15.2

Backport upstream commits be16fc6767c8b3a2f6e78efdc9d2b6f07e3e558a and
4fd25823d16ccbe082ad3be9b96656296284d9b4

Changelog: https://github.com/strukturag/libheif/releases/tag/v1.15.2
References:
https://github.com/strukturag/libheif/commit/be16fc6767c8b3a2f6e78efdc9d2b6f07e3e558a
https://github.com/strukturag/libheif/commit/4fd25823d16ccbe082ad3be9b96656296284d9b4

Approved by:	makc (implicit via private email)
4db69ff968
Max Brazhnikov (makc) · 1.15.1
graphics/libheif: Update to 1.15.1

Release notes: https://github.com/strukturag/libheif/releases/tag/v1.15.0
e6884568dc
Max Brazhnikov (makc) · 1.14.2
graphics/libheif: Update to 1.14.2

Changes: https://github.com/strukturag/libheif/releases/tag/v1.14.2
529157260b
Max Brazhnikov (makc) · 1.14.1
graphics/libheif: Update to 1.14.1

- Enable svt-av1 encoder by default

Release notes: https://github.com/strukturag/libheif/releases/tag/v1.14.1
9d0d2863a8
Jan Beich (jbeich) · 1.14.0_1
graphics/libheif: rename SVT to SVTAV1 for consistency

- ffmpeg and libavif already use SVTAV1 option
- libheif doesn't support SVT-HEVC for *.heif
- SVTAV1 can be globally disabled via OPTIONS_UNSET

PR:		268102
Approved by:	makc (maintainer)
a2b734c4ee
Max Brazhnikov (makc) · 1.14.0_1
graphics/libheif: disable SVT option to fix dependent ports

Reported by:	bofh@
e6f884208f