TencentOS Server 4: libheif (TSSA-2024:0637)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0637 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Fedora: Security Advisory (FEDORA-2025-8fdb7be3cb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-666aaa6a0d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : libheif (2025-666aaa6a0d)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-666aaa6a0d advisory. Latest upstream release. It adds support for tiles and fixes reading images generated by iOS 18+. See https://github.com/strukturag/libheif/releases for more...

Fedora 41 : libheif (2025-8fdb7be3cb)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-8fdb7be3cb advisory. Latest upstream release. It adds support for tiles and fixes reading images generated by iOS 18+. See https://github.com/strukturag/libheif/releases for more...

MGASA-2024-0352 Updated libheif packages fix security vulnerability

In Libheif, insufficient checks in ImageOverlay::parse while decoding a HEIF file containing an overlay image with forged offsets can lead to an out-of-bounds read and write. CVE-2024-41311...

openSUSE Security Advisory (SUSE-SU-2024:3960-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: gdk-pixbuf-loader-libheif / libheif-devel / libheif1 / etc (SUSE-SU-2024:3960-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3960-1 advisory. - CVE-2024-41311: Fixed out-of-bounds read and write in ImageOverlay:parse due to decoding a heif file...

[SECURITY] [DSA 5796-1] libheif security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5796-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 25, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3934-1] libheif security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3934-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 22, 2024 https://wiki.debian.org/LTS -...