openSUSE Leap 16.0 libheif Moderate Heap Buffer Over-Read 2026-20076

This update for libheif fixes the following issues: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage::overlay()` via crafted HEIF file that exercises the overlay image item path (bsc#1255735). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-165=1

- openSUSE Leap 16.0: gdk-pixbuf-loader-libheif-1.19.7-160000.3.1 libheif-aom-1.19.7-160000.3.1 libheif-dav1d-1.19.7-160000.3.1 libheif-devel-1.19.7-160000.3.1 libheif-ffmpeg-1.19.7-160000.3.1 libheif-jpeg-1.19.7-160000.3.1 libheif-openjpeg-1.19.7-160000.3.1 libheif-rav1e-1.19.7-160000.3.1 libheif-svtenc-1.19.7-160000.3.1 libheif1-1.19.7-160000.3.1

- openSUSE Leap 16.0:

gdk-pixbuf-loader-libheif-1.19.7-160000.3.1

libheif-aom-1.19.7-160000.3.1

libheif-dav1d-1.19.7-160000.3.1

libheif-devel-1.19.7-160000.3.1

libheif-ffmpeg-1.19.7-160000.3.1

libheif-jpeg-1.19.7-160000.3.1

libheif-openjpeg-1.19.7-160000.3.1

libheif-rav1e-1.19.7-160000.3.1

libheif-svtenc-1.19.7-160000.3.1

libheif1-1.19.7-160000.3.1

* bsc#1255735 References: *

*