Ubuntu USN · USN-8454-1

libheif vulnerabilities

Published: Thu, 18 Jun 2026 16:41

CVE-2026-32740CVE-2026-3950CVE-2026-41071CVE-2026-32739CVE-2026-32814CVE-2026-32741CVE-2026-32738CVE-2026-32882CVE-2026-41069

Summary

Several security issues were fixed in libheif.

Details

Elhanan Haenel discovered that libheif incorrectly handled certain malformed HEIF sequence files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-32738) Elhanan Haenel discovered that libheif incorrectly handled certain malformed HEIF sequence files, leading to an infinite loop. An attacker could possibly use this issue to cause libheif to use excessive resources, resulting in a denial of service. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-32739) Elhanan Haenel discovered that libheif incorrectly handled certain crafted HEIF/AVIF image files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-32740) It was discovered that libheif incorrectly handled certain crafted HEIF files containing mask images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-32741) It was discovered that libheif incorrectly handled certain crafted grid-based HEIF/AVIF files. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-32814) It was discovered that libheif incorrectly handled certain crafted HEIF files when compositing overlay images. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2026-32882) It was discovered that libheif incorrectly handled certain crafted files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-3950) It was discovered that libheif incorrectly handled certain malformed HEIF sequence files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-41069) It was discovered that libheif incorrectly handled certain crafted HEIF sequence files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-41071)

Recommended actions per Ubuntu release

StackPatch playbook auto-generated per release codename and per affected package.

Ubuntu bionic

libheif→1.1.0-2ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.1.0-2ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif=1.1.0-2ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libheif-dev→1.1.0-2ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.1.0-2ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-dev=1.1.0-2ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libheif-examples→1.1.0-2ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.1.0-2ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-examples=1.1.0-2ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libheif1→1.1.0-2ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.1.0-2ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif1=1.1.0-2ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.

Ubuntu focal

libheif→1.6.1-1ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.6.1-1ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif=1.6.1-1ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
heif-gdk-pixbuf→1.6.1-1ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.6.1-1ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-gdk-pixbuf=1.6.1-1ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
heif-thumbnailer→1.6.1-1ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.6.1-1ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-thumbnailer=1.6.1-1ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libheif-dev→1.6.1-1ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.6.1-1ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-dev=1.6.1-1ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libheif-examples→1.6.1-1ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.6.1-1ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-examples=1.6.1-1ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libheif1→1.6.1-1ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.6.1-1ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif1=1.6.1-1ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.

Ubuntu jammy

libheif→1.12.0-2ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.12.0-2ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif=1.12.0-2ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
heif-gdk-pixbuf→1.12.0-2ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.12.0-2ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-gdk-pixbuf=1.12.0-2ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
heif-thumbnailer→1.12.0-2ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.12.0-2ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-thumbnailer=1.12.0-2ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libheif-dev→1.12.0-2ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.12.0-2ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-dev=1.12.0-2ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libheif-examples→1.12.0-2ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.12.0-2ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-examples=1.12.0-2ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libheif1→1.12.0-2ubuntu0.1~esm3apt_upgrade_esm
Fixed at 1.12.0-2ubuntu0.1~esm3 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif1=1.12.0-2ubuntu0.1~esm3
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.

Ubuntu noble

libheif→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-gdk-pixbuf→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-gdk-pixbuf
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-thumbnailer→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-thumbnailer
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-dev→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-examples→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-examples
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-aomdec→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-aomdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-aomenc→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-aomenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-dav1d→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-dav1d
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-ffmpegdec→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-ffmpegdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-j2kdec→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-j2kdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-j2kenc→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-j2kenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-jpegdec→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-jpegdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-jpegenc→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-jpegenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-libde265→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-libde265
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-rav1e→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-rav1e
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-svtenc→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-svtenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-x265→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-x265
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif1→1.17.6-1ubuntu4.4apt_upgrade
Standard apt upgrade. Install 1.17.6-1ubuntu4.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu questing

libheif→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-gdk-pixbuf→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-gdk-pixbuf
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-thumbnailer→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-thumbnailer
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-view→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-view
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-dev→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-examples→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-examples
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-aomdec→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-aomdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-aomenc→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-aomenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-dav1d→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-dav1d
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-ffmpegdec→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-ffmpegdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-j2kdec→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-j2kdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-j2kenc→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-j2kenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-jpegdec→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-jpegdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-jpegenc→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-jpegenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-kvazaar→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-kvazaar
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-libde265→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-libde265
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-rav1e→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-rav1e
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-svtenc→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-svtenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-x265→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-x265
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugins-all→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugins-all
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif1→1.20.2-1ubuntu0.4apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu resolute

libheif→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-gdk-pixbuf→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-gdk-pixbuf
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-thumbnailer→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-thumbnailer
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-view→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-view
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-dev→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-examples→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-examples
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-aomdec→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-aomdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-aomenc→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-aomenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-dav1d→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-dav1d
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-ffmpegdec→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-ffmpegdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-j2kdec→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-j2kdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-j2kenc→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-j2kenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-jpegdec→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-jpegdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-jpegenc→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-jpegenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-kvazaar→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-kvazaar
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-libde265→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-libde265
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-rav1e→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-rav1e
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-svtenc→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-svtenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-x265→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-x265
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugins-all→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugins-all
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif1→1.21.2-3ubuntu0.1apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Are YOU affected by USN-8454-1?

5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8454-1 (and any other live CVE) applies. Anonymous, no signup.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Read the bash source first

Want this automated for your servers?

StackPatch runs this match against YOUR installed packages every hour

Free (3 servers) / from $9/mo (14-day free trial) / Solo $9/mo / Pro $29/mo / Team $79/mo. Indie pricing.

Start free trial →See StackPatch →Live audit log →