Ubuntu USN · USN-8479-1

libheif vulnerabilities

Published: Mon, 29 Jun 2026 15:54

CVE-2026-47178CVE-2026-49271

Summary

Several security issues were fixed in libheif.

Details

It was discovered that libheif incorrectly handled certain crafted HEIF files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-47178) It was discovered that libheif incorrectly validated offsets when decoding certain crafted HEIF files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-49271)

Recommended actions per Ubuntu release

StackPatch playbook auto-generated per release codename and per affected package.

Ubuntu questing

libheif→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-gdk-pixbuf→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-gdk-pixbuf
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-thumbnailer→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-thumbnailer
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-view→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-view
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-dev→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-examples→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-examples
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-aomdec→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-aomdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-aomenc→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-aomenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-dav1d→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-dav1d
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-ffmpegdec→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-ffmpegdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-j2kdec→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-j2kdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-j2kenc→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-j2kenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-jpegdec→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-jpegdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-jpegenc→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-jpegenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-kvazaar→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-kvazaar
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-libde265→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-libde265
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-rav1e→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-rav1e
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-svtenc→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-svtenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-x265→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-x265
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugins-all→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugins-all
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif1→1.20.2-1ubuntu0.5apt_upgrade
Standard apt upgrade. Install 1.20.2-1ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu resolute

libheif→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-gdk-pixbuf→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-gdk-pixbuf
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-thumbnailer→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-thumbnailer
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
heif-view→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y heif-view
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-dev→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-examples→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-examples
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-aomdec→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-aomdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-aomenc→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-aomenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-dav1d→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-dav1d
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-ffmpegdec→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-ffmpegdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-j2kdec→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-j2kdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-j2kenc→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-j2kenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-jpegdec→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-jpegdec
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-jpegenc→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-jpegenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-kvazaar→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-kvazaar
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-libde265→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-libde265
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-rav1e→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-rav1e
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-svtenc→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-svtenc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugin-x265→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugin-x265
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif-plugins-all→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif-plugins-all
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libheif1→1.21.2-3ubuntu0.2apt_upgrade
Standard apt upgrade. Install 1.21.2-3ubuntu0.2 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libheif1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Are YOU affected by USN-8479-1?

5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8479-1 (and any other live CVE) applies. Anonymous, no signup.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Read the bash source first

Want this automated for your servers?

StackPatch runs this match against YOUR installed packages every hour

Free (3 servers) / from $9/mo (14-day free trial) / Solo $9/mo / Pro $29/mo / Team $79/mo. Indie pricing.

Start free trial →See StackPatch →Live audit log →