Amazon Linux 2023 Security Advisory: ALAS2023-2026-2134
Advisory Released Date: 2026-09-14
Advisory Updated Date: 2026-09-14
Severity:
Medium
Issue Overview:
libheif: Integer underflow in Fraction constructor via double clap transform application (CVE-2026-62289)
libheif: Out-of-bounds read in uncompressed unci tile range slicing (CVE-2026-62292)
Affected Packages:
libheif
Issue Correction:
Run dnf update libheif --releasever 2023.12.20260914 or dnf update --advisory ALAS2023-2026-2134 --releasever 2023.12.20260914 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
libheif-tools-debuginfo-1.19.8-1.amzn2023.0.8.aarch64
libheif-debugsource-1.19.8-1.amzn2023.0.8.aarch64
heif-pixbuf-loader-debuginfo-1.19.8-1.amzn2023.0.8.aarch64
libheif-debuginfo-1.19.8-1.amzn2023.0.8.aarch64
heif-pixbuf-loader-1.19.8-1.amzn2023.0.8.aarch64
libheif-devel-1.19.8-1.amzn2023.0.8.aarch64
libheif-tools-1.19.8-1.amzn2023.0.8.aarch64
libheif-1.19.8-1.amzn2023.0.8.aarch64
src:
libheif-1.19.8-1.amzn2023.0.8.src
x86_64:
libheif-debuginfo-1.19.8-1.amzn2023.0.8.x86_64
libheif-tools-debuginfo-1.19.8-1.amzn2023.0.8.x86_64
heif-pixbuf-loader-1.19.8-1.amzn2023.0.8.x86_64
libheif-1.19.8-1.amzn2023.0.8.x86_64
libheif-debugsource-1.19.8-1.amzn2023.0.8.x86_64
libheif-tools-1.19.8-1.amzn2023.0.8.x86_64
heif-pixbuf-loader-debuginfo-1.19.8-1.amzn2023.0.8.x86_64
libheif-devel-1.19.8-1.amzn2023.0.8.x86_64