libvips
Version: 8.18.3A fast image processing library with low memory needs.
What is libvips?
A fast image processing library with low memory needs.
How to use this package
Quick install
Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.
min add libvipsDeclare as a task dependency in minimal.toml
Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.
[tasks.dev]
packages = ["libvips"]Build-time vs runtime
Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.
min add --build libvips
min add --runtime libvipsDependencies (13)
| Name | Version | Kind |
|---|---|---|
| base | — | build |
| expat | 2.7.5 | runtime |
| glib | 2.86.4 | runtime |
| glibc CVE:3 | 2.42 | runtime |
| lcms2 | 2.17 | runtime |
| libjpeg-turbo | 3.1.4.1 | runtime |
| libpng CVE:1 | 1.6.58 | runtime |
| libwebp | 1.6.0 | runtime |
| meson | 1.10.1 | build |
| ninja | 1.13.2 | build |
| pkgconf | 2.5.1 | build |
| toolchain | — | build |
| zlib | 1.3.2 | runtime |
Dependants (1)
| Name | Version |
|---|---|
| next | 16.2.6 |
Showing 7 advisories, 4 of which are transitive via libvips's dependencies
No advisories match the current filters.
| Status | IDs | Package | Severity | |||
|---|---|---|---|---|---|---|
| Critical ( 0 ) | ||||||
| High ( 5 ) | ||||||
| Affected: 2.42 | glibc | High: 7.5 | ||||
SummaryNo summary published for this advisory. Via: glibc Affected ranges
CVSS vector:
References | ||||||
| Affected: 2.42 | glibc | High: 7.5 | ||||
SummaryNo summary published for this advisory. Via: glibc Affected ranges
CVSS vector:
References | ||||||
| Affected: 2.42 | glibc | High: 8.4 | ||||
SummaryNo summary published for this advisory. Via: glibc Affected ranges
CVSS vector:
| ||||||
| Resolved in 5b089951ac8e92670df03ddfaca5d5f2b7cbbebd | libvips | High | ||||
SummaryHeap-buffer-overflow in jxl::ModularFrameDecoder::DecodeGroup Affected ranges
Fixed in:
References | ||||||
| Resolved in 5b089951ac8e92670df03ddfaca5d5f2b7cbbebd | libvips | High | ||||
SummaryHeap-buffer-overflow in jxl::N_AVX2::SingleFromSingle Affected ranges
Fixed in:
References | ||||||
| Medium ( 1 ) | ||||||
| Under investigation | libpng | Medium: 5.4 | ||||
SummaryLIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing attacker-controlled bytes inside an ignored ancillary chunk to be reinterpreted as a fresh chunk header on the next call to `png_process_data`. Commit faf06924688b62d7c1654b5ceddedbde66ffadb4 fixes the issue. Via: libpng Affected ranges
CVSS vector:
| ||||||
| Low ( 1 ) | ||||||
| Resolved in 5b089951ac8e92670df03ddfaca5d5f2b7cbbebd | libvips | Low | ||||
SummaryUNKNOWN READ in void jxl::CopyImageTo<int> Affected ranges
Fixed in:
References | ||||||
| Unknown ( 0 ) | ||||||
61 components
No components match your filter.
| Packages | Version |
|---|---|
| libvips ROOT | 8.18.3 |
| acl | 2.3.2 |
| attr | 2.5.2 |
| autoconf | 2.73 |
| automake | 1.18.1 |
| bash | 5.3 |
| bash-bootstrap | 5.3 |
| binutils | 2.46.1 |
| bison | 3.8.2 |
| bzip2 | 1.0.8 |
| cmake | 4.2.3 |
| coreutils | 9.11 |
| curl | 8.20.0 |
| diffutils | 3.12 |
| expat | 2.7.5 |
| file | 5.47 |
| findutils | 4.10.0 |
| flex | 2.6.4 |
| gawk | 5.4.0 |
| gawk-bootstrap | 5.3.2 |
| gcc | 15.2.0 |
| gdbm | 1.26 |
| glib | 2.86.4 |
| glibc | 2.42 |
| gmp | 6.3.0 |
| grep | 3.12 |
| gzip | 1.14 |
| lcms2 | 2.17 |
| libcap | 2.78 |
| libffi | 3.5.2 |
| libidn2 | 2.3.8 |
| libjpeg-turbo | 3.1.4.1 |
| libpng | 1.6.58 |
| libpsl | 0.21.5 |
| libtool | 2.5.4 |
| libunistring | 1.4.1 |
| libuv | 1.52.1 |
| libwebp | 1.6.0 |
| linux_headers | 6.12.43 |
| lz4 | 1.10.0 |
| m4 | 1.4.21 |
| make | 4.4.1 |
| meson | 1.10.1 |
| mpc | 1.4.0 |
| mpfr | 4.2.2 |
| ncurses | 6.5-20250830 |
| ninja | 1.13.2 |
| openssl | 3.6.2 |
| pcre2 | 10.47 |
| perl | 5.42.0 |
| pkgconf | 2.5.1 |
| python | 3.14.5 |
| readline | 8.3 |
| sed | 4.9 |
| setuptools | 82.0.1 |
| sqlite | 3.50.4 |
| tar | 1.35 |
| util-linux | 2.42.1 |
| xz | 5.8.3 |
| zlib | 1.3.2 |
| zstd | 1.5.7 |