PPA update policy

[jerbob92]

First, thank you for creating this library! I have created a Go library around it (https://github.com/klippa-app/go-libheif) to do the processing in a separate process since I don't trust CGO too much 😄

My question is what the update policy is regarding the PPA, also with possible security issues, like #794. I see that the latest version in the PPA is v1.14.2, I would like to update to the latest version. If the major release strategy is specific per Ubuntu release, would it be possible to backport security fixes to patch version, for example in a v1.14.3?

[farindk]

In the past, we have tried to keep the PPA always up-to-date.

@fancycode (PPA maintainer) would it be possible to release a new PPA? We're now at v1.16.2. If you are short on time, we can also postpone this to v1.17.0, which should be ready soon.

[jerbob92]

Nice, thanks! Can we also do libde265 in that case? There were quite some security fixes there.

[fancycode]

Both PPAs have been updated, might still take some time until all builds are finished / published.

Please note that the packaging for libheif has changed and the codecs are now split into separate packages.

[farindk]

@fancycode Great, thank you.

[fancycode]

Updates have also been submitted to Debian and hopefully will be accepted soon.

https://mentors.debian.net/package/libde265/
https://mentors.debian.net/package/libheif/

[jerbob92]

Would be nice if a version could be pushed again, since HEIC files from newer iPhones are broken now.

#1190

[jerbob92]

I have made a repository to do some automated builds for Ubuntu 20.04, 22.04 and 24.04, due to the lack of PPA updates, you can find it here:
https://github.com/jerbob92/libheif-packaging

A deb file can be downloaded in the release.

Please note that it's not the same as the packages in the PPA, it doesn't contain all plugins and it's not separated out per component.