[From nobody Sat Jun 13 14:59:07 2026 Received: (at 1138575-close) by bugs.debian.org; 13 Jun 2026 13:58:12 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 85; hammy, 150; neutral, 130; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:52212) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wYOsG-006dek-1E for 1138575-close@bugs.debian.org; Sat, 13 Jun 2026 13:58:12 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wYOsE-00FfSc-2U for 1138575-close@bugs.debian.org; Sat, 13 Jun 2026 13:58:10 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=T/tb9NXlfbej75dDrdIZbxyRwPEiJKKTYx1PiC3XvXs=; b=IqfZv0MpVuKajWIWGbpCxfugYj Q4u5toc79O5YLtrd+wcdUxfNFXnukxkCisrDIYedQGXmvHv22nNkQjEJ+7Ztjg9mwF4gkYv7en2KD zh+L4+dkHTYOMiWosG338e6uLHem7TJL2FOuTpo2V2DHFiHay/7WgTmgVACruDKuXeas60E10kXfC l6L6vXr9fey0/MMibr+TGFnLbrcaHW/B1H9cuSflScCwAkZfzdthHEKDsXSjsSGe+kbagSleVHRhr YHspA/T8P3oizBHOviIlmjwZQh91+77+8ui4ehU43iK3AZfNq1CTxr1V9ilp2lAF0R0LEPEzA2dK+ iVdKaJlw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wYOo9-00000004Ipw-3w9u; Sat, 13 Jun 2026 13:53:57 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Moritz_M=C3=BChlenhoff?= <jmm@debian.org> To: 1138575-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: jpeg-xl Debian: DAK Debian-Changes: jpeg-xl_0.11.2-0.1~deb13u2_source.changes Debian-Source: jpeg-xl Debian-Version: 0.11.2-0.1~deb13u2 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1138575: fixed in jpeg-xl 0.11.2-0.1~deb13u2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7804755655621937901==" Message-Id: <E1wYOo9-00000004Ipw-3w9u@fasolo.debian.org> Date: Sat, 13 Jun 2026 13:53:57 +0000 --===============7804755655621937901== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: jpeg-xl Source-Version: 0.11.2-0.1~deb13u2 Done: Moritz M=C3=BChlenhoff <jmm@debian.org> We believe that the bug you reported is fixed in the latest version of jpeg-xl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1138575@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Moritz M=C3=BChlenhoff <jmm@debian.org> (supplier of updated jpeg-xl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 11 Jun 2026 20:15:43 +0200 Source: jpeg-xl Architecture: source Version: 0.11.2-0.1~deb13u2 Distribution: trixie-security Urgency: medium Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.= debian.org> Changed-By: Moritz M=C3=BChlenhoff <jmm@debian.org> Closes: 1138575 Changes: jpeg-xl (0.11.2-0.1~deb13u2) trixie-security; urgency=3Dmedium . * CVE-2025-70103 (Closes: #1138575) Checksums-Sha1: 2bf78fcbfdabbc109272b48f6339972b1f5fa968 3212 jpeg-xl_0.11.2-0.1~deb13u2.dsc 2acaf75909eea67cc7d861a9a918733d5f630db8 1882762 jpeg-xl_0.11.2.orig.tar.gz 46f0eac9c10525dea68fb8f650e9ef216dbc5e11 23848 jpeg-xl_0.11.2-0.1~deb13u2.de= bian.tar.xz 7892ed6b9fa3e2e9f6eca071ee979e0983db9d7d 18696 jpeg-xl_0.11.2-0.1~deb13u2_am= d64.buildinfo Checksums-Sha256: b978be4319975d73759f0737ba6935fad4f4330802835d6d9298a455c2581363 3212 jpeg-x= l_0.11.2-0.1~deb13u2.dsc ab38928f7f6248e2a98cc184956021acb927b16a0dee71b4d260dc040a4320ea 1882762 jpe= g-xl_0.11.2.orig.tar.gz 54192375c3ff271f395b815a8ea111a5f632f5db8966baeda9dabedbc86ea2d4 23848 jpeg-= xl_0.11.2-0.1~deb13u2.debian.tar.xz 059d6b6c1da2042bff58873b776a006c72b2b5dc60aed33cb043d94b06a74705 18696 jpeg-= xl_0.11.2-0.1~deb13u2_amd64.buildinfo Files: da3a6fc6eb6052c7b45cabbe791917ec 3212 graphics optional jpeg-xl_0.11.2-0.1~d= eb13u2.dsc eda39db6e7a58b73be9124381862b9d1 1882762 graphics optional jpeg-xl_0.11.2.or= ig.tar.gz 5f72e49457b31a5ef83eb4dc87a52ec3 23848 graphics optional jpeg-xl_0.11.2-0.1~= deb13u2.debian.tar.xz d724a9a49d08f5b8298298b3d58a560e 18696 graphics optional jpeg-xl_0.11.2-0.1~= deb13u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmorA24ACgkQEMKTtsN8 TjbzYA/+Npbp9/Fe3ZT9AiugvaZOQxXvRTm5JxX3YgRhU202+LXIYDyQxLTXT7sj S2vBYezTNM88v3Iku/JzHPndAFUUANvnT8krstaND42cxkIKj5crpGAHr9Yz1u5m DQSCtvxQ/s+CY/5400iUqeNzP7cMLJERi1IUZ19vD4ej4Gpda6RzKP9kRzj3/7pT 8pm8XmVe0Rkpox6SZjPukoWPXtugvxD23YJSkiaGdKihfv+MstAiXVS/ezhD1RzJ z2LALgwZauW2+9KJpLB831CNdP7JVIADQV8Q2UzirFM6WW+uodUkUmIgjFNBYpTx HOvY8jH1LpojV5RrUPL7yBYNTvp+ocHL/CZ/hJm/EYxcREhwMWVMEHw4h/uzzG2u 1s0ewuEpWmacGfmgg53Fly1npwnGVNfC3sxXVJC5tK3JEDjcmWQ40IYcA4z4AGUm sTBNC3QxEwUDJQW59nIu5y6MCGsJXPHLz2b0rJytkMeolPfab+ilAKocWFbB+2G6 6G4lPFrSYhH1+PjM6AyBnF2daQmhN8DflQHiMnAvY1kLeCINFWyJUnrkM5rSeNrQ Dv4bISwANpaU2go+sDCqtUkCka3ax3EZo6TmAdN++GirtOZPzuklz7HuTFainhJT ID92SawSayo7sz5Wd7anAaOcIlS1P6yswkpH2P3IQT/N3hmJ5Bs=3D =3D1Q/G -----END PGP SIGNATURE----- --===============7804755655621937901== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCai1g9QAKCRCb9qggYcy5 IWFIAQDaUziL3BbsCroqh2Yk+o3fM6nPUMOuKLJ5uxDW5EN9lQEAzNpXSfFOVBca DKvoVvFzjAupEcT1VLU73la6kx6pFwM= =xphW -----END PGP SIGNATURE----- --===============7804755655621937901==-- ]