[From nobody Sat Aug 22 20:51:07 2026 Received: (at 1138575-close) by bugs.debian.org; 22 Aug 2026 19:49:50 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 7; hammy, 150; neutral, 214; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:56814) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wxriv-00D5Tc-35 for 1138575-close@bugs.debian.org; Sat, 22 Aug 2026 19:49:49 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wxriu-00G9sf-0Z for 1138575-close@bugs.debian.org; Sat, 22 Aug 2026 19:49:48 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=R7XWv4WqBfW6w81qzgsud/lXxrtKD5rZnGuzArPd3zU=; b=LgJ7v8/DJm5QXlGr+6r2OHd4Yn a1KVlxLZvqSVliXVqaVep1cl/pgX6vTdERTaAmHTnxbPGVneMD82cksMS1SvyAvuVPYt1F8tNLkQn r+KhVOnwX9OEIVpMQaauaq2GCHp8RxP3KQXc7n8qFxd/WkUYALKAIjVc1hxjjg0gHF7ItRCRDWvTq Ar82lUIO2GmMTDWvf4y1ajXELRbdU4u9u7SpAl6m9789qsOX+kEE5Np49PbrI/hXKhE+/yb7t0CTK wYwxA1Xn547GwUuUL4VhiIyHCEmfcDYwIQs1KC93OPRTZ9ZNBlVpxB7oxFtiqjLSFAkJmWHhbXbdA 6XVE+0Bw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wxrit-00000002N7h-04Sv; Sat, 22 Aug 2026 19:49:47 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Adrian Bunk <bunk@debian.org> To: 1138575-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: jpeg-xl Debian: DAK Debian-Changes: jpeg-xl_0.11.2-5.1_source.changes Debian-Source: jpeg-xl Debian-Version: 0.11.2-5.1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1138575: fixed in jpeg-xl 0.11.2-5.1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8828319189806960513==" Message-Id: <E1wxrit-00000002N7h-04Sv@fasolo.debian.org> Date: Sat, 22 Aug 2026 19:49:47 +0000 --===============8828319189806960513== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: jpeg-xl Source-Version: 0.11.2-5.1 Done: Adrian Bunk <bunk@debian.org> We believe that the bug you reported is fixed in the latest version of jpeg-xl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1138575@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Adrian Bunk <bunk@debian.org> (supplier of updated jpeg-xl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 13 Aug 2026 16:09:49 +0300 Source: jpeg-xl Architecture: source Version: 0.11.2-5.1 Distribution: unstable Urgency: medium Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.= debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Closes: 1138575 1142476 Changes: jpeg-xl (0.11.2-5.1) unstable; urgency=3Dmedium . * Non-maintainer upload. * CVE-2025-70103: Buffer overflow in PNM decoder (Closes: #1138575) * CVE-2026-52584: Buffer overflow in APNG decoder (Closes: #1142476) * Backport upstream fix for FTBFS on x32. Checksums-Sha1: 0287faf48e51f8478358b55f375240abbe2b7a23 3215 jpeg-xl_0.11.2-5.1.dsc 57ef93c50262422f1e9d2d79be1ed624bed5b79b 20680 jpeg-xl_0.11.2-5.1.debian.tar= .xz Checksums-Sha256: 547a1c75f467336b82c7178bb2390a3df5d68eddffa77ca7679754a5c3956f89 3215 jpeg-x= l_0.11.2-5.1.dsc 45b2b711b09fc3d6362cb2604befcbcbd8f0ba5937e65ad88163a1c8c66bc0dd 20680 jpeg-= xl_0.11.2-5.1.debian.tar.xz Files: 4b2da2e56f9179e2e4f2ebb031333c50 3215 graphics optional jpeg-xl_0.11.2-5.1.d= sc 2bad471218d2c1fce5d4a07d1e9d2a1a 20680 graphics optional jpeg-xl_0.11.2-5.1.= debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmp9zNQACgkQiNJCh6LY mLH8rQ/+KGA+X+q8fwWqwiENJ1fI0JJMflfLZhy24mwvjD0NQ6Bg5bPcClO8xN+4 GePwVutuSSLjntTcPmFX2x0GPw81vYiXnjDJy8M1HcWlaxuNGLCdGprcsZfQwJ3G V8w/am9zwPNaayc5D7NnJ55RO0C0wgsvKL2VwJFHDgswQpB2nSPMwNm4s4RYQLah SVhprreCfOrnEsMR6tselC784WlG6LtykdvoU2gqGVz98h82zE4h7/MqMTJsqcew gNiZcbWij0FGIcYsCeV/tJlrs42wtx71D2zvGZPumBrQL15Zp3jeG1CTOb+9ofMi Tz4b8hFHcH5q3vJ8bXroiezgKx8Je8oQQ8VKlEjCDbKUJouquqgO3plNA/Drx+5B fNWyPU6l/Jq2RRExxUhGMq7EZHA7jvOp1Mq8Lz5DENP1i5rXupQta/MCc7VwmlgJ iE5neKfj3DA+58IMtZ4jnciG2bqM+eB6IvYNp1VOcs8JdrWvhVJtoOHf8dDTVJwZ UEhh9tkbQZxcHDpWGD8+IujIWxU/JAX20Ns5/z2FeGeX9xay4pjgSz0WFinv0YnE Mkyo4/kLfoBzfI0ehBl3BfG7r4ImQC1nG7xyLVucxM2vSRkyLie/SYfyCs+nTnah LxtiH/Cz20tMGtglV4CsVdMsCE2qukbgY+Q+EITnuGXGiucT08E=3D =3Dw1Yt -----END PGP SIGNATURE----- --===============8828319189806960513== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaon9WgAKCRCb9qggYcy5 ITjEAPwI8teYLanzc+bwu1463LxglZX/7UsHKw1L0QyYiSCu/QD/XKw27C7s+MWT /DnQ28vS/NCddZ67LMKRlK0cU+AZ9gA= =215I -----END PGP SIGNATURE----- --===============8828319189806960513==-- ]