[Git][security-tracker-team/security-tracker][master] Track fixed version for two jpeg-xl issues fixed via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Aug 22 21:35:10 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
3fed403a by Salvatore Bonaccorso at 2026-08-22T22:34:27+02:00
Track fixed version for two jpeg-xl issues fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -42580,7 +42580,7 @@ CVE-2026-53727 (css_parser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssPars
NOTE: Fixed by: https://github.com/premailer/css_parser/commit/7d2ddf0189cd54b54f378f59daefa10cb036e476 (v3.0.0)
NOTE: Fixed by: https://github.com/premailer/css_parser/commit/e0a151458b2a801ae265ba420862ef8b1127b3ae (v3.0.0)
CVE-2026-52584 (Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a l ...)
- - jpeg-xl <unfixed> (bug #1142476)
+ - jpeg-xl 0.11.2-5.1 (bug #1142476)
NOTE: https://github.com/libjxl/libjxl/issues/4803
NOTE: https://github.com/libjxl/libjxl/pull/4804
NOTE: https://github.com/libjxl/libjxl/pull/4870
@@ -81458,7 +81458,7 @@ CVE-2025-70116 (A NULL pointer dereference in GPAC MP4Box: when parsing certain
NOTE: https://github.com/gpac/gpac/issues/3345
CVE-2025-70103 (Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM im ...)
{DSA-6342-1}
- - jpeg-xl <unfixed> (bug #1138575)
+ - jpeg-xl 0.11.2-5.1 (bug #1138575)
NOTE: https://www.openwall.com/lists/oss-security/2026/05/30/7
NOTE: https://github.com/libjxl/libjxl/issues/4337
NOTE: https://github.com/libjxl/libjxl/pull/4380
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3fed403a21c740ab7b84de94741784e50148f2cf
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3fed403a21c740ab7b84de94741784e50148f2cf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260822/dc3506fd/attachment.htm>
More information about the debian-security-tracker-commits
mailing list