[Git][security-tracker-team/security-tracker][master] Track fixed version for two jpeg-xl issues fixed via unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Aug 22 21:35:10 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3fed403a by Salvatore Bonaccorso at 2026-08-22T22:34:27+02:00
Track fixed version for two jpeg-xl issues fixed via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -42580,7 +42580,7 @@ CVE-2026-53727 (css_parser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssPars
 	NOTE: Fixed by: https://github.com/premailer/css_parser/commit/7d2ddf0189cd54b54f378f59daefa10cb036e476 (v3.0.0)
 	NOTE: Fixed by: https://github.com/premailer/css_parser/commit/e0a151458b2a801ae265ba420862ef8b1127b3ae (v3.0.0)
 CVE-2026-52584 (Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a l ...)
-	- jpeg-xl <unfixed> (bug #1142476)
+	- jpeg-xl 0.11.2-5.1 (bug #1142476)
 	NOTE: https://github.com/libjxl/libjxl/issues/4803
 	NOTE: https://github.com/libjxl/libjxl/pull/4804
 	NOTE: https://github.com/libjxl/libjxl/pull/4870
@@ -81458,7 +81458,7 @@ CVE-2025-70116 (A NULL pointer dereference in GPAC MP4Box: when parsing certain
 	NOTE: https://github.com/gpac/gpac/issues/3345
 CVE-2025-70103 (Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM im ...)
 	{DSA-6342-1}
-	- jpeg-xl <unfixed> (bug #1138575)
+	- jpeg-xl 0.11.2-5.1 (bug #1138575)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/30/7
 	NOTE: https://github.com/libjxl/libjxl/issues/4337
 	NOTE: https://github.com/libjxl/libjxl/pull/4380



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3fed403a21c740ab7b84de94741784e50148f2cf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3fed403a21c740ab7b84de94741784e50148f2cf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260822/dc3506fd/attachment.htm>


More information about the debian-security-tracker-commits mailing list