Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3fed403a by Salvatore Bonaccorso at 2026-08-22T22:34:27+02:00
Track fixed version for two jpeg-xl issues fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -42580,7 +42580,7 @@ CVE-2026-53727 (css_parser is a Ruby CSS parser. From
2.2.0 until 3.0.0, CssPars
NOTE: Fixed by:
https://github.com/premailer/css_parser/commit/7d2ddf0189cd54b54f378f59daefa10cb036e476
(v3.0.0)
NOTE: Fixed by:
https://github.com/premailer/css_parser/commit/e0a151458b2a801ae265ba420862ef8b1127b3ae
(v3.0.0)
CVE-2026-52584 (Buffer Overflow vulnerability in libjxl v.0.11.2 and before
allows a l ...)
- - jpeg-xl <unfixed> (bug #1142476)
+ - jpeg-xl 0.11.2-5.1 (bug #1142476)
NOTE: https://github.com/libjxl/libjxl/issues/4803
NOTE: https://github.com/libjxl/libjxl/pull/4804
NOTE: https://github.com/libjxl/libjxl/pull/4870
@@ -81458,7 +81458,7 @@ CVE-2025-70116 (A NULL pointer dereference in GPAC
MP4Box: when parsing certain
NOTE: https://github.com/gpac/gpac/issues/3345
CVE-2025-70103 (Heap buffer overflow vulnerability in libjxl 0.12.0 via
crafted PBM im ...)
{DSA-6342-1}
- - jpeg-xl <unfixed> (bug #1138575)
+ - jpeg-xl 0.11.2-5.1 (bug #1138575)
NOTE: https://www.openwall.com/lists/oss-security/2026/05/30/7
NOTE: https://github.com/libjxl/libjxl/issues/4337
NOTE: https://github.com/libjxl/libjxl/pull/4380
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3fed403a21c740ab7b84de94741784e50148f2cf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3fed403a21c740ab7b84de94741784e50148f2cf
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
