Catálogo de CVE

CVE-2024-11403

libjxl vulnerabilities

There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression (i.e. if using JxlEncoderAddJPEGFrame on untrusted input) does not properly check bounds in the presence of incomplete codes. This could lead to an out-of-bounds write. In jpegli which is released as part of the same project, the same vulnerability is present. However, the relevant buffer is part of a bigger structure, and the code makes no assumptions on the values that could be overwritten. The issue could however cause jpegli to read uninitialised memory, or addresses of functions.

Gravedad: Medium · CVSS 6.7CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
Published: Nov 25, 2024, 1:08:38 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.63% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie-security	jpeg-xl	`0.11.2-0.1~deb13u3`	Fixed	[CVE-2024-11403]
Debiantrixie	jpeg-xl	`0.10.4-2`	FixedDistribution-reported fixed boundary	[CVE-2024-11403]
Debiantrixie	jpeg-xl	`0.11.2-0.1~deb13u2`	Fixed	[CVE-2024-11403]
Debiansid	jpeg-xl	`0.10.4-2`	FixedDistribution-reported fixed boundary	[CVE-2024-11403]
Debiansid	jpeg-xl	`0.11.2-5.1`	Fixed	[CVE-2024-11403]
Debianforky	jpeg-xl	`0.10.4-2`	FixedDistribution-reported fixed boundary	[CVE-2024-11403]
Debianforky	jpeg-xl	`0.11.2-5.1`	Fixed	[CVE-2024-11403]
Debianbookworm-security	jpeg-xl	`0.7.0-10+deb12u1`	Fixed	[CVE-2024-11403]
Debianbookworm	jpeg-xl	`0.7.0-10+deb12u1`	FixedDistribution-reported fixed boundary	[CVE-2024-11403]

Showing 9 fix observations. All 36 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	jpeg-xl	`0.7.0-10.2ubuntu6.1`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	jpeg-xl-doc	`0.7.0-10.2ubuntu6.1`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libjpegxl-java	`0.7.0-10.2ubuntu6.1`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libjxl-dev	`0.7.0-10.2ubuntu6.1`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libjxl-devtools	`0.7.0-10.2ubuntu6.1`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libjxl-tools	`0.7.0-10.2ubuntu6.1`	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	libjxl0.7	`0.7.0-10.2ubuntu6.1`	UnknownSource applicability is not established	Provider not reported
Debianbookworm	jpeg-xl	`0.7.0-10+deb12u1`	FixedDistribution-reported fixed boundary	[CVE-2024-11403]
Debianbookworm-security	jpeg-xl	`0.7.0-10+deb12u1`	Fixed	[CVE-2024-11403]
Debianforky	jpeg-xl	`0.10.4-2`	FixedDistribution-reported fixed boundary	[CVE-2024-11403]
Debianforky	jpeg-xl	`0.11.2-5.1`	Fixed	[CVE-2024-11403]
Debiansid	jpeg-xl	`0.10.4-2`	FixedDistribution-reported fixed boundary	[CVE-2024-11403]
Debiansid	jpeg-xl	`0.11.2-5.1`	Fixed	[CVE-2024-11403]
Debiantrixie	jpeg-xl	`0.10.4-2`	FixedDistribution-reported fixed boundary	[CVE-2024-11403]
Debiantrixie	jpeg-xl	`0.11.2-0.1~deb13u2`	Fixed	[CVE-2024-11403]
Debiantrixie-security	jpeg-xl	`0.11.2-0.1~deb13u3`	Fixed	[CVE-2024-11403]
Opensuseleap 15.5	qt6-webengine	`6.4.2-bp155.2.6.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0402-1]Feb 4, 2026, 3:29:31 AM UTC
Opensuseleap 15.5	qt6-webengine-docs	`6.4.2-bp155.2.6.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0402-1]Feb 4, 2026, 3:29:31 AM UTC
Opensuseleap 15.6	libjxl	`0.8.4-bp156.3.3.4`	UnknownSource applicability is not established	[OPENSUSE-SU-2025:0139-1]Feb 4, 2026, 3:59:53 AM UTC
Opensuseleap 15.6	libjxl-gtk	`0.8.4-bp156.3.3.4`	UnknownSource applicability is not established	[OPENSUSE-SU-2025:0139-1]Feb 4, 2026, 3:59:53 AM UTC
Opensuseleap 15.6	mozjs115	`115.4.0-150600.3.6.1`	UnknownSource applicability is not established	[SUSE-SU-2024:4411-1]Feb 4, 2026, 3:53:40 AM UTC
Opensusetumbleweed	libjxl	`0.11.1-1.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:14531-1]Feb 4, 2026, 2:57:28 AM UTC
Opensusetumbleweed	mozjs115	`115.15.0-4.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:14594-1]Feb 4, 2026, 3:53:34 AM UTC
Opensusetumbleweed	mozjs128	`128.5.1-3.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:14600-1]Feb 4, 2026, 3:23:45 AM UTC
Suselinux enterprise module for desktop applications 15 sp6	mozjs115	`115.4.0-150600.3.6.1`	UnknownSource applicability is not established	[SUSE-SU-2024:4411-1]Feb 4, 2026, 3:53:40 AM UTC
Suselinux enterprise module for package hub 15 sp7	libjxl	`0.10.3-150700.4.3.1`	UnknownSource applicability is not established	[SUSE-SU-2025:01883-1]Feb 4, 2026, 2:52:21 AM UTC
Susepackage hub 15 sp5	qt6-webengine	`6.4.2-bp155.2.6.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0402-1]Feb 4, 2026, 3:29:31 AM UTC
Susepackage hub 15 sp5	qt6-webengine-docs	`6.4.2-bp155.2.6.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2024:0402-1]Feb 4, 2026, 3:29:31 AM UTC
Susepackage hub 15 sp6	libjxl	`0.8.4-bp156.3.3.4`	UnknownSource applicability is not established	[OPENSUSE-SU-2025:0139-1]Feb 4, 2026, 3:59:53 AM UTC
Susepackage hub 15 sp6	libjxl-gtk	`0.8.4-bp156.3.3.4`	UnknownSource applicability is not established	[OPENSUSE-SU-2025:0139-1]Feb 4, 2026, 3:59:53 AM UTC
Ubuntu24.04	jpeg-xl	`0.7.0-10.2ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-11403]Apr 22, 2026, 2:37:08 PM UTC
Ubuntu24.04	jpeg-xl	`0.7.0-10.2ubuntu4`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-11403]Apr 22, 2026, 2:37:08 PM UTC
Ubuntu24.04	jpeg-xl	`0.7.0-10.2ubuntu5`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-11403]Apr 22, 2026, 2:37:08 PM UTC
Ubuntu24.04	jpeg-xl	`0.7.0-10.2ubuntu6`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-11403]Apr 22, 2026, 2:37:08 PM UTC
Ubuntu24.04	jpeg-xl	`0.7.0-10.2ubuntu6.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-11403]Apr 22, 2026, 2:37:08 PM UTC
Ubuntu24.04	jpeg-xl	`0.7.0-10ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-11403]Apr 22, 2026, 2:37:08 PM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "jpeg-xl",
      "status": "fixed",
      "release": "sid",
      "version": "0.11.2-5.1"
    },
    {
      "name": "jpeg-xl",
      "status": "fixed",
      "release": "forky",
      "version": "0.11.2-5.1"
    },
    {
      "name": "jpeg-xl",
      "status": "fixed",
      "release": "trixie",
      "version": "0.11.2-0.1~deb13u2"
    },
    {
      "name": "jpeg-xl",
      "status": "fixed",
      "release": "trixie-security",
      "version": "0.11.2-0.1~deb13u3"
    },
    {
      "name": "jpeg-xl",
      "status": "fixed",
      "release": "bookworm",
      "version": "0.7.0-10+deb12u1"
    },
    {
      "name": "jpeg-xl",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "0.7.0-10+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1088818,
      "name": "jpeg-xl",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "0.10.4-2"
    },
    {
      "bug": 1088818,
      "name": "jpeg-xl",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "0.10.4-2"
    },
    {
      "bug": 1088818,
      "name": "jpeg-xl",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "0.10.4-2"
    },
    {
      "bug": 1088818,
      "name": "jpeg-xl",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "0.7.0-10+deb12u1"
    }
  ],
  "distribution_packages": [
    {
      "name": "jpeg-xl",
      "fixed_version": "0.7.0-10.2ubuntu6.1",
      "applicability_unknown": true
    },
    {
      "name": "jpeg-xl-doc",
      "fixed_version": "0.7.0-10.2ubuntu6.1",
      "applicability_unknown": true
    },
    {
      "name": "libjpegxl-java",
      "fixed_version": "0.7.0-10.2ubuntu6.1",
      "applicability_unknown": true
    },
    {
      "name": "libjxl-dev",
      "fixed_version": "0.7.0-10.2ubuntu6.1",
      "applicability_unknown": true
    },
    {
      "name": "libjxl-devtools",
      "fixed_version": "0.7.0-10.2ubuntu6.1",
      "applicability_unknown": true
    },
    {
      "name": "libjxl-tools",
      "fixed_version": "0.7.0-10.2ubuntu6.1",
      "applicability_unknown": true
    },
    {
      "name": "libjxl0.7",
      "fixed_version": "0.7.0-10.2ubuntu6.1",
      "applicability_unknown": true
    },
    {
      "name": "jpeg-xl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.7.0-10.2ubuntu6.1"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "0.7.0-10ubuntu2",
        "0.7.0-10.2ubuntu1",
        "0.7.0-10.2ubuntu4",
        "0.7.0-10.2ubuntu5",
        "0.7.0-10.2ubuntu6"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-11403",
      "fixed_version": "0.7.0-10.2ubuntu6.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-11403",
      "provider_updated_at": "2026-04-22T14:37:08.098296Z",
      "applicability_unknown": true
    },
    {
      "name": "libjxl",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.8.4-bp156.3.3.4"
            }
          ]
        }
      ],
      "release": "package hub 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2025:0139-1",
      "fixed_version": "0.8.4-bp156.3.3.4",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2025:0139-1",
      "provider_updated_at": "2026-02-04T03:59:53.754285Z",
      "applicability_unknown": true
    },
    {
      "name": "libjxl-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.8.4-bp156.3.3.4"
            }
          ]
        }
      ],
      "release": "package hub 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2025:0139-1",
      "fixed_version": "0.8.4-bp156.3.3.4",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2025:0139-1",
      "provider_updated_at": "2026-02-04T03:59:53.754285Z",
      "applicability_unknown": true
    },
    {
      "name": "libjxl",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.8.4-bp156.3.3.4"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2025:0139-1",
      "fixed_version": "0.8.4-bp156.3.3.4",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2025:0139-1",
      "provider_updated_at": "2026-02-04T03:59:53.754285Z",
      "applicability_unknown": true
    },
    {
      "name": "libjxl-gtk",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.8.4-bp156.3.3.4"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2025:0139-1",
      "fixed_version": "0.8.4-bp156.3.3.4",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2025:0139-1",
      "provider_updated_at": "2026-02-04T03:59:53.754285Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs115",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "115.4.0-150600.3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for desktop applications 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:4411-1",
      "fixed_version": "115.4.0-150600.3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:4411-1",
      "provider_updated_at": "2026-02-04T03:53:40.814623Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs115",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "115.4.0-150600.3.6.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:4411-1",
      "fixed_version": "115.4.0-150600.3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:4411-1",
      "provider_updated_at": "2026-02-04T03:53:40.814623Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs115",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "115.15.0-4.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:14594-1",
      "fixed_version": "115.15.0-4.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:14594-1",
      "provider_updated_at": "2026-02-04T03:53:34.895460Z",
      "applicability_unknown": true
    },
    {
      "name": "qt6-webengine",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.2-bp155.2.6.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:0402-1",
      "fixed_version": "6.4.2-bp155.2.6.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:0402-1",
      "provider_updated_at": "2026-02-04T03:29:31.955351Z",
      "applicability_unknown": true
    },
    {
      "name": "qt6-webengine-docs",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.2-bp155.2.6.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:0402-1",
      "fixed_version": "6.4.2-bp155.2.6.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:0402-1",
      "provider_updated_at": "2026-02-04T03:29:31.955351Z",
      "applicability_unknown": true
    },
    {
      "name": "qt6-webengine",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.2-bp155.2.6.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:0402-1",
      "fixed_version": "6.4.2-bp155.2.6.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:0402-1",
      "provider_updated_at": "2026-02-04T03:29:31.955351Z",
      "applicability_unknown": true
    },
    {
      "name": "qt6-webengine-docs",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.2-bp155.2.6.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:0402-1",
      "fixed_version": "6.4.2-bp155.2.6.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:0402-1",
      "provider_updated_at": "2026-02-04T03:29:31.955351Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs128",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "128.5.1-3.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:14600-1",
      "fixed_version": "128.5.1-3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:14600-1",
      "provider_updated_at": "2026-02-04T03:23:45.491039Z",
      "applicability_unknown": true
    },
    {
      "name": "libjxl",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.1-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:14531-1",
      "fixed_version": "0.11.1-1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:14531-1",
      "provider_updated_at": "2026-02-04T02:57:28.404537Z",
      "applicability_unknown": true
    },
    {
      "name": "libjxl",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.10.3-150700.4.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:01883-1",
      "fixed_version": "0.10.3-150700.4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:01883-1",
      "provider_updated_at": "2026-02-04T02:52:21.770779Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1088818]

OpenFactory catalog packages

La asociación de paquetes está en curso.

[Debian 12 (Bookworm)]

[jpeg-xl-doc]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (4)
- 0.7.0-10+deb12u1 · all · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · all · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · all · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · all · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
[libjpegxl-java]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (4)
- 0.7.0-10+deb12u1 · amd64 · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · arm64 · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
[libjxl0.7]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (4)
- 0.7.0-10+deb12u1 · amd64 · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · arm64 · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
[libjxl-dev]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (4)
- 0.7.0-10+deb12u1 · amd64 · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · arm64 · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
[libjxl-devtools]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (4)
- 0.7.0-10+deb12u1 · amd64 · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · arm64 · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
[libjxl-tools]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (4)
- 0.7.0-10+deb12u1 · amd64 · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · arm64 · bookworm
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12
- 0.7.0-10+deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 0.7.0-10+deb12u1
  usn · jpeg-xl · debian · bookworm; usn · jpeg-xl · debian · 12

[Debian 13 (Trixie)]

[jpeg-xl-doc]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (5)
- 0.11.2-0.1~deb13u2 · all · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · all · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · all · trixie-security · Historical version
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · all · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u3 · all · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
[libjpegxl-java]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (5)
- 0.11.2-0.1~deb13u2 · amd64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · amd64 · trixie-security · Historical version
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u3 · amd64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
[libjxl0.11]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (5)
- 0.11.2-0.1~deb13u2 · amd64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · amd64 · trixie-security · Historical version
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u3 · amd64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
[libjxl-dev]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (5)
- 0.11.2-0.1~deb13u2 · amd64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · amd64 · trixie-security · Historical version
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u3 · amd64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
[libjxl-devtools]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (5)
- 0.11.2-0.1~deb13u2 · amd64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · amd64 · trixie-security · Historical version
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u3 · amd64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
[libjxl-gdk-pixbuf]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (5)
- 0.11.2-0.1~deb13u2 · amd64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · amd64 · trixie-security · Historical version
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u3 · amd64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
[libjxl-tools]Desconocido
Paquete fuente: [jpeg-xl]
Detalles (5)
- 0.11.2-0.1~deb13u2 · amd64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · amd64 · trixie-security · Historical version
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u2 · arm64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13
- 0.11.2-0.1~deb13u3 · amd64 · trixie-security
  Corregida · Corregida: 0.10.4-2
  usn · jpeg-xl · debian · 13

[openSUSE Tumbleweed]

[libjxl0_12]Desconocido
Paquete fuente: [libjxl]
Detalles (1)
- 0.12.0-1.1 · x86_64 · tumbleweed
  Desconocido · Corregida: 0.11.1-1.1
  Version impact unknown
  usn · libjxl · opensuse · tumbleweed
[libjxl0_12-32bit]Desconocido
Paquete fuente: [libjxl]
Detalles (1)
- 0.12.0-1.1 · x86_64 · tumbleweed
  Desconocido · Corregida: 0.11.1-1.1
  Version impact unknown
  usn · libjxl · opensuse · tumbleweed
[libjxl0_12-x86-64-v3]Desconocido
Paquete fuente: [libjxl]
Detalles (1)
- 0.12.0-1.1 · x86_64 · tumbleweed
  Desconocido · Corregida: 0.11.1-1.1
  Version impact unknown
  usn · libjxl · opensuse · tumbleweed
[libjxl-devel]Desconocido
Paquete fuente: [libjxl]
Detalles (1)
- 0.12.0-1.1 · x86_64 · tumbleweed
  Desconocido · Corregida: 0.11.1-1.1
  Version impact unknown
  usn · libjxl · opensuse · tumbleweed
[libjxl-tools]Desconocido
Paquete fuente: [libjxl]
Detalles (1)
- 0.12.0-1.1 · x86_64 · tumbleweed
  Desconocido · Corregida: 0.11.1-1.1
  Version impact unknown
  usn · libjxl · opensuse · tumbleweed

Observado: Oct 27, 2026, 6:46:59 PM UTC

Referencias

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]