tocsin

Alpine/libjxl: high 7.5

A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data.

Action: Upgrade libjxl to 0.11.2-r0 or later.

Affected

introducedfixedlast affected
0.9.00.11.2-r0-

Fixed versions

0.11.2-r0

Sources

published · modified · JSON