openSUSE-SU-2025:0139-1

Details

This update for libjxl fixes the following issues:

Update to release 0.8.4
- Huffman lookup table size fix [CVE-2024-11403]
- Check height limit in modular trees [CVE-2024-11498]

Affected Packages

gdk-pixbuf-loader-jxl

SUSE Package Hub 15 SP6openSUSE Leap 15.6

Fixed in:

0.8.4-bp156.3.3.4

gimp-plugin-jxl

SUSE Package Hub 15 SP6openSUSE Leap 15.6

Fixed in:

0.8.4-bp156.3.3.4

jxl-thumbnailer

SUSE Package Hub 15 SP6openSUSE Leap 15.6

Fixed in:

0.8.4-bp156.3.3.4

libjxl

SUSE Package Hub 15 SP6openSUSE Leap 15.6

Fixed in:

0.8.4-bp156.3.3.4

libjxl-devel

SUSE Package Hub 15 SP6openSUSE Leap 15.6

Fixed in:

0.8.4-bp156.3.3.4

libjxl-gtk

SUSE Package Hub 15 SP6openSUSE Leap 15.6

Fixed in:

0.8.4-bp156.3.3.4

libjxl-tools

SUSE Package Hub 15 SP6openSUSE Leap 15.6

Fixed in:

0.8.4-bp156.3.3.4

libjxl0_8

SUSE Package Hub 15 SP6openSUSE Leap 15.6

Fixed in:

0.8.4-bp156.3.3.4

libjxl0_8-32bit

SUSE Package Hub 15 SP6openSUSE Leap 15.6

Fixed in:

0.8.4-bp156.3.3.4

libjxl0_8-64bit

SUSE Package Hub 15 SP6openSUSE Leap 15.6

Fixed in:

0.8.4-bp156.3.3.4

References

REPORT

https://bugzilla.suse.com/1233768

REPORT

https://bugzilla.suse.com/1233785

ADVISORY

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MF2M2SVCJLFCMVUJBZPKNUD26RAA7I4W/

WEB

https://www.suse.com/security/cve/CVE-2024-11403

WEB

https://www.suse.com/security/cve/CVE-2024-11498