Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1154-1

Опубликовано: 31 мар. 2026
Источник: suse-cvrf

Описание

Security update for libjxl

This update for libjxl fixes the following issue:

  • CVE-2024-11498: Resource exhaustion via Stack overflow in libjxl (bsc#1233785).

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP7
libjxl-devel-0.10.3-150700.4.9.1
libjxl-tools-0.10.3-150700.4.9.1
libjxl0_10-0.10.3-150700.4.9.1
libjxl0_10-32bit-0.10.3-150700.4.9.1

Ссылки

Описание

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:libjxl-devel-0.10.3-150700.4.9.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:libjxl-tools-0.10.3-150700.4.9.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:libjxl0_10-0.10.3-150700.4.9.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:libjxl0_10-32bit-0.10.3-150700.4.9.1
Ссылки