{"id":"SUSE-SU-2026:2286-1","summary":"Security update for libjxl","details":"This update for libjxl fixes the following issues:\n\nSecurity fixes:\n  \n- CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks\n  (bsc#1266460).\n\nOther fixes:\n\n- Update to version 0.10.5:\n  - fix tile dimension in low memory rendering pipeline.\n  - fix number of channels for gray-to-gray color transform.\n  - `djxl`: reject decoding JXL files if 'packed' representation size overflows.\n- Changes from version 0.10.4:\n  - Huffman lookup table size fix.\n  - Check height limit in modular trees.\n","modified":"2026-06-06T07:30:26.581737900Z","published":"2026-06-05T12:16:50Z","related":["CVE-2025-70103"],"upstream":["CVE-2025-70103"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262286-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1266460"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-70103"}],"schema_version":"1.7.5"}