-------------------------------------------------------------------------
Debian LTS Advisory DLA-4779-1                [email protected]
https://www.debian.org/lts/security/                   Andreas Henriksson
September 14, 2026                            https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : jbig2dec
Version        : 0.19-3+deb12u1
CVE ID         : CVE-2026-38076
Debian Bug     : 1142282

It was discovered that missing input sanitising in the JBIG2 decoder
library could result in denial of service.

For Debian 12 bookworm, this problem has been fixed in version
0.19-3+deb12u1.

We recommend that you upgrade your jbig2dec packages.

For the detailed security status of jbig2dec please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/jbig2dec

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Attachment: signature.asc
Description: PGP signature

Reply via email to