-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6488-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
September 07, 2026                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : jbig2dec
CVE ID         : CVE-2026-38076

It was discovered that missing input sanitising in the JBIG2 decoder
library could result in denial of service.

For the stable distribution (trixie), this problem has been fixed in
version 0.20-1+deb13u1.

We recommend that you upgrade your jbig2dec packages.

For the detailed security status of jbig2dec please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/jbig2dec

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=evgI
-----END PGP SIGNATURE-----

Reply via email to