-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6488-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 07, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : jbig2dec CVE ID : CVE-2026-38076 It was discovered that missing input sanitising in the JBIG2 decoder library could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 0.20-1+deb13u1. We recommend that you upgrade your jbig2dec packages. For the detailed security status of jbig2dec please refer to its security tracker page at: https://security-tracker.debian.org/tracker/jbig2dec Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: [email protected] -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmqe+zsACgkQEMKTtsN8 TjYkHg/9HZ1NstrsJD6V9AV8u/T6/vNL0L8qKi90ytJ5SGaE7IWOlmXN7yWGn7q/ 5wPBBO/ZHRbmJpPOndqifAMmtfRmGNJcg2lSnYFPfACzUaOP5OyXd5K064uNDDJP 2GkhEAW7dTRwQCf6de5gitvct8P+dgSs725QfTFYqc5ERY+3BUnPYlKtIwSbn2Ng TRjccueGsWPLQtbM9w74iUrZYumWILADa0ikP1VA1VP5H5wTYa6OW7eioVitOLjz phv0dlGBYKk58MJ2P1Tcyu+oErB4ivZ+mAHv0acHi/KCpDfXPny+ix4Sw8iAgkBa 2sziqN6Y8UxwOimMfK6jNn4vF6OdBQyssV9dxoJGnRT3mLnJNlFEt+ROZYo5h68u PwuVWyxWBBdTJAYdKTV9tJXRNV2rE/v7TXG+/P/5jb7lKk1DojgT1DkQ38mO7/Lm fgGNQ026bW88jzL6FvdNkI6vsFF9HsAk20OXgMCF3TowJzGm9i0o9pwSET9QX6ts t9EZ1w3Tc5Fc3ZEXQB4JxDo95VzOYK5EdxEZ5yiAabc7R6kfiz7n1psjSG3yoyHd ISUV6eXsguC39bI/PLsUK8vuQy/ttB0xXJkMrTeYQh0Jzv2Blwhd7jWMA1jKQyRX orRPUDkm3oGhZCcV3UPSe3lDjm2mrT7LBuKnNC2bdK5RYNXKJtk= =evgI -----END PGP SIGNATURE-----

