Debian Patches

Status for jpeg-xl/0.7.0-10+deb12u1

Patch Description Author Forwarded Bugs Origin Last update
CVE-2024-11403.patch [PATCH] Port the Huffman lookup table size fix from brunsli. (#3871)
See also: https://www.youtube.com/watch?v=_ACCK0AUQ8Q&t=696s
szabadka <9074039+szabadka@users.noreply.github.com> no 2024-10-03
CVE-2023-0645.patch [PATCH] Update exif.h (#2101)
* Update exif.h

* Update lib/jxl/exif.h


* fix AUTHORS

* fix lint
a-shvedov <60114847+a-shvedov@users.noreply.github.com> no 2023-02-01
CVE-2023-35790.patch [PATCH] Fix an integer underflow bug in patch decoding.
When reading patches, the code doesn't properly check that all patches
are in bounds.

In particular, if the start of a patch becomes negative (due to the
delta coding of patch positions), but not negative *enough* to cause
`start + size` to still be negative, the decoder happily accepted the
patch. Such a patch would then lead the interval tree building code to
run into an infinite loop.
Luca Versari <veluca@google.com> no 2023-06-09
do_not_force_cxx11.patch Not clear why upstream force -std=c++11 Current gcc default is c++17 so use that instead.

===================================================================
Mathieu Malaterre <malat@debian.org> yes upstream 2021-12-15
continuefinalnonessentialboxtest.patch Remove failing test for now
===================================================================
Mathieu Malaterre <malat@debian.org> yes 2022-08-22
roundtriplargefast.patch [PATCH] Import commit bb8eac5 onto 0.7 branch
Fixes #1788.
Evgenii Kliuchnikov <eustas@google.com> no 2022-09-27
de08116d14db785431f3efb651dcf2af15bbb682.patch [PATCH] Improve 'custom' codec in benchmark.
Add options to prepare input of custom codec in arbitrary file
format and colorspace.

Add option to suppress custom codec stdin/stdout.

Fix endianness of pfm headers and check correct endianness
of ppf when encoding into ppm/pgm.
Zoltan Szabadka <szabadka@google.com> no 2022-08-22
1a36db0bf452a2232f0a15d7d8edb542e8196401.patch [PATCH] Fix big-endian test for float16
The following commit allow the `CodecTest.TestRoundTrip`,
`ModularTest.PredictorIntegerOverflow`,
`ModularTest.UnsqueezeIntegerOverflow` test and
`DecodeTest/DecodeTestParam.PixelTest/301x33*f16*` test family to pass
on big-endian architectures.

Fixes #1024
Mathieu Malaterre <mathieu.malaterre@gmail.com> no 2023-01-03
manpages.patch Clean up man pages
===================================================================
Mathieu Malaterre <malat@debian.org> yes 2022-03-29
CVE-2024-11498.patch [PATCH] Check height limit in modular trees. (#3943)
Also rewrite the implementation to use iterative checking instead of
recursive checking of tree property values, to ensure stack usage is
low.

Before, it was possible for appropriately-crafted files to use a
significant amount of stack (in the order of hundreds of MB).
Luca Versari <veluca@google.com> no 2024-11-21

All known versions for source package 'jpeg-xl'

Links