Gyorgy Sarvari bd41441bf3 libjxl: mark CVE-2025-12474 and CVE-2026-1837 patched ...

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-12474
https://nvd.nist.gov/vuln/detail/CVE-2026-1837

Both vulnerabilities have been fixed in 0.10.5.

Relevant commits:
CVE-2025-12474: https://github.com/libjxl/libjxl/commit/5ce68976a5abfaea7b3086036ab9f6543ab5b29e
CVE-2026-1837: https://github.com/libjxl/libjxl/commit/36b0cecaa12f643d03c16bd32e5f83775c912b07

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>

2026-03-24 08:52:15 +05:30

..

audiofile

audiofile: mark CVE-2020-18781 as patched

2025-11-17 10:16:55 +05:30

cdrkit

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

faad2

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

id3lib

id3lib: mark CVE-2007-4460 as fixed

2026-01-12 08:12:26 +05:30

jack

jack: fix build with python3 on host

2024-01-27 09:48:32 -08:00

libass

libass: upgrade 0.17.0 -> 0.17.1

2023-03-25 08:54:59 -07:00

libcdio

libcdio: Drop need for LIBCDIO_SOURCE_PATH

2023-05-07 11:32:47 -07:00

libdvdread

libdvdread: upgrade 6.1.2 -> 6.1.3

2022-05-31 08:26:23 -07:00

libid3tag

recipes: Drop remaining PR values from recipes

2024-03-17 13:10:10 -07:00

libjxl

libjxl: mark CVE-2025-12474 and CVE-2026-1837 patched

2026-03-24 08:52:15 +05:30

libmad

libmad: ignore CVE-2017-11552 and CVE-2018-7263

2026-01-26 10:04:48 +05:30

libmms

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-04 17:41:45 -08:00

libmodplug

libmodplug: Fix build with c++17

2023-01-21 10:02:01 -08:00

libopus

libopus: upgrade 1.5.1 -> 1.5.2

2024-04-21 10:52:44 -07:00

libopusenc

libopusenc: add recipe 0.2.1

2020-07-28 12:52:14 -07:00

live555

live555: Fix rdepends of live555-dev

2022-03-24 09:45:25 -07:00

mikmod

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-04 17:41:45 -08:00

mplayer

mpv: Remove references to builddir from mpv binary

2023-05-23 08:48:18 -07:00

pulseaudio

pavucontrol: update SRC_URI

2024-08-10 11:14:22 -04:00

sound-themes

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-04 17:41:45 -08:00

v4l2apps

v4l-utils: Fix QA and build errors related to _TIME_BITS on 32-bit

2025-09-11 16:58:30 +08:00

wavpack

wavpack: upgrade 5.1.0 -> 5.6.0

2024-01-09 10:05:02 -08:00

webm

libvpx: upgrade 1.14.0 -> 1.14.1

2026-01-12 08:12:25 +05:30

xpext

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

xsp

xsp: CVE status update for CVE-2006-2658

2025-10-30 14:43:31 +08:00