Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-70103: Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | jpegxl-debuginfo | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | jpegxl-debugsource | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | jpegxl-doc | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | jxl-pixbuf-loader | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | jxl-pixbuf-loader-debuginfo | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | libjxl | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | libjxl-debuginfo | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | libjxl-devel | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | libjxl-devtools | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | libjxl-devtools-debuginfo | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | libjxl-utils | 1:0.10.3-56.amzn2023 |
| Amazon Linux · 2023 | libjxl-utils-debuginfo | 1:0.10.3-56.amzn2023 |
Vulnerabilities 1
-
High 7.3
Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-70103.html