Releases: libjxl/libjxl
v0.11.2
Fixed
- fix tile dimension in low memory rendering pipeline (#4495 -
CVE-2025-12474) - fix number of channels for gray-to-gray color transform (#4579 -
CVE-2026-1837) djxl: reject decoding JXL files if "packed" representation size overflows
size_t(#4589 - thanks to Mateusz Jurczyk of Google Project Zero for
identifying this issue)
Note: This release is for evaluation purposes and may contain bugs, including security bugs, that may not be individually documented when fixed. See the SECURITY.md file for details. Always prefer to use the latest release.
Please provide feedback and report bugs here.
v0.10.5
Fixed
- fix tile dimension in low memory rendering pipeline (#4495 -
CVE-2025-12474) - fix number of channels for gray-to-gray color transform (#4579 -
CVE-2026-1837) djxl: reject decoding JXL files if "packed" representation size overflows
size_t(#4589 - thanks to Mateusz Jurczyk of Google Project Zero for
identifying this issue)
Note: This release is for evaluation purposes and may contain bugs, including security bugs, that may not be individually documented when fixed. See the SECURITY.md file for details. Always prefer to use the latest release.
Please provide feedback and report bugs here.
v0.9.5
Fixed
- fix tile dimension in low memory rendering pipeline (#4495 -
CVE-2025-12474) - fix number of channels for gray-to-gray color transform (#4579 -
CVE-2026-1837) djxl: reject decoding JXL files if "packed" representation size overflows
size_t(#4589 - thanks to Mateusz Jurczyk of Google Project Zero for
identifying this issue)
Note: This release is for evaluation purposes and may contain bugs, including security bugs, that may not be individually documented when fixed. See the SECURITY.md file for details. Always prefer to use the latest release.
Please provide feedback and report bugs here.
v0.8.5
Fixed
- fix tile dimension in low memory rendering pipeline (#4495 -
CVE-2025-12474)
Note: This release is for evaluation purposes and may contain bugs, including security bugs, that may not be individually documented when fixed. See the SECURITY.md file for details. Always prefer to use the latest release.
Please provide feedback and report bugs here.
v0.7.3
Fixed
- fix tile dimension in low memory rendering pipeline (#4495 -
CVE-2025-12474)
Note: This release is for evaluation purposes and may contain bugs, including security bugs, that may not be individually documented when fixed. See the SECURITY.md file for details. Always prefer to use the latest release.
Please provide feedback and report bugs here.
v0.7.2
Fixed
- Huffman lookup table size fix (#3871 - CVE-2024-11403)
- Check height limit in modular trees. (#3943 - CVE-2024-11498)
Note: This release is for evaluation purposes and may contain bugs, including security bugs, that may not be individually documented when fixed. See the SECURITY.md file for details. Always prefer to use the latest release.
Please provide feedback and report bugs here.
v0.11.1
Fixed
- Huffman lookup table size fix (#3871 - CVE-2024-11403)
- Check height limit in modular trees. (#3943 - CVE-2024-11498)
Note: This release is for evaluation purposes and may contain bugs, including security bugs, that may not be individually documented when fixed. See the SECURITY.md file for details. Always prefer to use the latest release.
Please provide feedback and report bugs here.
v0.10.4
Fixed
- Huffman lookup table size fix (#3871 - CVE-2024-11403)
- Check height limit in modular trees. (#3943 - CVE-2024-11498)
Note: This release is for evaluation purposes and may contain bugs, including security bugs, that may not be individually documented when fixed. See the SECURITY.md file for details. Always prefer to use the latest release.
Please provide feedback and report bugs here.
v0.9.4
Fixed
- Huffman lookup table size fix (#3871 - CVE-2024-11403)
- Check height limit in modular trees. (#3943 - CVE-2024-11498)
Note: This release is for evaluation purposes and may contain bugs, including security bugs, that may not be individually documented when fixed. See the SECURITY.md file for details. Always prefer to use the latest release.
Please provide feedback and report bugs here.
v0.8.4
Fixed
- Huffman lookup table size fix (#3871 - CVE-2024-11403)
- Check height limit in modular trees. (#3943 - CVE-2024-11498)
Note: This release is for evaluation purposes and may contain bugs, including security bugs, that may not be individually documented when fixed. See the SECURITY.md file for details. Always prefer to use the latest release.
Please provide feedback and report bugs here.