Debian 10694 Published by

Debian GNU/Linux has received two security updates: ELA-1498-1 openjpeg2 for Debian 10 ELTS and DLA 4266-1 distro-info-data database update for Debian 11 LTS

ELA-1498-1 openjpeg2 security update
[DLA 4266-1] distro-info-data database update




ELA-1498-1 openjpeg2 security update


Package : openjpeg2
Version : 2.3.0-2+deb10u4 (buster)

Related CVEs :
CVE-2019-12973
CVE-2025-50952

Multiple vulnerabilities have been fixed in the JPEG 2000 image library OpenJPEG.

CVE-2019-12973
Excessive iterations in convertbmp

CVE-2025-50952
Avoid potential undefined behaviour in opj_dwt_decode_tile()


ELA-1498-1 openjpeg2 security update



[SECURITY] [DLA 4266-1] distro-info-data database update


-------------------------------------------------------------------------
Debian LTS Advisory DLA-4266-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Stefano Rivera
August 09, 2025 https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package : distro-info-data
Version : 0.51+deb11u9

This is a routine update of the distro-info-data database for Debian LTS
users.

It adds the release and estimated EoL dates for Debian 13 "Trixie".
Also included is a new "eol-legacy" column for Ubuntu Legacy Support.

For Debian 11 bullseye, this problem has been fixed in version
0.51+deb11u9.

We recommend that you upgrade your distro-info-data packages.

For the detailed security status of distro-info-data please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/distro-info-data

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS