# jpeg-xl security updates

Patch Radar has 20 security fixes for jpeg-xl, closing 8 CVEs. The newest is DEBIAN-CVE-2026-52584 (0.11.2-5.1), released July 17, 2026.

- Web page: https://patchblox.com/security/product/linux/jpeg-xl
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-52584](https://patchblox.com/security/data/fix/linux/debian-cve-2026-52584.md) | Jul 17, 2026 | Debian 14 0.11.2-5.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-52584](https://patchblox.com/security/data/fix/linux/debian-cve-2026-52584.md) | Jul 17, 2026 | Debian 13.5 (trixie) 0.11.2-0.1~deb13u3 | High | 1 | 0 |
| [DEBIAN-CVE-2025-70103](https://patchblox.com/security/data/fix/linux/debian-cve-2025-70103.md) | Jun 24, 2026 | Debian 14 0.11.2-5.1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-70103](https://patchblox.com/security/data/fix/linux/debian-cve-2025-70103.md) | Jun 24, 2026 | Debian 13.5 (trixie) 0.11.2-0.1~deb13u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-1837](https://patchblox.com/security/data/fix/linux/debian-cve-2026-1837.md) | Feb 11, 2026 | Debian 14 0.11.2-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-1837](https://patchblox.com/security/data/fix/linux/debian-cve-2026-1837.md) | Feb 11, 2026 | Debian 13.5 (trixie) 0.11.2-0.1~deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-12474](https://patchblox.com/security/data/fix/linux/debian-cve-2025-12474.md) | Feb 11, 2026 | Debian 14 0.11.2-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-12474](https://patchblox.com/security/data/fix/linux/debian-cve-2025-12474.md) | Feb 11, 2026 | Debian 13.5 (trixie) 0.11.2-0.1~deb13u1 | Routine | 1 | 0 |
| [DSA-5958-1](https://patchblox.com/security/data/fix/linux/dsa-5958-1.md) | Jul 4, 2025 | Debian 12.15 (bookworm) 0.7.0-10+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-11403](https://patchblox.com/security/data/fix/linux/debian-cve-2024-11403.md) | Nov 25, 2024 | Debian 12.15 (bookworm) 0.7.0-10+deb12u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2024-11403](https://patchblox.com/security/data/fix/linux/debian-cve-2024-11403.md) | Nov 25, 2024 | Debian 13.5 (trixie) 0.10.4-2 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2024-11403](https://patchblox.com/security/data/fix/linux/debian-cve-2024-11403.md) | Nov 25, 2024 | Debian 14 0.10.4-2 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2024-11498](https://patchblox.com/security/data/fix/linux/debian-cve-2024-11498.md) | Nov 25, 2024 | Debian 12.15 (bookworm) 0.7.0-10+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-11498](https://patchblox.com/security/data/fix/linux/debian-cve-2024-11498.md) | Nov 25, 2024 | Debian 13.5 (trixie) 0.10.4-2 | High | 1 | 0 |
| [DEBIAN-CVE-2024-11498](https://patchblox.com/security/data/fix/linux/debian-cve-2024-11498.md) | Nov 25, 2024 | Debian 14 0.10.4-2 | High | 1 | 0 |
| [DEBIAN-CVE-2023-35790](https://patchblox.com/security/data/fix/linux/debian-cve-2023-35790.md) | Jun 16, 2023 | Debian 12.15 (bookworm) 0.7.0-10+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-35790](https://patchblox.com/security/data/fix/linux/debian-cve-2023-35790.md) | Jun 16, 2023 | Debian 13.5 (trixie) 0.8.2-4 | High | 1 | 0 |
| [DEBIAN-CVE-2023-35790](https://patchblox.com/security/data/fix/linux/debian-cve-2023-35790.md) | Jun 16, 2023 | Debian 14 0.8.2-4 | High | 1 | 0 |
| [DEBIAN-CVE-2023-0645](https://patchblox.com/security/data/fix/linux/debian-cve-2023-0645.md) | Apr 11, 2023 | Debian 13.5 (trixie) 0.8.2-4 | High | 1 | 0 |
| [DEBIAN-CVE-2023-0645](https://patchblox.com/security/data/fix/linux/debian-cve-2023-0645.md) | Apr 11, 2023 | Debian 14 0.8.2-4 | High | 1 | 0 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo