Bug 905393 (CVE-2021-36691)

Summary:	media-libs/libjxl: assertion failure
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor	CC:	dnovomesky, mgorny, proxy-maint
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/libjxl/libjxl/issues/422
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=905094
Whiteboard:	B3 [upstream]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-05-01 03:51:27 UTC

CVE-2021-36691:

libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(). When encoding a malicous GIF file using cjxl, an attacker can trigger a denial of service.

Upstream issue closed as a "special case of"
https://github.com/libjxl/libjxl/issues/762, no fix.