> Debian jpeg-xl Important Denial of Service Info Disclosure CVE-2026-52584

It was discovered that missing input sanitising in the APNG parser in the reference code implementation of the JPEG XL format could result in denial of service or information disclosure if malformed images are processed. For the stable distribution (trixie), this problem has been fixed in