This update for libjxl fixes the following issues:

- CVE-2025-12474: a specially crafted file can cause the decoder to read pixel data from uninitialized allocated memory
  (bsc#1258090).
- CVE-2026-1837: a specially crafted file can cause the decoder to write pixel data to uninitialized unallocated memory
  (bsc#1258091).