========================================================================== Ubuntu Security Notice USN-8582-1 July 21, 2026
jbig2dec vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in jbig2dec. Software Description: - jbig2dec: JBIG2 decoder library Details: Zeng Yunxiang and Song Jiaxuan discovered that jbig2dec had an out-of-bounds read vulnerability in its command-line tool. An attacker could possibly use this issue to cause jbig2dec to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-46361) It was discovered that jbig2dec had an integer overflow in the jbig2_arith_iaid_ctx_new() function. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-38076) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS jbig2dec 0.20-1ubuntu0.26.04.1 libjbig2dec0 0.20-1ubuntu0.26.04.1 Ubuntu 24.04 LTS jbig2dec 0.20-1ubuntu0.24.04.1 libjbig2dec0 0.20-1ubuntu0.24.04.1 Ubuntu 22.04 LTS jbig2dec 0.19-3ubuntu0.1 libjbig2dec0 0.19-3ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8582-1 CVE-2023-46361, CVE-2026-38076 Package Information: https://launchpad.net/ubuntu/+source/jbig2dec/0.20-1ubuntu0.26.04.1 https://launchpad.net/ubuntu/+source/jbig2dec/0.20-1ubuntu0.24.04.1 https://launchpad.net/ubuntu/+source/jbig2dec/0.19-3ubuntu0.1
signature.asc
Description: OpenPGP digital signature
