Ubuntu alert USN-8346-1 (texmaker)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8346-1] Texmaker vulnerabilities
Date:
             
 
Fri, 29 May 2026 18:29:47 +0000
Message-ID:
             
 
<E1wT1xr-0000YJ-LR@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8346-1
May 28, 2026

texmaker vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS

Summary:

Texmaker could be made to crash or run programs if it received specially
crafted input.

Software Description:
- texmaker: Free cross-platform LaTeX editor

Details:

It was discovered that the vendored LibTIFF in Texmaker incorrectly
handled memory when parsing malformed TIFF image metadata. An attacker
could possibly use this issue to cause a denial of service, obtain
sensitive information, or execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  texmaker                        5.1.3+dfsg-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  texmaker-data                   5.1.3+dfsg-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  texmaker                        5.0.3-1ubuntu0.22.04.1~esm1
                                  Available with Ubuntu Pro
  texmaker-data                   5.0.3-1ubuntu0.22.04.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 20.04 LTS
  texmaker                        5.0.3-1ubuntu0.20.04.1~esm1
                                  Available with Ubuntu Pro
  texmaker-data                   5.0.3-1ubuntu0.20.04.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  texmaker                        5.0.2-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  texmaker-data                   5.0.2-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8346-1
  CVE-2025-9900


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=Hh1S
-----END PGP SIGNATURE-----