Ubuntu alert USN-8444-1 (graphite2)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8444-1] Graphite vulnerability
Date:
             
 
Wed, 17 Jun 2026 13:43:21 +0000
Message-ID:
             
 
<E1wZqY5-0003ol-RG@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8444-1
June 17, 2026

graphite2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

graphite2 could be made to crash or run programs if it opened a specially
crafted file.

Software Description:
- graphite2: Font rendering engine for Complex Scripts

Details:

It was discovered that Graphite incorrectly handled memory when running
certain actions. An attacker could use this issue to cause Graphite to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libgraphite2-3                  1.3.14-11ubuntu1.1

Ubuntu 25.10
  libgraphite2-3                  1.3.14-2ubuntu1.3

Ubuntu 24.04 LTS
  libgraphite2-3                  1.3.14-2ubuntu0.24.04.1

Ubuntu 22.04 LTS
  libgraphite2-3                  1.3.14-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8444-1
  CVE-2026-50593

Package Information:
  https://launchpad.net/ubuntu/+source/graphite2/1.3.14-11u...
  https://launchpad.net/ubuntu/+source/graphite2/1.3.14-2ub...
  https://launchpad.net/ubuntu/+source/graphite2/1.3.14-2ub...
  https://launchpad.net/ubuntu/+source/graphite2/1.3.14-1ub...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=QEOI
-----END PGP SIGNATURE-----