Ubuntu alert USN-8582-1 (jbig2dec)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8582-1] jbig2dec vulnerabilities
Date:
             
 
Tue, 21 Jul 2026 18:55:07 +0000
Message-ID:
             
 
<E1wmFcR-00054W-4L@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8582-1
July 21, 2026

jbig2dec vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in jbig2dec.

Software Description:
- jbig2dec: JBIG2 decoder library

Details:

Zeng Yunxiang and Song Jiaxuan discovered that jbig2dec had an
out-of-bounds read vulnerability in its command-line tool. An attacker
could possibly use this issue to cause jbig2dec to crash, resulting in a
denial of service. This issue only affected Ubuntu 22.04 LTS.
(CVE-2023-46361)

It was discovered that jbig2dec had an integer overflow in the
jbig2_arith_iaid_ctx_new() function. An attacker could possibly use this
issue to cause a denial of service. (CVE-2026-38076)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  jbig2dec                        0.20-1ubuntu0.26.04.1
  libjbig2dec0                    0.20-1ubuntu0.26.04.1

Ubuntu 24.04 LTS
  jbig2dec                        0.20-1ubuntu0.24.04.1
  libjbig2dec0                    0.20-1ubuntu0.24.04.1

Ubuntu 22.04 LTS
  jbig2dec                        0.19-3ubuntu0.1
  libjbig2dec0                    0.19-3ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8582-1
  CVE-2023-46361, CVE-2026-38076

Package Information:
  https://launchpad.net/ubuntu/+source/jbig2dec/0.20-1ubunt...
  https://launchpad.net/ubuntu/+source/jbig2dec/0.20-1ubunt...
  https://launchpad.net/ubuntu/+source/jbig2dec/0.19-3ubunt...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmpfv+UACgkQcpJm3tlz
hgEi7Q/+OA9lbyW98AWNkwMGhG+sF5p3E8zKxeYY/4MU8BhJZsNvwQ1RQRQh6aNR
lLL6Jz1FwuJftyzlS4cH/CzK9vID6AyiCT9Y1tQ62G2JIphId01x5xG9d7a7opA3
4wjIDR5bxxGkYN1TO7TTRtzxDWC/udsaEvMlVnqEYmZWdBLFkFi/uSXVZjRm06ds
IFk/lBps2FuJaTThnBqKq2s6msMhTuiNEfp+InUzXuSYF696Y0Dh3CLnth6YDEna
MyVuQqPEOGNxOgnZv70y+v925a9E+7klJhf3KCdznlRW0Pbos3222QVFXzI19Qtt
jU6lyTvcO8mMxF2pkj08E+2fqg4q1e6qCHecIF97rgVPWHiWVV1TRp5qXbsRCknT
vU/WN2a0sdRZQek6g9gKWAKlGNiAZgnsMiyuEBOohEj0YzcklHzlwLxB6SV2tsEp
Tm02fpF5UqLm4wMbrQ+scP6DKCRK8Obp9nMhouzzpdLFmFUUKxB5d69YOkH7CjKE
roouVps8Gb+lZqSvH9QTbMTXbH6p6iKXzrCY3CkNwlZvbfoBnAVj4d6eZ/K2KA5Y
EKhJlRTq4GNcltvoJtT7iqceQxEvMHfN/JE9L8QsF5+CqQs3FPYk9d5xedxtlbIq
NDsOHi+3BqzZumt+jss7QN6MgnTIr7YDvw+uk6ySr6+JSu3v76Y=
=hErf
-----END PGP SIGNATURE-----