UbuntuUpdates.org

Package "libcaca0"

Name: libcaca0

Description:

colour ASCII art library
Latest version: 0.99.beta19-2.2ubuntu4.2
Release: jammy (22.04)
Level: security
Repository: main
Head package: libcaca
Homepage: http://caca.zoy.org/wiki/libcaca

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libcaca0"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libcaca0" in Jammy

Repository Area Version
base main 0.99.beta19-2.2ubuntu4
updates main 0.99.beta19-2.2ubuntu4.2

Changelog

Version: 0.99.beta19-2.2ubuntu4.2 2026-05-27 14:07:30 UTC

  libcaca (0.99.beta19-2.2ubuntu4.2) jammy-security; urgency=medium

  * SECURITY UPDATE: overflow in canvas import functionality
    - debian/patches/CVE-2026-42046.patch: Prevent undefined behaviour in
      overflow check in caca/canvas.c.
    - CVE-2026-42046

 -- Marc Deslauriers <email address hidden> Sat, 23 May 2026 19:10:49 -0400
CVE-2026-42046 libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas import functionality allows

Version: *DELETED* 2026-01-07 15:13:19 UTC
No changelog for deleted or moved packages.

Version: 0.99.beta19-2.2ubuntu4.1 2026-01-07 13:07:38 UTC

  libcaca (0.99.beta19-2.2ubuntu4.1) jammy-security; urgency=medium

  * SECURITY UPDATE: divide by zero
    - debian/patches/CVE-2022-0856.patch: adds a check to handle images with
      either a width or height of zero in src/img2txt.c.
    - CVE-2022-0856

 -- Ian Constantin <email address hidden> Mon, 05 Jan 2026 12:51:45 +0200
CVE-2022-0856 libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Service


About   -   Send Feedback to @ubuntu_updates