UbuntuUpdates.org

Package "libdjvulibre-dev"

Name: libdjvulibre-dev

Description:

Development files for the DjVu image format
Latest version: 3.5.28-2ubuntu0.22.04.2
Release: jammy (22.04)
Level: security
Repository: main
Head package: djvulibre
Homepage: http://djvu.sourceforge.net/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libdjvulibre-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libdjvulibre-dev" in Jammy

Repository Area Version
base main 3.5.28-2build2
updates main 3.5.28-2ubuntu0.22.04.2

Changelog

Version: 3.5.28-2ubuntu0.22.04.2 2026-02-23 15:07:47 UTC

  djvulibre (3.5.28-2ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2021-46312.patch: More Fedora patches
      (parameter validation avoid zdiv exceptions)
    - CVE-2021-46312

 -- John Breton <email address hidden> Fri, 20 Feb 2026 10:31:18 -0500
Source diff to previous version
CVE-2021-46312 An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.

Version: 3.5.28-2ubuntu0.22.04.1 2025-07-09 15:07:14 UTC

  djvulibre (3.5.28-2ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: code execution via OOB write
    - debian/patches/0008-*.patch: fix potential buffer overflow in
      MMRDecoder in libdjvu/MMRDecoder.cpp.
    - CVE-2025-53367

 -- Marc Deslauriers <email address hidden> Tue, 08 Jul 2025 12:56:00 -0400
CVE-2025-53367 DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanr


About   -   Send Feedback to @ubuntu_updates