UbuntuUpdates.org

Package "djvuserve"

Name: djvuserve

Description:

CGI program for unbundling DjVu files on the fly
Latest version: 3.5.28-2ubuntu0.24.04.1
Release: noble (24.04)
Level: updates
Repository: universe
Head package: djvulibre
Homepage: http://djvu.sourceforge.net/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "djvuserve"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "djvuserve" in Noble

Repository Area Version
base universe 3.5.28-2build4
security universe 3.5.28-2ubuntu0.24.04.1

Changelog

Version: 3.5.28-2ubuntu0.24.04.1 2025-07-09 18:12:25 UTC

  djvulibre (3.5.28-2ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: code execution via OOB write
    - debian/patches/0008-*.patch: fix potential buffer overflow in
      MMRDecoder in libdjvu/MMRDecoder.cpp.
    - CVE-2025-53367

 -- Marc Deslauriers <email address hidden> Tue, 08 Jul 2025 12:53:53 -0400
CVE-2025-53367 DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanr


About   -   Send Feedback to @ubuntu_updates