UbuntuUpdates.org

Package "libgphoto2"

Name: libgphoto2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • gphoto2 digital camera library
  • gphoto2 digital camera library (development files)
  • gphoto2 digital camera library (development documentation)
  • gphoto2 digital camera library - localized messages
Latest version: 2.5.31-2.1ubuntu1.2
Release: noble (24.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "libgphoto2" in Noble

Repository Area Version
base main 2.5.31-2.1build2
updates main 2.5.31-2.1ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.5.31-2.1ubuntu1.2 2026-11-10 10:14:02 UTC

libgphoto2 (2.5.31-2.1ubuntu1.2) noble-security; urgency=medium

  * SECURITY UPDATE: Stack-based and heap-based buffer overflow via unbounded
    allocation table entry count
    - debian/patches/CVE-2026-120451.patch: jl2005c: reject an allocation table
      that does not fit the buffers in camlibs/jl2005c/jl2005c.c.
    - CVE-2026-120451
  * SECURITY UPDATE: Heap out-of-bounds read via oversized thumbnail processing
    - debian/patches/CVE-2026-120452.patch: jl2005c: bound thumbnail conversion
      by the real input length in camlibs/jl2005c/jl2005bcd_decompress.c.
    - CVE-2026-120452

 -- Hurman Mon, 09 Nov 2026 11:11:33 +0500
Source diff to previous version
CVE-2026-120451 libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allow malicious USB devices to c
CVE-2026-120452 libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to c

Version: 2.5.31-2.1ubuntu1.1 2026-07-22 20:08:04 UTC
No changelog available yet.


About   -   Send Feedback to @ubuntu_updates