Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 25.10 libjxl Critical DoS Risk CVE-2026-1837 USN-8146-1

ubuntu
Calendar Grey April 2, 2026
Dist Ubuntu Esm H88
Update libjxl on Ubuntu 25.10 to avoid crashes and possible code execution risks due to memory management flaws.
libjxl could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

libjxl could be made to crash or run programs as your login if it

opened a specially crafted file.

Software Description:

- jpeg-xl: Reference codec implementation for JPEG XL compressed raster image format

Details:

Daniel Novomesk� discovered that libjxl did not properly manage memory when

decoding certain files. An attacker could use this issue to cause

libjxl to crash, resulting in denial of service, or possibly execute

arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service critical code execution Ubuntu jpeg-xl

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  libjpegxl-java                  0.11.1-6ubuntu1.1
  libjxl-tools                    0.11.1-6ubuntu1.1
  libjxl0.11                      0.11.1-6ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8146-1

CVE-2026-1837

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8146-1

Topics%20covered

Topics Covered

security advisory denial of service critical code execution Ubuntu jpeg-xl

Package Information

https://launchpad.net/ubuntu/+source/jpeg-xl/0.11.1-6ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.