Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 22.04 LTS DjVuLibre Important Denial of Service USN-8054-1

ubuntu
Calendar Grey February 23, 2026
Dist Ubuntu Esm H88
Several security issues in DjVuLibre for Ubuntu require immediate action to prevent denial of service risks.
Several security issues were fixed in DjVuLibre.

Summary

Several security issues were fixed in DjVuLibre.

Software Description:

- djvulibre: DjVu image format library and tools

Details:

It was discovered that DjVuLibre could be forced to execute a division

by zero in certain instances. A remote attacker could possibly use

this issue to cause applications to stop responding or crash, resulting

in a denial of service. (CVE-2021-46312)

It was discovered that DjVuLibre incorrectly handled certain memory

operations. If a user or automated system were tricked into processing a

specially crafted DjVu file, a remote attacker could cause applications

to stop responding or crash, resulting in a denial of service, or possibly

execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu

18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-53367)

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu important update instructions djvulibre

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  libdjvulibre21                  3.5.28-2ubuntu0.24.04.2

Ubuntu 22.04 LTS
  libdjvulibre21                  3.5.28-2ubuntu0.22.04.2

Ubuntu 20.04 LTS
  libdjvulibre21                  3.5.27.1-14ubuntu0.1+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libdjvulibre21                  3.5.27.1-8ubuntu0.4+esm1
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libdjvulibre21                  3.5.27.1-5ubuntu0.1+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8054-1

CVE-2021-46312, CVE-2025-53367

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8054-1

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu important update instructions djvulibre

Package Information

https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.24.04.2
https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.22.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.