Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Ubuntu Security Notice USN-8586-1 addresses multiple vulnerabilities in libgphoto2 affecting sensitive information and potential denial of service, requiring updates across various Ubuntu LTS versions.. ========================================================================== Ubuntu Security Notice USN-8586-1 July 22, 2026 libgphoto2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in libgphoto2. Software Description: - libgphoto2: gphoto2 digital camera library Details: It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing EOS image format data. An attacker with physical access could possibly use this issue to obtain sensitive information. (CVE-2026-40333) It was discovered that libgphoto2 did not properly null-terminate buffers when parsing Canon folder entries. An attacker with physical access could possibly use this issue to obtain sensitive information. (CVE-2026-40334) It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing device property values. An attacker with physical access could possibly use this issue to obtain sensitive information. (CVE-2026-40335) It was discovered that libgphoto2 had a memory leak when parsing Sony device property descriptors. An attacker with physical access could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-40336) It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing Sony device property enumeration data. An attacker with physical access could possibly use this issue to obtain sensitive information. (CVE-2026-40338) It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing Sony device property form flags. An attacker with physical access couldpossibly use this issue to obtain sensitive information. (CVE-2026-40339) It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing object information. An attacker with physical access could possibly use this issue to obtain sensitive information. (CVE-2026-40340) It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing EOS focus information. An attacker with physical access could possibly use this issue to cause libgphoto2 to crash, resulting in a denial of service. (CVE-2026-40341) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libgphoto2-6t64 2.5.33-1ubuntu1.1 Ubuntu 24.04 LTS libgphoto2-6t64 2.5.31-2.1ubuntu1.1 Ubuntu 22.04 LTS libgphoto2-6 2.5.27-1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8586-1 CVE-2026-40333, CVE-2026-40334, CVE-2026-40335, CVE-2026-40336, CVE-2026-40338, CVE-2026-40339, CVE-2026-40340, CVE-2026-40341 Package Information: https://launchpad.net/ubuntu/+source/libgphoto2/2.5.33-1ubuntu1.1 https://launchpad.net/ubuntu/+source/libgphoto2/2.5.31-2.1ubuntu1.1 https://launchpad.net/ubuntu/+source/libgphoto2/2.5.27-1ubuntu0.1 . Several security issues in libgphoto2 could lead to information disclosure and denial of service. Update your Ubuntu now.. libgphoto2 security update, Ubuntu libgphoto2 vulnerabilities, libgphoto2 critical issues. . Severity: Important. LinuxSecurity.com Team
An update that solves 8 vulnerabilities can now be installed.. # libgphoto2-6-2.5.34-1.1 on GA media Announcement ID: openSUSE-SU-2026:10916-1 Rating: moderate Cross-References: * CVE-2026-40333 * CVE-2026-40334 * CVE-2026-40335 * CVE-2026-40336 * CVE-2026-40338 * CVE-2026-40339 * CVE-2026-40340 * CVE-2026-40341 CVSS scores: * CVE-2026-40333 ( SUSE ): 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-40334 ( SUSE ): 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-40335 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-40336 ( SUSE ): 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-40338 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-40339 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-40340 ( SUSE ): 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-40341 ( SUSE ): 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * openSUSE Tumbleweed An update that solves 8 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the libgphoto2-6-2.5.34-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * libgphoto2-6 2.5.34-1.1 * libgphoto2-6-32bit 2.5.34-1.1 * libgphoto2-6-lang 2.5.34-1.1 * libgphoto2-devel 2.5.34-1.1 * libgphoto2-devel-32bit 2.5.34-1.1 * libgphoto2-devel-doc 2.5.34-1.1 * libgphoto2-doc 2.5.34-1.1 * libgphoto2_port12 2.5.34-1.1 * libgphoto2_port12-32bit 2.5.34-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-40333.html * https://www.suse.com/security/cve/CVE-2026-40334.html * https://www.suse.com/security/cve/CVE-2026-40335.html * https://www.suse.com/security/cve/CVE-2026-40336.html * https://www.suse.com/security/cve/CVE-2026-40338.html * https://www.suse.com/security/cve/CVE-2026-40339.html * https://www.suse.com/security/cve/CVE-2026-40340.html *https://www.suse.com/security/cve/CVE-2026-40341.html . # libgphoto2-6-2.5.34-1.1 on GA media Announcement ID: openSUSE-SU-2026:10916-1 Rating: moderate Cro. update, solves, vulnerabilities, installed, libgphoto2-6-2, media. . Severity: moderate. LinuxSecurity.com Team
An update that solves 8 vulnerabilities can now be installed.. # libgphoto2-6-2.5.34-1.1 on GA media Announcement ID: openSUSE-SU-2026:10916-1 Rating: moderate Cross-References: * CVE-2026-40333 * CVE-2026-40334 * CVE-2026-40335 * CVE-2026-40336 * CVE-2026-40338 * CVE-2026-40339 * CVE-2026-40340 * CVE-2026-40341 CVSS scores: * CVE-2026-40333 ( SUSE ): 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-40334 ( SUSE ): 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-40335 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-40336 ( SUSE ): 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-40338 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-40339 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-40340 ( SUSE ): 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-40341 ( SUSE ): 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * openSUSE Tumbleweed An update that solves 8 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the libgphoto2-6-2.5.34-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * libgphoto2-6 2.5.34-1.1 * libgphoto2-6-32bit 2.5.34-1.1 * libgphoto2-6-lang 2.5.34-1.1 * libgphoto2-devel 2.5.34-1.1 * libgphoto2-devel-32bit 2.5.34-1.1 * libgphoto2-devel-doc 2.5.34-1.1 * libgphoto2-doc 2.5.34-1.1 * libgphoto2_port12 2.5.34-1.1 * libgphoto2_port12-32bit 2.5.34-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-40333.html * https://www.suse.com/security/cve/CVE-2026-40334.html * https://www.suse.com/security/cve/CVE-2026-40335.html * https://www.suse.com/security/cve/CVE-2026-40336.html * https://www.suse.com/security/cve/CVE-2026-40338.html * https://www.suse.com/security/cve/CVE-2026-40339.html * https://www.suse.com/security/cve/CVE-2026-40340.html *https://www.suse.com/security/cve/CVE-2026-40341.html . An update for openSUSE addresses 8 security issues in libgphoto2, enhancing system protection with a moderate severity rating.. openSUSE Security Patch, libgphoto2 Update, Moderate Security Advisory. . Severity: moderate. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.