Home / mailings [USN-9017-1] libgphoto2 vulnerabilities
Posted on 10 November 2026
Ubuntu Security==========================================================================Ubuntu Security Notice USN-9017-1
November 10, 2026
libgphoto2 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.10
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in libgphoto2.
Software Description:
- libgphoto2: gphoto2 digital camera library
Details:
It was discovered that libgphoto2 did not properly manage memory when
initializing certain cameras. If a user were tricked into connecting a
malicious USB device, an attacker could possibly use this issue to cause
libgphoto2 to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2026-120451)
It was discovered that libgphoto2 did not properly manage memory when
processing certain thumbnails. If a user were tricked into connecting a
malicious USB device, an attacker could possibly use this issue to cause
libgphoto2 to crash, resulting in a denial of service, or expose sensitive
information. (CVE-2026-120452)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.10
libgphoto2-6t64 2.5.33-1ubuntu2.1
libgphoto2-dev 2.5.33-1ubuntu2.1
libgphoto2-dev-doc 2.5.33-1ubuntu2.1
libgphoto2-l10n 2.5.33-1ubuntu2.1
libgphoto2-port12t64 2.5.33-1ubuntu2.1
Ubuntu 26.04 LTS
libgphoto2-6t64 2.5.33-1ubuntu1.2
libgphoto2-dev 2.5.33-1ubuntu1.2
libgphoto2-dev-doc 2.5.33-1ubuntu1.2
libgphoto2-l10n 2.5.33-1ubuntu1.2
libgphoto2-port12t64 2.5.33-1ubuntu1.2
Ubuntu 24.04 LTS
libgphoto2-6t64 2.5.31-2.1ubuntu1.2
libgphoto2-dev 2.5.31-2.1ubuntu1.2
libgphoto2-dev-doc 2.5.31-2.1ubuntu1.2
libgphoto2-l10n 2.5.31-2.1ubuntu1.2
libgphoto2-port12t64 2.5.31-2.1ubuntu1.2
Ubuntu 22.04 LTS
libgphoto2-6 2.5.27-1ubuntu0.2
libgphoto2-dev 2.5.27-1ubuntu0.2
libgphoto2-dev-doc 2.5.27-1ubuntu0.2
libgphoto2-l10n 2.5.27-1ubuntu0.2
libgphoto2-port12 2.5.27-1ubuntu0.2
Ubuntu 20.04 LTS
libgphoto2-6 2.5.25-0ubuntu0.1+esm1
Available with Ubuntu Pro
libgphoto2-dev 2.5.25-0ubuntu0.1+esm1
Available with Ubuntu Pro
libgphoto2-dev-doc 2.5.25-0ubuntu0.1+esm1
Available with Ubuntu Pro
libgphoto2-l10n 2.5.25-0ubuntu0.1+esm1
Available with Ubuntu Pro
libgphoto2-port12 2.5.25-0ubuntu0.1+esm1
Available with Ubuntu Pro
Ubuntu 18.04 LTS
libgphoto2-6 2.5.16-2ubuntu0.1~esm1
Available with Ubuntu Pro
libgphoto2-dev 2.5.16-2ubuntu0.1~esm1
Available with Ubuntu Pro
libgphoto2-dev-doc 2.5.16-2ubuntu0.1~esm1
Available with Ubuntu Pro
libgphoto2-l10n 2.5.16-2ubuntu0.1~esm1
Available with Ubuntu Pro
libgphoto2-port12 2.5.16-2ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 16.04 LTS
libgphoto2-6 2.5.9-3ubuntu0.1~esm1
Available with Ubuntu Pro
libgphoto2-dev 2.5.9-3ubuntu0.1~esm1
Available with Ubuntu Pro
libgphoto2-dev-doc 2.5.9-3ubuntu0.1~esm1
Available with Ubuntu Pro
libgphoto2-l10n 2.5.9-3ubuntu0.1~esm1
Available with Ubuntu Pro
libgphoto2-port12 2.5.9-3ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 14.04 LTS
libgphoto2-2-dev 2.5.3.1-1ubuntu2.2+esm1
Available with Ubuntu Pro
libgphoto2-6 2.5.3.1-1ubuntu2.2+esm1
Available with Ubuntu Pro
libgphoto2-dev 2.5.3.1-1ubuntu2.2+esm1
Available with Ubuntu Pro
libgphoto2-dev-doc 2.5.3.1-1ubuntu2.2+esm1
Available with Ubuntu Pro
libgphoto2-l10n 2.5.3.1-1ubuntu2.2+esm1
Available with Ubuntu Pro
libgphoto2-port10 2.5.3.1-1ubuntu2.2+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-9017-1
CVE-2026-120451, CVE-2026-120452
Package Information:
https://launchpad.net/ubuntu/+source/libgphoto2/2.5.33-1ubuntu2.1
https://launchpad.net/ubuntu/+source/libgphoto2/2.5.33-1ubuntu1.2
https://launchpad.net/ubuntu/+source/libgphoto2/2.5.31-2.1ubuntu1.2
https://launchpad.net/ubuntu/+source/libgphoto2/2.5.27-1ubuntu0.2
--===============2732918402722042237==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
