Update01/08/2026

USN-7943-1: libcaca vulnerability

Ubuntu Desktop
Canonical

USN-7943-1: libcaca vulnerability

Publication date: 7 January 2026
Overview: libcaca could be made to crash if it opened a specially crafted file.

Packages

libcaca - text mode graphics utilities

Details
Han Zheng discovered that libcaca incorrectly handled certain images.
An attacker could possibly use this issue to cause libcaca to crash.

Update instructions
The problem can be corrected by updating your system to the following package versions:

25.10 questing

caca-utils – 0.99.beta20-5ubuntu0.25.10.1
libcaca0 – 0.99.beta20-5ubuntu0.25.10.1

25.04 plucky

caca-utils – 0.99.beta20-5ubuntu0.25.04.1
libcaca0 – 0.99.beta20-5ubuntu0.25.04.1

24.04 LTS noble

caca-utils – 0.99.beta20-4ubuntu0.1
libcaca0 – 0.99.beta20-4ubuntu0.1

22.04 LTS jammy

caca-utils – 0.99.beta19-2.2ubuntu4.1
libcaca0 – 0.99.beta19-2.2ubuntu4.1

20.04 LTS focal

caca-utils – 0.99.beta19-2.1ubuntu1.20.04.2+esm1
libcaca0 – 0.99.beta19-2.1ubuntu1.20.04.2+esm1

18.04 LTS bionic

caca-utils – 0.99.beta19-2ubuntu0.18.04.3+esm1
libcaca0 – 0.99.beta19-2ubuntu0.18.04.3+esm1

16.04 LTS xenial

caca-utils – 0.99.beta19-2ubuntu0.16.04.2+esm2
libcaca0 – 0.99.beta19-2ubuntu0.16.04.2+esm2

14.04 LTS trusty

caca-utils – 0.99.beta18-1ubuntu5.1+esm3
libcaca0 – 0.99.beta18-1ubuntu5.1+esm3