Ubuntu Security Notice USN-6353-1 ≈ Packet Storm

Roger Wilco Alertes 7 septembre 2023 Affichages : 276

Home ^[1] Files ^[2] News ^[3] &[SERVICES_TAB] Contact ^[4] Add New ^[5]

Ubuntu Security Notice USN-6353-1^[6]: Authored by Ubuntu ^[7] | Site security.ubuntu.com ^[8]; Ubuntu Security Notice 6353-1 - Wooseok Kang discovered that PLIB did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted TGA file, an attacker could possibly use this issue to cause applications using PLIB to crash, resulting in a denial of service, or possibly execute arbitrary code.; systems | linux ^[9], ubuntu ^[10]; advisories | CVE-2021-38714 ^[11]; SHA-256 | a9b64cd6ea92f6098fd729054a129c6ca83babf23d8cb1eb023e3bbb24aedc8a; Download ^[12] | Favorite ^[13] | View ^[14]

        ==========================================================================
Ubuntu Security Notice USN-6353-1
September 07, 2023
plib vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS (Available with Ubuntu Pro)
- Ubuntu 16.04 LTS (Available with Ubuntu Pro)
Summary:
PLIB could be made to execute arbitrary code if it opens a specially
crafted TGA file.
Software Description:
- plib: Portability Libraries: Development package
Details:
Wooseok Kang discovered that PLIB did not properly manage memory under
certain circumstances. If a user were tricked into opening a specially
crafted TGA file, an attacker could possibly use this issue to cause
applications using PLIB to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS:
libplib1                        1.8.5-8ubuntu0.20.04.1
Ubuntu 18.04 LTS (Available with Ubuntu Pro):
libplib1                        1.8.5-8ubuntu0.18.04.1~esm1
Ubuntu 16.04 LTS (Available with Ubuntu Pro):
libplib1                        1.8.5-7ubuntu0.1~esm1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6353-1
CVE-2021-38714
Package Information:
https://launchpad.net/ubuntu/+source/plib/1.8.5-8ubuntu0.20.04.1