Ubuntu 16.10: USN-3228-1 Critical: libevent Denial of Service

ubuntu

March 13, 2017

Several security issues were fixed in libevent.

Summary

Several security issues were fixed in libevent.

Software Description:

- libevent: Asynchronous event notification library

Details:

Guido Vranken discovered that libevent incorrectly handled memory when

processing certain data. A remote attacker could possibly use this issue

with an application that uses libevent to cause a denial of service, or

possibly execute arbitrary code.

Topics Covered

security advisory denial of service critical remote code execution ubuntu libevent

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  libevent-2.0-5                  2.0.21-stable-2ubuntu0.16.10.1

Ubuntu 16.04 LTS:
  libevent-2.0-5                  2.0.21-stable-2ubuntu0.16.04.1

Ubuntu 14.04 LTS:
  libevent-2.0-5                  2.0.21-stable-1ubuntu1.14.04.2

Ubuntu 12.04 LTS:
  libevent-2.0-5                  2.0.16-stable-1ubuntu0.2

In general, a standard system update will make all the necessary changes.