Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 569
Alerts This Week
Warning Icon 1 569

Ubuntu: 3767-1 Moderate: GLib Denial Of Service Exploit

ubuntu
Calendar Grey September 19, 2018
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-3768-1 informs users about vulnerabilities in GStreamer that may lead to code execution and service interruptions after patching.
Several security issues were fixed in GLib.

Summary

Several security issues were fixed in GLib.

Software Description:

- glib2.0: GLib Input, Output and Streaming Library (fam module)

Details:

It was discovered that GLib incorrectly handled certain files.

An attacker could possibly use this issue to cause a denial of service

or execute arbitrary code. (CVE-2018-16428)

It was discovered that GLib incorrectly handled certain files.

An attacker could possibly use this issue to access sensitive

information. (CVE-2018-16429)

Topics%20covered

Topics Covered

security advisory code execution package update DoS Ubuntu software fix GLib

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  libglib2.0-0                    2.56.2-0ubuntu0.18.04.2
  libglib2.0-bin                  2.56.2-0ubuntu0.18.04.2
  libglib2.0-dev                  2.56.2-0ubuntu0.18.04.2

Ubuntu 16.04 LTS:
  libglib2.0-0                    2.48.2-0ubuntu4.1
  libglib2.0-bin                  2.48.2-0ubuntu4.1
  libglib2.0-dev                  2.48.2-0ubuntu4.1

Ubuntu 14.04 LTS:
  libglib2.0-0                    2.40.2-0ubuntu1.1
  libglib2.0-bin                  2.40.2-0ubuntu1.1
  libglib2.0-dev                  2.40.2-0ubuntu1.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-3767-1

  CVE-2018-16428, CVE-2018-16429

Severity
important
Lowest
Low
Medium
High
Critical

September 19, 2018

Topics%20covered

Topics Covered

security advisory code execution package update DoS Ubuntu software fix GLib

Package Information

  https://launchpad.net/ubuntu/+source/glib2.0/2.56.2-0ubuntu0.18.04.2
  https://launchpad.net/ubuntu/+source/glib2.0/2.48.2-0ubuntu4.1
  https://launchpad.net/ubuntu/+source/glib2.0/2.40.2-0ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.