Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Ubuntu 18.10 USN-3936-1 High Risk: AdvanceCOMP Code Execution

ubuntu
Calendar Grey April 4, 2019
Dist Ubuntu Esm H88
AdvanceCOMP could execute arbitrary code when handling crafted PNG files on Ubuntu systems.
AdvanceCOMP could be made to run arbitrary code if it opened a specially crafted file.

Summary

AdvanceCOMP could be made to run arbitrary code if it opened a

specially crafted file.

Software Description:

- advancecomp: collection of recompression utilities

Details:

It was discovered that AdvanceCOMP incorrectly handled certain PNG

files. An attacker could possibly use this issue to execute arbitrary

code.

Topics%20covered

Topics Covered

security advisory high severity code execution ubuntu advancecomp

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  advancecomp                     2.1-1ubuntu0.18.10.1

Ubuntu 18.04 LTS:
  advancecomp                     2.1-1ubuntu0.18.04.1

Ubuntu 16.04 LTS:
  advancecomp                     1.20-1ubuntu0.2

Ubuntu 14.04 LTS:
  advancecomp                     1.18-1ubuntu0.2

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3936-1

  CVE-2019-9210

April 04, 2019

Topics%20covered

Topics Covered

security advisory high severity code execution ubuntu advancecomp

Package Information

  https://launchpad.net/ubuntu/+source/advancecomp/2.1-1ubuntu0.18.10.1
  https://launchpad.net/ubuntu/+source/advancecomp/2.1-1ubuntu0.18.04.1
  https://launchpad.net/ubuntu/+source/advancecomp/1.20-1ubuntu0.2
  https://launchpad.net/ubuntu/+source/advancecomp/1.18-1ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here