Fedora: 7312-1 Urgent: AQLF Unchecked Buffer Vulnerability

ubuntu

July 5, 2023

CPDB could be made to crash or execute arbitrary code.

Summary

CPDB could be made to crash or execute arbitrary code.

Software Description:

- cpdb-libs: Common Print Dialog Backends - Tools

Details:

Seth Arnold discovered that CPDB incorrectly handled certain characters.

An attacker could possibly use this issue to cause a crash or execute

arbitrary code.

Topics Covered

security advisory critical software update arbitrary code execution ubuntu threat management cpdb issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
  cpdb-libs-tools                 2.0~b4-0ubuntu2.1
  libcpdb-frontend2               2.0~b4-0ubuntu2.1
  libcpdb-libs-tools              2.0~b4-0ubuntu2.1
  libcpdb2                        2.0~b4-0ubuntu2.1

Ubuntu 22.10:
  libcpdb-libs-common1            1.2.0-0ubuntu8.1.22.10.1
  libcpdb-libs-frontend1          1.2.0-0ubuntu8.1.22.10.1

Ubuntu 22.04 LTS:
  libcpdb-libs-common1            1.2.0-0ubuntu8.1.22.04.1
  libcpdb-libs-frontend1          1.2.0-0ubuntu8.1.22.04.1

Ubuntu 20.04 LTS:
  libcpdb-libs-common1            1.2.0-0ubuntu7.1
  libcpdb-libs-frontend1          1.2.0-0ubuntu7.1

In general, a standard system update will make all the necessary changes.