Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 584
Alerts This Week
Warning Icon 1 584

Ubuntu 14.04 LTS: USN-7107-1 critical: zlib denial of service

ubuntu
Calendar Grey November 13, 2024
Scroller Ubuntu
Concerning the zlib vulnerability USN-7107-1 affecting Ubuntu systems: it’s crucial to implement updates to avert potential system failures as well as unauthorized code execution.
zlib could be made to crash or run programs if it received specially crafted input.

Summary

zlib could be made to crash or run programs if it received

specially crafted input.

Software Description:

- zlib: Lossless data-compression library

Details:

It was discovered that Minizip in zlib incorrectly handled certain zip

header fields. An attacker could possibly use this issue to cause a denial

of service, or execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service code execution Ubuntu zlib update instruction

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS
lib32z1 1:1.2.8.dfsg-1ubuntu1.1+esm3
Available with Ubuntu Pro
lib32z1-dev 1:1.2.8.dfsg-1ubuntu1.1+esm3
Available with Ubuntu Pro
libx32z1 1:1.2.8.dfsg-1ubuntu1.1+esm3
Available with Ubuntu Pro
libx32z1-dev 1:1.2.8.dfsg-1ubuntu1.1+esm3
Available with Ubuntu Pro
zlib-bin 1:1.2.8.dfsg-1ubuntu1.1+esm3
Available with Ubuntu Pro
zlib1g 1:1.2.8.dfsg-1ubuntu1.1+esm3
Available with Ubuntu Pro
zlib1g-dev 1:1.2.8.dfsg-1ubuntu1.1+esm3
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7107-1

CVE-2023-45853

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7107-1

Topics%20covered

Topics Covered

security advisory denial of service code execution Ubuntu zlib update instruction

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.