Moderate USN-7336-1 Gnuchess Overflow Issue in Ubuntu 24.10, 24.04 LTS

ubuntu

March 10, 2025

gnuchess could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

gnuchess could be made to crash or run programs as your login if it

opened a specially crafted file.

Software Description:

- gnuchess: Plays a game of chess, either against the user or against itself

Details:

Michael Vaughan discovered an overflow vulnerability in GNU Chess that

occurs when reading a specially crafted Portable Game Notation (PGN)

file. An attacker could possibly use this issue to cause GNU Chess to

crash, resulting in a denial of service, or the execution of arbitrary

code.

Topics Covered

security advisory denial of service code execution Ubuntu gnuchess

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   gnuchess                        6.2.7-1+deb11u1build0.24.10.1

Ubuntu 24.04 LTS
   gnuchess                        6.2.7-1+deb11u1build0.24.04.1

Ubuntu 22.04 LTS
   gnuchess                        6.2.7-1+deb11u1build0.22.04.1

In general, a standard system update will make all the necessary changes.