Stay Secure with the Latest Linux Advisories

security advisorydenial of servicecritical

Ubuntu 25.04: fdkaac Critical Denial of Service Issues USN-7660-1

Several security issues were fixed in fdkaac.. ========================================================================== Ubuntu Security Notice USN-7660-1 July 22, 2025 fdkaac vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in fdkaac. Software Description: - fdkaac: Command line frontend for libfdk-aac Details: It was discovered that fdkaac did not correctly handle certain input. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. (CVE-2022-36148) It was discovered that fdkaac did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. (CVE-2022-37781, CVE-2023-34823, CVE-2023-34824) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.04 fdkaac 1.0.0-1ubuntu0.25.04.1 Ubuntu 24.04 LTS fdkaac 1.0.0-1ubuntu0.24.04.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS fdkaac 1.0.0-1ubuntu0.22.04.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS fdkaac 0.6.3-1ubuntu0.20.04.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS fdkaac 0.6.3-1ubuntu0.18.04.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS fdkaac 0.6.2-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make allthe necessary changes. References: https://ubuntu.com/security/notices/USN-7660-1 CVE-2022-36148, CVE-2022-37781, CVE-2023-34823, CVE-2023-34824 Package Information: https://launchpad.net/ubuntu/+source/fdkaac/1.0.0-1ubuntu0.25.04.1 . Multiple vulnerabilities in fdkaac addressed in various Ubuntu editions. All impacted systems advised to apply updates.. fdkaac vulnerabilities, Ubuntu security updates, command line tool security. . Severity: Critical. LinuxSecurity.com Team

Jul 22, 2025 •Critical Ubuntu