USN-6737-1: GNU C Library vulnerability

Releases

• Ubuntu 23.10
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• glibc - GNU C Library

Details

Charles Fol discovered that the GNU C Library iconv feature incorrectly
handled certain input sequences. An attacker could use this issue to cause
the GNU C Library to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 23.10

• libc6 - 2.38-1ubuntu6.2

Ubuntu 22.04

• libc6 - 2.35-0ubuntu3.7

Ubuntu 20.04

• libc6 - 2.31-0ubuntu9.15

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• CVE-2024-2961

Related notices

• USN-6737-2: glibc-source, libc6-dev, libc6-x32, glibc-doc, libc6-amd64, libc6-dev-amd64, libc-devtools, libc-dev-bin, libc6-dev-x32, nscd, libc6-i386, libc-bin, libc6, libc6-dev-i386, libc6-s390, locales-all, glibc, libc6-dev-s390, locales
• USN-6762-1: glibc-source, libc6-pic, libc6-prof, eglibc, eglibc-source, libc6-armel, libc6-dev, libc6-x32, glibc-doc, libc6-amd64, libc6-dev-amd64, multiarch-support, libc-dev-bin, libc6-dev-x32, nscd, libc6-i386, libc-bin, libc6, libc6-dev-i386, libc6-lse, libc6-dev-armel, libc6-s390, locales-all, glibc, libc6-dev-s390, locales