USN-3604-1: libvorbis vulnerability
USN-3604-1: libvorbis vulnerability libvorbis vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary libvorbis could be made to crash or run programs as your login if it opened a specially crafted file. Software Description libvorbis – The Vorbis General Audio Compression Codec Details Richard Zhu discovered that libvorbis incorrectly handled certain sound files. An attacker could use this to cause libvorbis to crash, resulting in a denial or service, or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10 libvorbis0a – 1.3.5-4ubuntu0.2 Ubuntu 16.04 LTS libvorbis0a – 1.3.5-3ubuntu0.2 Ubuntu 14.04 LTS libvorbis0a – 1.3.2-1.3ubuntu1.2 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system upgrade you need to restart any applications that [ more… ]