[USN-6620-1] GNU C Library vulnerabilities

-----BEGIN PGP SIGNATURE-----
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=bzer
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6620-1
February 01, 2024

glibc vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 23.10

Summary:

GNU C Library could be made to crash or run programs as an administrator
if it handled a specially crafted request.

Software Description:
- glibc: GNU C Library

Details:

It was discovered that the GNU C Library incorrectly handled the syslog()
function call. A local attacker could use this issue to execute arbitrary
code and possibly escalate privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
libc6 2.38-1ubuntu6.1

After a standard system update you need to reboot your computer to make all
the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6620-1
CVE-2023-6246, CVE-2023-6779, CVE-2023-6780

Package Information:
https://launchpad.net/ubuntu/+source/glibc/2.38-1ubuntu6.1