[USN-6737-2] GNU C Library vulnerability

-----BEGIN PGP SIGNATURE-----
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=P3a3
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6737-2
April 29, 2024

glibc vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

GNU C Library could be made to crash or run programs if it processed
specially crafted data.

Software Description:
- glibc: GNU C Library

Details:

USN-6737-1 fixed a vulnerability in the GNU C Library. This update provides
the corresponding update for Ubuntu 24.04 LTS.

Original advisory details:

Charles Fol discovered that the GNU C Library iconv feature incorrectly
handled certain input sequences. An attacker could use this issue to cause
the GNU C Library to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
libc6 2.39-0ubuntu8.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6737-2
https://ubuntu.com/security/notices/USN-6737-1
CVE-2024-2961

Package Information:
https://launchpad.net/ubuntu/+source/glibc/2.39-0ubuntu8.1