========================================================================== Ubuntu Security Notice USN-4326-1 April 08, 2020 libiberty vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in libiberty. Software Description: - libiberty: library of utility functions used by GNU programs Details: It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary code Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: libiberty-dev 20170913-1ubuntu0.1 Ubuntu 16.04 LTS: libiberty-dev 20160215-1ubuntu0.3 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/4326-1 CVE-2018-12641, CVE-2018-12697, CVE-2018-12698, CVE-2018-12934, CVE-2018-17794, CVE-2018-17985, CVE-2018-18483, CVE-2018-18484, CVE-2018-18700, CVE-2018-18701, CVE-2018-9138, CVE-2019-14250, CVE-2019-9070, CVE-2019-9071 Package Information: https://launchpad.net/ubuntu/+source/libiberty/20170913-1ubuntu0.1 https://launchpad.net/ubuntu/+source/libiberty/20160215-1ubuntu0.3