USN-3709-1: Xapian-core vulnerability
It was discovered that Xapian-core incorrectly handled certain files. An attacker could possibly use this to execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-3709-1?
USN-3709-1 has a high severity level due to the potential for arbitrary code execution.
How do I fix USN-3709-1?
To fix USN-3709-1, upgrade to libxapian30 and xapian-tools version 1.4.5-1ubuntu0.1 on Ubuntu 18.04 or version 1.4.4-2ubuntu0.1 on Ubuntu 17.10.
Which versions of software are affected by USN-3709-1?
USN-3709-1 affects libxapian30 and xapian-tools versions prior to 1.4.5-1ubuntu0.1 for Ubuntu 18.04 and versions prior to 1.4.4-2ubuntu0.1 for Ubuntu 17.10.
What type of vulnerability is addressed in USN-3709-1?
USN-3709-1 addresses a vulnerability that allows for the execution of arbitrary code through incorrect file handling in Xapian-core.
Who is impacted by the USN-3709-1 vulnerability?
Users of Ubuntu 18.04 and 17.10 who have installed libxapian30 or xapian-tools prior to the patched versions are impacted by USN-3709-1.