USN-4033-1: libmysofa vulnerability
It was discovered that a libmysofa component does not properly validate multiplications and additions, and may crash with some specific input.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libmysofa0to a version that resolves this vulnerability.Fixed in 0.6~dfsg0-2ubuntu0.19.04.1 - Upgrade
Upgrade
ubuntu/libmysofa0to a version that resolves this vulnerability.Fixed in 0.6~dfsg0-2ubuntu0.18.10.1 - Upgrade
Upgrade
ubuntu/libmysofa0to a version that resolves this vulnerability.Fixed in 0.6~dfsg0-2ubuntu0.18.04.1
Event History
Frequently Asked Questions
What is the severity of USN-4033-1?
The severity of USN-4033-1 is high due to the potential for crashes from improper input handling.
How do I fix USN-4033-1?
To fix USN-4033-1, you should update the libmysofa0 package to version 0.6~dfsg0-2ubuntu0.19.04.1 or higher for Ubuntu 19.04, and the corresponding version for other affected releases.
Which systems are affected by USN-4033-1?
USN-4033-1 affects Ubuntu 18.04, 18.10, and 19.04 installations using the libmysofa0 package.
What problem does USN-4033-1 address?
USN-4033-1 addresses a vulnerability where libmysofa does not properly validate multiplications and additions, leading to potential crashes.
Is there a workaround for USN-4033-1?
There is no specific workaround for USN-4033-1; updating the package is the recommended solution.