USN-7259-1: GNU C Library vulnerability

USN-7259-1: GNU C Library vulnerability
6 February 2025

GNU C Library could be made to crash or run programs if it received specially crafted input.

Releases
Ubuntu 24.10 Ubuntu 24.04 LTS Ubuntu 22.04 LTS Ubuntu 20.04 LTS Ubuntu 18.04 ESM

Packages
glibc - GNU C Library

Details
It was discovered that GNU C Library incorrectly handled memory when using
the assert function. An attacker could possibly use this issue to cause a
denial of service or execute arbitrary code.

Update instructions
The problem can be corrected by updating your system to the following

Package Versions:
Ubuntu 24.10

• libc6 - 2.40-1ubuntu3.1
  Ubuntu 24.04
• libc6 - 2.39-0ubuntu8.4
  Ubuntu 22.04
• libc6 - 2.35-0ubuntu3.9
  Ubuntu 20.04
• libc6 - 2.31-0ubuntu9.17
  Ubuntu 18.04
• libc6 - 2.27-3ubuntu1.6+esm4

In general, a standard system update will make all the necessary changes.