USN-7286-1: iniParser vulnerability

USN-7286-1: iniParser vulnerability
24 February 2025

iniparser could be made to crash if it opened a specially crafted file.

Releases
Ubuntu 24.10 Ubuntu 24.04 LTS Ubuntu 22.04 LTS

Packages
iniparser - INI file reader/writer

Details
It was discovered that iniParser incorrectly handled certain files. An
attacker could possibly use this issue to cause iniParser to crash,
resulting in a denial of service.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.10

• libiniparser1 - 4.2.1-1ubuntu0.1
  Ubuntu 24.04
• libiniparser1 - 4.1-7ubuntu0.1
  Ubuntu 22.04
• libiniparser1 - 4.1-4ubuntu4.2
  In general, a standard system update will make all the necessary changes.