USN-7505-1: Abseil vulnerability

USN-7505-1: Abseil vulnerability

Publication date: 12 May 2025
Overview : Abseil could be made to crash if it received specially crafted input.
Releases : 25.04, 24.10, 24.04 LTS, 22.04 LTS

Packages
abseil - extensions to the C++ standard library

Details
It was discovered that Abseil incorrectly handled memory with the upper
bound of the size argument. An attacker could possibly use this issue to
cause a denial of service or memory corruption.

Update instructions
In general, a standard system update will make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version

• 25.04 plucky libabsl20230802 – 20230802.1-4.2ubuntu0.2
• 24.10 oracular libabsl20230802 – 20230802.1-4ubuntu1.2
• 24.04 noble libabsl20220623t64 – 20220623.1-3.1ubuntu3.2
• 22.04 jammy libabsl20210324 – 0~20210324.2-2ubuntu0.2