Ubuntu alert USN-7576-1 (dwarfutils)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7576-1] dwarfutils vulnerabilities
Date:
             
 
Wed, 18 Jun 2025 04:49:45 +0000
Message-ID:
             
 
<E1uRkk5-0006TS-FQ@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7576-1
June 18, 2025

dwarfutils vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

dwarfutils could be made to crash or run programs as your login if it
opened a specially crafted file.

Software Description:
- dwarfutils: Utilities for DWARF debugging information

Details:

It was discovered that dwarfutils did not correctly certain memory
operations, which could lead to a buffer overflow. An attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  dwarfdump                       20210528-1ubuntu0.25.04.1
  libdwarf-dev                    20210528-1ubuntu0.25.04.1
  libdwarf1                       20210528-1ubuntu0.25.04.1

Ubuntu 24.10
  dwarfdump                       20210528-1ubuntu0.24.10.1
  libdwarf-dev                    20210528-1ubuntu0.24.10.1
  libdwarf1                       20210528-1ubuntu0.24.10.1

Ubuntu 24.04 LTS
  dwarfdump                       20210528-1ubuntu0.24.04.1~esm1
                                  Available with Ubuntu Pro
  libdwarf-dev                    20210528-1ubuntu0.24.04.1~esm1
                                  Available with Ubuntu Pro
  libdwarf1                       20210528-1ubuntu0.24.04.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  dwarfdump                       20210528-1ubuntu0.22.04.1~esm1
                                  Available with Ubuntu Pro
  libdwarf-dev                    20210528-1ubuntu0.22.04.1~esm1
                                  Available with Ubuntu Pro
  libdwarf1                       20210528-1ubuntu0.22.04.1~esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7576-1
  CVE-2022-32200

Package Information:
  https://launchpad.net/ubuntu/+source/dwarfutils/20210528-...
  https://launchpad.net/ubuntu/+source/dwarfutils/20210528-...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=dWAY
-----END PGP SIGNATURE-----