Headline
Ubuntu Security Notice USN-5680-1
Ubuntu Security Notice 5680-1 - It was discovered that gThumb did not properly managed memory when processing certain image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. It was discovered that gThumb did not properly handled certain malformed image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service.
==========================================================================Ubuntu Security Notice USN-5680-1October 14, 2022gThumb vulnerabilities==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 20.04 LTSSummary:Several security issues were fixed in gThumb.Software Description:- gthumb: image viewer and browserDetails:It was discovered that gThumb did not properly managedmemory when processing certain image files. If a user weretricked into opening a specially crafted JPEG file, anattacker could possibly use this issue to cause gThumb tocrash, resulting in a denial of service, or possiblyexecute arbitrary code. (CVE-2019-20326)It was discovered that gThumb did not properly handledcertain malformed image files. If a user were tricked intoopening a specially crafted JPEG file, an attacker couldpossibly use this issue to cause gThumb to crash, resultingin a denial of service. (CVE-2020-36427)Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 20.04 LTS:gthumb 3:3.8.0-2.1ubuntu0.1gthumb-data 3:3.8.0-2.1ubuntu0.1In general, a standard system update will make all the necessary changes.References:https://ubuntu.com/security/notices/USN-5680-1CVE-2019-20326, CVE-2020-36427Package Information:https://launchpad.net/ubuntu/+source/gthumb/3:3.8.0-2.1ubuntu0.1