USN-4779-1: Gettext vulnerability
15 March 2021
Gettext could be made to crash or run programs if it received specially crafted input.
Releases
Packages
- php-gettext - PHP library to collect and manipulate gettext
Details
Danilo Segan discovered that Gettext mishandled certain input. An
attacker could use this vulnerability to execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
php-gettext
-
1.0.11-2ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 14.04
-
php-gettext
-
1.0.11-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.