Summary
It was discovered that zlib, vendored in klibc, did not properly handle
integer arithmetic. An attacker could possibly use this issue to execute
arbitrary code or cause a denial of service.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | klibc | 2.0.10-4ubuntu0.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | klibc | 2.0.13-4ubuntu0.2 |
| Ubuntu · 25.10 | klibc | 2.0.14-1ubuntu1.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | klibc | 2.0.3-0ubuntu1.14.04.3+esm4 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | klibc | 2.0.4-8ubuntu1.16.04.4+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | klibc | 2.0.4-9ubuntu2.2+esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | klibc | 2.0.7-1ubuntu5.2+esm1 |
References
-
report
https://ubuntu.com/security/CVE-2016-9843