USN-5681-1: gThumb vulnerabilities
14 October 2022
Several security issues were fixed in gThumb.
Releases
Packages
- gthumb - image viewer and browser
Details
It was discovered that gThumb did not properly managed
memory under certain circumstances. An attacker could
possibly use this issue to cause gThumb to crash, resulting
in a denial of service, or possibly execute arbitrary code.
(CVE-2018-18718)
It was discovered that gThumb did not properly managed
memory when processing certain image files. If a user were
tricked into opening a specially crafted JPEG file, an
attacker could possibly use this issue to cause gThumb to
crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2019-20326)
It was discovered that gThumb did not properly handled
certain malformed image files. If a user were tricked into
opening a specially crafted JPEG file, an attacker could
possibly use this issue to cause gThumb to crash, resulting
in a denial of service. (CVE-2020-36427)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04
-
gthumb-data
-
3:3.6.1-1ubuntu0.1~esm1
Available with Ubuntu Pro
-
gthumb
-
3:3.6.1-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 16.04
-
gthumb-data
-
3:3.4.3-1ubuntu0.1~esm1
Available with Ubuntu Pro
-
gthumb
-
3:3.4.3-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-5680-1: gthumb-data, gthumb, gthumb-dev