==========================================================================
Ubuntu Security Notice USN-3815-2
November 12, 2018

gettext vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 12.04 ESM

Summary:

gettext could be made to execute arbitrary code if it received
a specially crafted message.

Software Description:
– gettext: GNU Internationalization utilities

Details:

USN-3815-1 fixed a vulnerability in gettext. This update provides
the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

It was discovered that gettext incorrectly handled certain messages.
An attacker could possibly use this issue to execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
gettext                         0.18.1.1-5ubuntu3.1

In general, a standard system update will make all the necessary
changes.

References:
https://usn.ubuntu.com/usn/usn-3815-2
https://usn.ubuntu.com/usn/usn-3815-1
CVE-2018-18751—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iQIcBAABCAAGBQJb6YAhAAoJEEW851uECx9plfsP+wYkQJvtkzAIiHy2vmdfH1eg
oPfb91SCegtaqyxrALmiTIjv7LYEzv8/vATrGPIgkbETOJvMrBCP6+kVhWTFuwAO
Mbi3tJyvBtPmHeA9RtmDzCAWhnGdhoqid7WiMXNflUbKgX6unJwqD0v99Zl+4owP
VvoBsN8Z9qCVzmZRXFm5/Ffq1trSPLvKqsSVMc7N8MII2eyy+Op6o9XOHPBFJYxt
ucDDK1EmmlE4RrJ1dsMCQ8JJbe754Y9tWQib+hizJgYyLyUzyv/XYyESwuJ1eTIG
aPPVr9PdvPJT5YuTR9Xc6HxiT+mhnWHNMhb9zwDxFW4h30rsUC9F7RA7ZbrjkZZC
ohUDLnz0m7uZrf1iQuyKBLki5uguKyduO/UA4tv8GJM5JptXdLAZKpczWyIFjAGp
fnvHmmanGnEPoipc+3h9FBxWeJy+0lcMGDjUthm4+yP9S6uIGT6J/LOoE6lsvmUK
Jv/44u+2C1a1ffSbpMi1S48iwFpIJBAs57iAvh2rpKzDBGv3cPV1k1OxUFPPQnue
OMrEJBmeZVmemPS/CJfDrRMyruBMCyVORaG/npSOVa+xJI4oj93U1cF49LG+ixzW
Qx31CtgvRPpVHTYIGnWpeftdSHURHUkk4CvSeJGovP2mu7G2xRXrp+dNmGg9p5Si
2G+dr/cQIxpoKImRyjLx
=65du
—–END PGP SIGNATURE—–
—

==========================================================================
Ubuntu Security Notice USN-3815-1
November 12, 2018

gettext vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 18.10
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

gettext could be made to execute arbitrary code if it received
a specially crafted message.

Software Description:
– gettext: GNU Internationalization utilities

Details:

It was discovered that gettext incorrectly handled certain messages.
An attacker could possibly use this issue to execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
gettext                         0.19.8.1-8ubuntu0.1

Ubuntu 18.04 LTS:
gettext                         0.19.8.1-6ubuntu0.1

Ubuntu 16.04 LTS:
gettext                         0.19.7-2ubuntu3.1

Ubuntu 14.04 LTS:
gettext                         0.18.3.1-1ubuntu3.1

In general, a standard system update will make all the necessary
changes.

References:
https://usn.ubuntu.com/usn/usn-3815-1
CVE-2018-18751

Package Information:
https://launchpad.net/ubuntu/+source/gettext/0.19.8.1-8ubuntu0.1
https://launchpad.net/ubuntu/+source/gettext/0.19.8.1-6ubuntu0.1
https://launchpad.net/ubuntu/+source/gettext/0.19.7-2ubuntu3.1
https://launchpad.net/ubuntu/+source/gettext/0.18.3.1-1ubuntu3.1—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=Bmvq
—–END PGP SIGNATURE—–
—