USN-6472-1: GNU Scientific Library vulnerability | Ubuntu security notices

Packages

gsl - A modern numerical library for C and C++ programmers

Details

It was discovered that GNU Scientific Library incorrectly handled certain
inputs. If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to cause a
denial of service or execute arbitrary code.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
23.04 lunar	gsl-bin – 2.7.1+dfsg-3ubuntu0.23.04.1
	libgsl-dev – 2.7.1+dfsg-3ubuntu0.23.04.1
	libgsl27 – 2.7.1+dfsg-3ubuntu0.23.04.1
	libgslcblas0 – 2.7.1+dfsg-3ubuntu0.23.04.1
22.04 jammy	gsl-bin – 2.7.1+dfsg-3ubuntu0.22.04.1~esm1
	libgsl-dev – 2.7.1+dfsg-3ubuntu0.22.04.1~esm1
	libgsl27 – 2.7.1+dfsg-3ubuntu0.22.04.1~esm1
	libgslcblas0 – 2.7.1+dfsg-3ubuntu0.22.04.1~esm1
20.04 focal	gsl-bin – 2.5+dfsg-6+deb10u1build0.20.04.1
	libgsl-dev – 2.5+dfsg-6+deb10u1build0.20.04.1
	libgsl23 – 2.5+dfsg-6+deb10u1build0.20.04.1
	libgslcblas0 – 2.5+dfsg-6+deb10u1build0.20.04.1
18.04 bionic	gsl-bin – 2.4+dfsg-6ubuntu0.1~esm1
	libgsl-dev – 2.4+dfsg-6ubuntu0.1~esm1
	libgsl23 – 2.4+dfsg-6ubuntu0.1~esm1
	libgslcblas0 – 2.4+dfsg-6ubuntu0.1~esm1
16.04 xenial	gsl-bin – 2.1+dfsg-2ubuntu0.1~esm1
	libgsl-dev – 2.1+dfsg-2ubuntu0.1~esm1
	libgsl2 – 2.1+dfsg-2ubuntu0.1~esm1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2020-35357

CVE-2020-35357