==========================================================================
Ubuntu Security Notice USN-7286-1
February 24, 2025

iniparser vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

iniparser could be made to crash if it opened a specially crafted file.

Software Description:
- iniparser: INI file reader/writer

Details:

It was discovered that iniParser incorrectly handled certain files. An
attacker could possibly use this issue to cause iniParser to crash,
resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
  libiniparser1                   4.2.1-1ubuntu0.1

Ubuntu 24.04 LTS
  libiniparser1                   4.1-7ubuntu0.1

Ubuntu 22.04 LTS
  libiniparser1                   4.1-4ubuntu4.2

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7286-1
  CVE-2025-0633

Package Information:
  https://launchpad.net/ubuntu/+source/iniparser/4.2.1-1ubuntu0.1
  https://launchpad.net/ubuntu/+source/iniparser/4.1-7ubuntu0.1
  https://launchpad.net/ubuntu/+source/iniparser/4.1-4ubuntu4.2