USN-3101-1: Tracker vulnerability

Ubuntu Security Notice USN-3101-1

12th October, 2016

tracker vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.04 LTS

Summary

Tracker could be made to crash if it opened a specially crafted file.

Software description

• tracker
  - metadata database, indexer and search tool
  
  

Details

It was discovered that Tracker incorrectly handled certain malformed GIF
images. If a user or automated system were tricked into downloading a
specially-crafted GIF image, Tracker could crash, resulting in a denial of
service.

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.04 LTS:

tracker-extract

1.6.2-0ubuntu1.1

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to restart your session to make
all the necessary changes.

References

LP: 1178402