Medium ELSA-2024-5306 1 CVE

Moderate: orc security update (Oracle Linux 8)

Published Aug 13, 2024 · Updated Aug 13, 2024

Ecosystem: Oracle Linux

Summary

[0.4.28-4]
- Add patch for CVE-2024-40897
- Resolves: RHEL-50710

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	orc	0:0.4.28-4.el8_10
Oracle Linux · 8	orc-compiler	0:0.4.28-4.el8_10
Oracle Linux · 8	orc-devel	0:0.4.28-4.el8_10

Vulnerabilities 1

High 7.0

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is trick…

GStreamer ORC orc orc Debian Ubuntu Azure Linux Alpine

Jul 26, 2024