Medium ELSA-2024-6184 1 CVE

Moderate: orc security update (Oracle Linux 9)

Published Sep 3, 2024 · Updated Sep 3, 2024

Ecosystem: Oracle Linux

Summary

[0.4.31-7]
- Add patch for CVE-2024-40897
- Resolves: RHEL-50701

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	orc	0:0.4.31-7.el9_4
Oracle Linux · 9	orc-compiler	0:0.4.31-7.el9_4
Oracle Linux · 9	orc-devel	0:0.4.31-7.el9_4

Vulnerabilities 1

High 7.0

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is trick…

GStreamer ORC orc orc Debian Ubuntu Azure Linux Alpine

Jul 26, 2024