USN-6964-1: ORC vulnerability

Releases

• Ubuntu 24.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• orc - Library of Optimized Inner Loops Runtime Compiler

Details

Noriko Totsuka discovered that ORC incorrectly handled certain
crafted file. An attacker could possibly use this issue to execute
arbitrary code.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.04

• liborc-0.4-0t64 - 1:0.4.38-1ubuntu0.1

Ubuntu 22.04

• liborc-0.4-0 - 1:0.4.32-2ubuntu0.1

Ubuntu 20.04

• liborc-0.4-0 - 1:0.4.31-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2024-40897

Related notices

• USN-6964-2