USN-6964-2: ORC vulnerability
1 October 2024
ORC could be made to crash or execute arbitrary code
Releases
Packages
- orc - Library of Optimized Inner Loops Runtime Compiler
Details
USN-6964-1 fixed a vulnerability in ORC. This update provides the
corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
Noriko Totsuka discovered that ORC incorrectly handled certain
specially crafted files. An attacker could possibly use this issue
to execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04
-
liborc-0.4-0
-
1:0.4.28-1ubuntu0.1~esm1
Available with Ubuntu Pro
-
liborc-0.4-dev
-
1:0.4.28-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 16.04
-
liborc-0.4-0
-
1:0.4.25-1ubuntu0.1~esm1
Available with Ubuntu Pro
-
liborc-0.4-dev
-
1:0.4.25-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-6964-1: orc, liborc-0.4-dev, liborc-0.4-0, liborc-0.4-dev-bin, liborc-0.4-0t64, liborc-0.4-doc