Most recent entries from all

ALSA-2024:5306 — Moderate: orc security update

Affected: AlmaLinux:8: orc, AlmaLinux:8: orc-compiler, AlmaLinux:8: orc-devel

Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations.

Security Fix(es):

* orc: Stack-based buffer overflow vulnerability in ORC (CVE-2024-40897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-06669

EUVD-2026-217459

fkie_cve-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.

GHSA-247v-6wr5-3wf3

jvndb-2024-000075

ORC provided by GStreamer is typically used when developing GStreamer plugins. Stack-based buffer overflow vulnerability (CWE-121) exists in orcparse.c of ORC. Yuhei Kawakoya of NTT Security Holdings reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

msrc_CVE-2024-40897 — Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is trick…

msrc_CVE-2024-40897

OESA-2024-1975 — orc security update

Affected: openEuler:24.03-LTS: orc, openEuler:22.03-LTS-SP4: orc, openEuler:22.03-LTS-SP3: orc, openEuler:20.03-LTS-SP4: orc, openEuler:22.03-LTS-SP1: orc

Orc is the sucessor to Liboil - The Library of Optimized Inner Loops. Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations.

Security Fix(es):

openSUSE-SU-2024:14216-1 — liborc-0_4-0-0.4.39-1.1 on GA media

liborc-0_4-0-0.4.39-1.1 on GA media

RHSA-2024:5629 — Red Hat Security Advisory: orc security update

orc: Stack-based buffer overflow vulnerability in ORC

SUSE-SU-2024:2643-1 — Security update for orc

Security update for orc

UBUNTU-CVE-2024-40897

Affected: Ubuntu:Pro:16.04:LTS: orc, Ubuntu:Pro:18.04:LTS: orc, Ubuntu:20.04:LTS: orc, Ubuntu:22.04:LTS: orc, Ubuntu:24.04:LTS: orc

WID-SEC-W-2024-1684 — GStreamer: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GStreamer ausnutzen, um beliebigen Programmcode auszuführen.