Moderate: orc security update

2024-09-0300:00:00

errata.almalinux.org

orc library

buffer overflow

security update

simd architectures

cve-2024-40897

unix

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

Low

JSON

Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The “language” is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations.

Security Fix(es):

orc: Stack-based buffer overflow vulnerability in ORC (CVE-2024-40897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9i686orc-devel< 0.4.31-7.el9_4orc-devel-0.4.31-7.el9_4.i686.rpm
almalinux9i686orc< 0.4.31-7.el9_4orc-0.4.31-7.el9_4.i686.rpm
almalinux9x86_64orc< 0.4.31-7.el9_4orc-0.4.31-7.el9_4.x86_64.rpm
almalinux9x86_64orc-devel< 0.4.31-7.el9_4orc-devel-0.4.31-7.el9_4.x86_64.rpm
almalinux9x86_64orc-compiler< 0.4.31-7.el9_4orc-compiler-0.4.31-7.el9_4.x86_64.rpm
almalinux9aarch64orc-compiler< 0.4.31-7.el9_4orc-compiler-0.4.31-7.el9_4.aarch64.rpm
almalinux9aarch64orc-devel< 0.4.31-7.el9_4orc-devel-0.4.31-7.el9_4.aarch64.rpm
almalinux9aarch64orc< 0.4.31-7.el9_4orc-0.4.31-7.el9_4.aarch64.rpm
almalinux9ppc64leorc-devel< 0.4.31-7.el9_4orc-devel-0.4.31-7.el9_4.ppc64le.rpm
almalinux9ppc64leorc-compiler< 0.4.31-7.el9_4orc-compiler-0.4.31-7.el9_4.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	i686	orc-devel	< 0.4.31-7.el9_4	orc-devel-0.4.31-7.el9_4.i686.rpm
almalinux	9	i686	orc	< 0.4.31-7.el9_4	orc-0.4.31-7.el9_4.i686.rpm
almalinux	9	x86_64	orc	< 0.4.31-7.el9_4	orc-0.4.31-7.el9_4.x86_64.rpm
almalinux	9	x86_64	orc-devel	< 0.4.31-7.el9_4	orc-devel-0.4.31-7.el9_4.x86_64.rpm
almalinux	9	x86_64	orc-compiler	< 0.4.31-7.el9_4	orc-compiler-0.4.31-7.el9_4.x86_64.rpm
almalinux	9	aarch64	orc-compiler	< 0.4.31-7.el9_4	orc-compiler-0.4.31-7.el9_4.aarch64.rpm
almalinux	9	aarch64	orc-devel	< 0.4.31-7.el9_4	orc-devel-0.4.31-7.el9_4.aarch64.rpm
almalinux	9	aarch64	orc	< 0.4.31-7.el9_4	orc-0.4.31-7.el9_4.aarch64.rpm
almalinux	9	ppc64le	orc-devel	< 0.4.31-7.el9_4	orc-devel-0.4.31-7.el9_4.ppc64le.rpm
almalinux	9	ppc64le	orc-compiler	< 0.4.31-7.el9_4	orc-compiler-0.4.31-7.el9_4.ppc64le.rpm