Lucene search

K
centosCentOS ProjectCESA-2021:3338
HistorySep 01, 2021 - 1:09 p.m.

hivex, ocaml, perl, python, ruby security update

2021-09-0113:09:31
CentOS Project
lists.centos.org
75

0.002 Low

EPSS

Percentile

55.9%

CentOS Errata and Security Advisory CESA-2021:3338

Hivex is a library that can read and write Hive files, undocumented binary files that Windows uses to store the Windows Registry on disk.

Security Fix(es):

  • hivex: stack overflow due to recursive call of _get_children() (CVE-2021-3622)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2021-September/086154.html

Affected packages:
hivex
hivex-devel
ocaml-hivex
ocaml-hivex-devel
perl-hivex
python-hivex
ruby-hivex

Upstream details at:
https://access.redhat.com/errata/RHSA-2021:3338