VYPR

rpm package

suse/orc&distro=SUSE Linux Enterprise Software Development Kit 12 SP5

pkg:rpm/suse/orc&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Vulnerabilities (1)

  • CVE-2024-40897Jul 26, 2024
    affected < 0.4.21-3.3.1fixed 0.4.21-3.3.1

    Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to c