USN-6964-2: ORC vulnerability
USN-6964-1 fixed a vulnerability in ORC. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Noriko Totsuka discovered that ORC incorrectly handled certain specially crafted files. An attacker could possibly use this issue to execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6964-2?
USN-6964-2 addresses a vulnerability that can be exploited via specially crafted files, potentially leading to security issues.
How do I fix USN-6964-2?
To resolve USN-6964-2, you should update to the latest package version: 1:0.4.28-1ubuntu0.1~esm1 for Ubuntu 18.04 or 1:0.4.25-1ubuntu0.1~esm1 for Ubuntu 16.04.
What versions of Ubuntu are affected by USN-6964-2?
USN-6964-2 affects Ubuntu 16.04 LTS and 18.04 LTS within specific package versions of liborc.
Who discovered the vulnerability in USN-6964-2?
The vulnerability addressed in USN-6964-2 was discovered by Noriko Totsuka.
What packages are impacted by USN-6964-2?
USN-6964-2 impacts liborc-0.4-0 and liborc-0.4-dev packages in specified versions.