MGASA-2024-0044

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2024-0044.html

Import Source

https://advisories.mageia.org/MGASA-2024-0044.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2024-0044

Related

CVE-2023-4322
CVE-2023-5686

Published

2024-02-19T18:16:13Z

Modified

2024-02-19T18:04:31Z

Summary

Updated radare2 packages fix security vulnerabilities

Details

This update fixes two security issues: CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler CVE-2023-5686 - heap-buffer-overflow in /radare2/shlr/java/code.c

References

https://advisories.mageia.org/MGASA-2024-0044.html
https://bugs.mageia.org/show_bug.cgi?id=32521
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/64KUV6OGEVQ75QOV35PUVVDOJTKSJHYN/

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:9 / radare2

Package

Name: radare2
Purl: pkg:rpm/mageia/radare2?arch=source&distro=mageia-9

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.8.8-1.1.mga9

Ecosystem specific

{
    "section": "core"
}