Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-11037

Критический

ALT-PU-2026-11037: package bsdiff update to version 4.3-alt3

Источник
errata.altlinux.org
Дата публикации
17.07.2026
Дата обновления
17.07.2026
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades bsdiff to version 4.3-alt3.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 9.8
altlinux
4 месяца назад

ALT-PU-2026-11164: package `bsdiff` update to version 4.3-alt3

CVSS3: 9.8
ubuntu
около 6 лет назад

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

CVSS3: 9.8
nvd
около 6 лет назад

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

CVSS3: 9.8
debian
около 6 лет назад

A memory corruption vulnerability is present in bspatch as shipped in ...

CVSS3: 7.8
ubuntu
больше 10 лет назад

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.