Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-11164

Критический

ALT-PU-2026-11164: package bsdiff update to version 4.3-alt3

Источник
errata.altlinux.org
Дата публикации
20.07.2026
Дата обновления
20.07.2026
Устраненные уязвимости
2

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades bsdiff to version 4.3-alt3.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 9.8
altlinux
4 месяца назад

ALT-PU-2026-11037: package `bsdiff` update to version 4.3-alt3

CVSS3: 9.8
ubuntu
около 6 лет назад

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

CVSS3: 9.8
nvd
около 6 лет назад

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

CVSS3: 9.8
debian
около 6 лет назад

A memory corruption vulnerability is present in bspatch as shipped in ...

CVSS3: 7.8
ubuntu
больше 10 лет назад

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.