ELSA-2026-6817

Опубликовано: 08 апр. 2026

Источник: oracle-oval

Платформа: Oracle Linux 10

Описание

ELSA-2026-6817: capstone security update (IMPORTANT)

[5.0.1-7]

Fix CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-141551
Fix CVE-2025-68114 (memory corruption) Resolves: RHEL-137747

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

capstone

5.0.1-7.el10_1

capstone-devel

5.0.1-7.el10_1

capstone-java

5.0.1-7.el10_1

python3-capstone

5.0.1-7.el10_1

Oracle Linux x86_64

capstone

5.0.1-7.el10_1

capstone-devel

5.0.1-7.el10_1

capstone-java

5.0.1-7.el10_1

python3-capstone

5.0.1-7.el10_1

Связанные CVE

CVE-2025-67873

CVE-2025-68114

Ссылки на источники

Связанные уязвимости

SUSE-SU-2026:0060-1

suse-cvrf

7 месяцев назад

Security update for capstone

RLSA-2026:6817

rocky

4 месяца назад

Important: capstone security update

RLSA-2026:4898

rocky

4 месяца назад

Important: capstone security update

ELSA-2026-4898

oracle-oval

5 месяцев назад

ELSA-2026-4898: capstone security update (MODERATE)

CVE-2025-67873

CVSS3: 4.8

ubuntu

8 месяцев назад

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.