Release date:
2026-11-09 12:48:59 UTC
Description:
* SECURITY UPDATE: out-of-bounds write in ffgcls2() via variable-length string column
- debian/patches/CVE-2026-115504.patch: check the string buffer bounds
before the read in ffgcls2()
- debian/patches/CVE-2026-115504-pre1.patch: enlarge the TDISPn
buffers in ffgcls() and ffgcdw(), required by the new ffgcdw() call
in ffgcls2()
- debian/patches/CVE-2026-115504-pre2.patch: range-check the TDISPn
width in ffgcdw(), required by the new ffgcdw() call in ffgcls2()
- debian/patches/CVE-2026-115504-2.patch: return the variable-length
string width from ffgcdw() and clamp the copy into the caller's
array; string reads are now truncated to a TDISPn width narrower
than TFORMn
- CVE-2026-115504
Updated packages:
-
libcfitsio-bin_3.490-3+tuxcare.els1_amd64.deb
sha:51bd3172fec2f84b9c285aaf67827c21c1edaa6f
-
libcfitsio-dev_3.490-3+tuxcare.els1_amd64.deb
sha:b6726e6320d34ee202e6cfe6083b12fc13f47b31
-
libcfitsio-doc_3.490-3+tuxcare.els1_all.deb
sha:96193dbab8bd916d00bea52f968ad8700c503404
-
libcfitsio9_3.490-3+tuxcare.els1_amd64.deb
sha:c016b2702a5bcda71de5446c42a298a05dd66b6f
-
libcfitsio-bin_3.490-3+tuxcare.els1_arm64.deb
sha:21bec2786c57b41fbc25dc609035f6621fe3c261
-
libcfitsio-dev_3.490-3+tuxcare.els1_arm64.deb
sha:06fd21cbb0b8f1d9f8fc98443e6450944c33f9ef
-
libcfitsio9_3.490-3+tuxcare.els1_arm64.deb
sha:13b9c90a552cad9bfe4f19f04c54f49a9bab12e5
-
libcfitsio-bin_3.490-3+tuxcare.els1_armel.deb
sha:a650492222d75401ba84a60ac7285743f0b9ec01
-
libcfitsio-dev_3.490-3+tuxcare.els1_armel.deb
sha:b207c14c78ee8685d0cf1e39c8c3cbaa99298430
-
libcfitsio9_3.490-3+tuxcare.els1_armel.deb
sha:c2fb3477eacc2dc24d36c63c8afb2606b58249c2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
