Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 528
Alerts This Week
Warning Icon 1 528

Fedora 40: 2024-bb70b21754 Moderate: Abseil-Cpp Out-Of-Bounds Access

fedora
Calendar Grey April 24, 2024
Dist Fedora Esm H88
A critical patch for Fedora 40's abseil-cpp resolves a buffer overflow vulnerability, enhancing overall system security.
Update to 20240116.2: fixes possible out-of-bounds string access as described in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fabseil%2Fabseil-cpp%2Fpull%2Fnew%2F16...

Summary

Abseil is an open-source collection of C++ library code designed to augment

the C++ standard library. The Abseil library code is collected from

Google's own C++ code base, has been extensively tested and used in

production, and is the same code we depend on in our daily coding lives.

In some cases, Abseil provides pieces missing from the C++ standard; in

others, Abseil provides alternatives to the standard for special needs we've

found through usage in the Google code base. We denote those cases clearly

within the library code we provide you.

Abseil is not meant to be a competitor to the standard library; we've just

found that many of these utilities serve a purpose within our code base,

and we now want to provide those resources to the C++ community as a whole.

Update Information:

Update to 20240116.2: fixes possible out-of-bounds string access as described in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fabseil%2Fabseil-cpp%2Fpull%2Fnew%2F1650.

Topics%20covered

Topics Covered

security advisory fedora moderate severity out-of-bounds access abseil-cpp

Change Log

* Tue Apr 9 2024 Benjamin A. Beasley - 20240116.2-1 - Update to 20240116.2 (close RHBZ#2274172)

References


[ 1 ] Bug #2274172 - abseil-cpp-20240116.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2274172

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-bb70b21754' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: abseil-cpp
Product: Fedora 40
Version: 20240116.2
Release: 1.fc40
URL: https://abseil.io
Summary: C++ Common Libraries

Topics%20covered

Topics Covered

security advisory fedora moderate severity out-of-bounds access abseil-cpp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.