PT-2017-19430 · Gnu · Libffcall+1

Published 2017-07-07 · Updated 2017-07-07

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions clisp versions prior to 1.13 libffcall versions prior to 1.13

Description The issue is related to the libffcall library, where linking with it could cause the stack to become executable. This has been fixed in version 1.13.

Recommendations For clisp versions prior to 1.13, update to version 1.13 or later to resolve the issue. For libffcall versions prior to 1.13, update to version 1.13 or later to resolve the issue.

Related Identifiers

MGASA-2017-0202

Affected Products

Clisp

Libffcall

References · 4

• https://osv.dev/vulnerability/MGASA-2017-0202 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0202.html · Security Note
• https://lists.gnu.org/archive/html/libffcall/2017-06/msg00002.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=21140 · Note