[CLSA-2026:1789574775] Fix CVE(s): CVE-2023-30630
Type:
security
Severity:
Important
Release date:
2026-09-16 16:06:24 UTC
Description:
* SECURITY UPDATE: --dump-bin could overwrite an arbitrary existing file - debian/patches/CVE-2023-30630.patch: write the dump file in a single pass and create it with O_EXCL so an existing file is never clobbered - CVE-2023-30630 * Build on armel - debian/control: add armel to Architecture on dmidecode and dmidecode-udeb. The debian11-els platform builds amd64, arm64 and armel, and with armel absent from the list dh produced no binary artifacts there, so every build of this package failed that target with "dpkg-genbuildinfo: error: binary build with no binary artifacts found" - the pristine vendor import fails the same way - the omission is an artefact of Debian's opt-in architecture list, not a portability limit: armhf and arm64 were each added on request (#715139, #767965) and armel was simply never asked for. dmidecode has no inline assembly and no VFP dependency (its only float use is printf formatting of voltages, which soft-float handles), its arch-conditional code is confined to __ia64__, __aarch64__ and an x86-only entry-point fallback - none of which armel enters - and the primary path reads /sys/firmware/dmi/tables/smbios_entry_point, which is arch-neutral
CVEs fixed:
Updated packages:
  • dmidecode_3.3-2+tuxcare.els1_amd64.deb
    sha:3b7c06f369e84b694cb8d0994b281dacd2156369
  • dmidecode_3.3-2+tuxcare.els1_arm64.deb
    sha:be77d9c035e23a2fd018a98e107d0123af698266
  • dmidecode_3.3-2+tuxcare.els1_armel.deb
    sha:8f823b5ef9d36753ce084d97493ab8592af5ad19
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.