ALT Linux Team

Branch sisyphus update on 2014-02-06

2014-02-06

ALT-BU-2014-2564-1

Branch sisyphus update bulletin.

ALT-PU-2014-1155-1

Package adobe-flash-player updated to version 11-alt25 for branch sisyphus in task 113546.

Closed vulnerabilities

Published: 2014-02-05
Modified: 2024-11-21

CVE-2014-0497

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:

ALT-PU-2014-1157-1

Package hostapd updated to version 2.1-alt1 for branch sisyphus in task 113551.

Closed vulnerabilities

Published: 2020-11-29

BDU:2021-01329

Уязвимость спецификации Open Connectivity Foundation UPnP, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании

Severity: HIGH (7.8)
References:
Published: 2020-06-08
Modified: 2024-11-21

CVE-2020-12695

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top