Branch sisyphus update bulletin.

Package libmatekbd updated to version 1.12.1-alt2_1 for branch sisyphus in task 162105.

*.gir не в devel пакете

Package mate-menus updated to version 1.12.0-alt2_3 for branch sisyphus in task 162107.

Зависимость на mate-menus

Package libgdk-pixbuf updated to version 2.34.0-alt1 for branch sisyphus in task 162032.

Published: 2016-06-01
Modified: 2025-04-12

CVE-2015-8875

Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.

Severity: MEDIUM (6.8) Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: HIGH (7.8) Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Package libwebkitgtk4 updated to version 2.12.0-alt1 for branch sisyphus in task 162032.

Published: 2016-06-09
Modified: 2021-03-23

BDU:2016-01450

Уязвимость операционной системы iOS и браузера Safari, позволяющая нарушителю получить конфиденциальную информацию

Severity: MEDIUM (4.3) Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

References:

Published: 2016-05-20
Modified: 2025-04-12

CVE-2016-1858

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site.

Severity: MEDIUM (4.3) Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Severity: MEDIUM (6.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References:

Version: 2.1.2

Branch sisyphus update on 2016-03-30

ALT-BU-2016-2670-1

ALT-PU-2016-1285-1

Closed bugs

Bug #31926

ALT-PU-2016-1286-1

Closed bugs

Bug #31928

ALT-PU-2016-1287-1

Closed vulnerabilities

CVE-2015-8875

ALT-PU-2016-1288-1

Closed vulnerabilities

BDU:2016-01450

CVE-2016-1858