2017-05-04
ALT-BU-2017-3095-1
Branch sisyphus update bulletin.
Package man-pages-ru-extra updated to version 0.1-alt4 for branch sisyphus in task 182414.
Closed bugs
Доработать sources.list.5
Closed vulnerabilities
Published: 2016-12-16
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.
Severity: CRITICAL (9.8)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Closed vulnerabilities
Published: 2017-04-27
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-8301
LibreSSL 2.5.1 to 2.5.3 lacks TLS certificate verification if SSL_get_verify_result is relied upon for a later check of a verification result, in a use case where a user-provided verification callback returns 1, as demonstrated by acceptance of invalid certificates by nginx.
Severity: MEDIUM (5.3)
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
References: