ALT-BU-2018-3251-1
Branch p8 update bulletin.
Package plasma5-kwallet-pam updated to version 5.12.5-alt1.M80P.1 for branch p8 in task 205552.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2018-10380
kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack.
- https://bugzilla.suse.com/show_bug.cgi?id=1090863
- https://bugzilla.suse.com/show_bug.cgi?id=1090863
- https://commits.kde.org/kwallet-pam/01d4143fda5bddb6dca37b23304dc239a5fb38b5
- https://commits.kde.org/kwallet-pam/01d4143fda5bddb6dca37b23304dc239a5fb38b5
- https://commits.kde.org/kwallet-pam/2134dec85ce19d6378d03cddfae9e5e464cb24c0
- https://commits.kde.org/kwallet-pam/2134dec85ce19d6378d03cddfae9e5e464cb24c0
- https://commits.kde.org/kwallet-pam/802f305d81f8771c4f4a8bd7fd0e368ffc6f9b3b
- https://commits.kde.org/kwallet-pam/802f305d81f8771c4f4a8bd7fd0e368ffc6f9b3b
- https://commits.kde.org/kwallet-pam/99abc7fde21f40cc6da5feb6ee766cc46fcca1f8
- https://commits.kde.org/kwallet-pam/99abc7fde21f40cc6da5feb6ee766cc46fcca1f8
- DSA-4200
- DSA-4200
- https://www.kde.org/info/security/advisory-20180503-1.txt
- https://www.kde.org/info/security/advisory-20180503-1.txt
Package sisyphus_check updated to version 0.8.44-alt1 for branch p8 in task 206251.
Closed bugs
Добавить запрет на популярные ошибочные каталоги
Closed bugs
scanimage вываливается с ошибкой
Closed vulnerabilities
BDU:2020-02914
Уязвимость системы управления конфигурациями Ansible, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю выполнить произвольный код
Modified: 2024-11-21
CVE-2017-7466
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
- 97595
- 97595
- RHSA-2017:1244
- RHSA-2017:1244
- RHSA-2017:1334
- RHSA-2017:1334
- RHSA-2017:1476
- RHSA-2017:1476
- RHSA-2017:1499
- RHSA-2017:1499
- RHSA-2017:1599
- RHSA-2017:1599
- RHSA-2017:1685
- RHSA-2017:1685
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466
Modified: 2024-11-21
CVE-2017-7481
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.
- 98492
- 98492
- RHSA-2017:1244
- RHSA-2017:1244
- RHSA-2017:1334
- RHSA-2017:1334
- RHSA-2017:1476
- RHSA-2017:1476
- RHSA-2017:1499
- RHSA-2017:1499
- RHSA-2017:1599
- RHSA-2017:1599
- RHSA-2017:2524
- RHSA-2017:2524
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7481
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7481
- https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2
- https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2
- [debian-lts-announce] 20210127 [SECURITY] [DLA 2535-1] ansible security update
- [debian-lts-announce] 20210127 [SECURITY] [DLA 2535-1] ansible security update
- USN-4072-1
- USN-4072-1
Closed bugs
Closed bugs
Не локализован интерфейс