ALT-BU-2018-3598-2
Branch sisyphus update bulletin.
Package kernel-image-std-debug updated to version 4.14.82-alt1 for branch sisyphus in task 216719.
Closed vulnerabilities
BDU:2019-01343
Уязвимость функции cdrom_ioctl_drive_status() операционных систем Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Modified: 2024-11-21
CVE-2018-10940
The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707
- 104154
- 104154
- RHSA-2018:2948
- RHSA-2018:2948
- RHSA-2018:3083
- RHSA-2018:3083
- RHSA-2018:3096
- RHSA-2018:3096
- https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707
- https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707
- [debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update
- [debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update
- [debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update
- [debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update
- [debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update
- [debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update
- [debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package
- [debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package
- USN-3676-1
- USN-3676-1
- USN-3676-2
- USN-3676-2
- USN-3695-1
- USN-3695-1
- USN-3695-2
- USN-3695-2
- USN-3754-1
- USN-3754-1
- https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6
- https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6
Modified: 2024-11-21
CVE-2018-16658
An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4
- 105334
- 105334
- RHSA-2019:2029
- RHSA-2019:2029
- RHSA-2019:2043
- RHSA-2019:2043
- RHSA-2019:4154
- RHSA-2019:4154
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6
- https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4
- https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4
- [debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update
- [debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update
- USN-3797-1
- USN-3797-1
- USN-3797-2
- USN-3797-2
- USN-3820-1
- USN-3820-1
- USN-3820-2
- USN-3820-2
- USN-3820-3
- USN-3820-3
- USN-3822-1
- USN-3822-1
- USN-3822-2
- USN-3822-2
- DSA-4308
- DSA-4308
Closed bugs
Audacity не находит файлы из этого пакета
Closed bugs
Обновление до 1.2
Closed vulnerabilities
BDU:2020-01549
Уязвимость функции parse_sinar_ia() библиотеки для обработки изображений LibRaw, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-01600
Уязвимость функции unpacked_load_raw() библиотеки для обработки изображений LibRaw, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-01601
Уязвимость функции parse_rollei() библиотеки для обработки изображений LibRaw, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-5817
A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop.
- [debian-lts-announce] 20190328 [SECURITY] [DLA 1734-1] libraw security update
- [debian-lts-announce] 20190328 [SECURITY] [DLA 1734-1] libraw security update
- https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/
- https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/
- USN-3989-1
- USN-3989-1
- https://www.libraw.org/news/libraw-0-19-2-release
- https://www.libraw.org/news/libraw-0-19-2-release
Modified: 2024-11-21
CVE-2018-5818
An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.
- [debian-lts-announce] 20190328 [SECURITY] [DLA 1734-1] libraw security update
- [debian-lts-announce] 20190328 [SECURITY] [DLA 1734-1] libraw security update
- https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/
- https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/
- USN-3989-1
- USN-3989-1
- https://www.libraw.org/news/libraw-0-19-2-release
- https://www.libraw.org/news/libraw-0-19-2-release
Modified: 2024-11-21
CVE-2018-5819
An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resources.
- [debian-lts-announce] 20190328 [SECURITY] [DLA 1734-1] libraw security update
- [debian-lts-announce] 20190328 [SECURITY] [DLA 1734-1] libraw security update
- https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/
- https://secuniaresearch.flexerasoftware.com/secunia_research/2018-27/
- USN-3989-1
- USN-3989-1
- https://www.libraw.org/news/libraw-0-19-2-release
- https://www.libraw.org/news/libraw-0-19-2-release
Closed bugs
Conky не работает вместе с apcupsd
Package ring-project updated to version 20180826-alt2 for branch sisyphus in task 216804.
Closed bugs
ring-client-gnome не вытягивает ring-daemon