ALT-BU-2019-3468-2
Branch sisyphus update bulletin.
Closed bugs
The QT_QPA_PLATFORMTHEME environment variable is not set correctly
Closed vulnerabilities
Modified: 2024-11-21
CVE-2018-8831
A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.
Package python-module-pexpect updated to version 4.6-alt2 for branch sisyphus in task 220382.
Closed bugs
Сломалась сборка пакета python-module-pexpect
Closed vulnerabilities
Modified: 2024-11-21
CVE-2019-1010261
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically crafted URL. The fixed version is: 1.7.1 and later.
Modified: 2023-09-25
GHSA-5rh7-6gfj-mc87
Gitea XSS Vulnerability
Closed bugs
hangs when asking SPICE password