Branch p9 update bulletin.

Package php7 updated to version 7.3.18-alt1 for branch p9 in task 252646.

Published: 2020-05-11

BDU:2020-05179

Уязвимость интерпретатора языка программирования PHP, связанная с целочисленным переполнением буфера, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (5.3) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References:

CVE-2019-11048

Published: 2020-05-20
Modified: 2024-11-21

CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server.

Severity: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References:

Package pcmanfm updated to version 1.3.1-alt3 for branch p9 in task 252092.

Не завершается процесс pcmanfm при выходе из сессии LXDE

Package flacon updated to version 6.0.0-alt2 for branch p9 in task 252775.

flacon не конвертирует альбомы

Version: 2.1.0

Branch p9 update on 2020-06-06

ALT-BU-2020-3857-13

ALT-PU-2020-2108-1

Closed vulnerabilities

BDU:2020-05179

CVE-2019-11048

ALT-PU-2020-2121-1

Closed bugs

Bug #38280

ALT-PU-2020-2122-1

Closed bugs

Bug #38570