ALT-BU-2021-3761-2
Branch p9 update bulletin.
Package theme-mate-windows updated to version 2.0-alt1 for branch p9 in task 266758.
Closed bugs
Поменять рамку окна по умолчанию
Package alsa-utils updated to version 1.2.4-alt1 for branch p9 in task 250722.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2009-0035
alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.
- https://access.redhat.com/security/cve/cve-2009-0035
- https://access.redhat.com/security/cve/cve-2009-0035
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0035
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0035
- https://security-tracker.debian.org/tracker/CVE-2009-0035
- https://security-tracker.debian.org/tracker/CVE-2009-0035
Modified: 2024-11-21
CVE-2019-13351
posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure, crashes, or file corruption due to having the wrong file associated with the file descriptor.
Closed bugs
Снова ошибка - alsactl: sysfs_init:48: sysfs path '/sys' is invalid
[FR] дополнить alsa-info.sh сводкой информации по установленным пакетам alsa