ALT-BU-2021-3841-1
Branch p9 update bulletin.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2022-24300
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
- https://bugs.debian.org/1004223
- https://bugs.debian.org/1004223
- https://github.com/minetest/minetest/commit/b5956bde259faa240a81060ff4e598e25ad52dae
- https://github.com/minetest/minetest/commit/b5956bde259faa240a81060ff4e598e25ad52dae
- https://github.com/minetest/minetest/security/advisories/GHSA-hwj2-xf72-r4cf
- https://github.com/minetest/minetest/security/advisories/GHSA-hwj2-xf72-r4cf
- DSA-5075
- DSA-5075
Modified: 2024-11-21
CVE-2022-24301
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.
- https://github.com/minetest/minetest/commit/3693b6871eba268ecc79b3f52d00d3cefe761131
- https://github.com/minetest/minetest/commit/3693b6871eba268ecc79b3f52d00d3cefe761131
- https://github.com/minetest/minetest/security/advisories/GHSA-fvwv-qcq6-wmp5
- https://github.com/minetest/minetest/security/advisories/GHSA-fvwv-qcq6-wmp5
- DSA-5075
- DSA-5075
Closed bugs
Не работает список серверов и дополнения.
Package yandex-browser-preinstall updated to version 0.4-alt4 for branch p9 in task 269010.
Closed bugs
добавить зависимость jq
Package python3-module-clickhouse-driver updated to version 0.2.0-alt1 for branch p9 in task 268808.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2020-26759
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, due to a buffer overflow.
- https://github.com/mymarilyn/clickhouse-driver/commit/3e990547e064b8fca916b23a0f7d6fe8c63c7f6b
- https://github.com/mymarilyn/clickhouse-driver/commit/3e990547e064b8fca916b23a0f7d6fe8c63c7f6b
- https://github.com/mymarilyn/clickhouse-driver/commit/d708ed548e1d6f254ba81a21de8ba543a53b5598
- https://github.com/mymarilyn/clickhouse-driver/commit/d708ed548e1d6f254ba81a21de8ba543a53b5598
Closed bugs
Не устанавливается spotify с помощью epm play spotify