2021-08-14
ALT-BU-2021-4117-1
Branch sisyphus update bulletin.
Closed vulnerabilities
Published: 2021-07-15
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2021-36753
sharkdp BAT before 0.18.2 executes less.exe from the current working directory.
Severity: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
- https://github.com/sharkdp/bat/commit/bf2b2df9c9e218e35e5a38ce3d03cffb7c363956
- https://github.com/sharkdp/bat/commit/bf2b2df9c9e218e35e5a38ce3d03cffb7c363956
- https://github.com/sharkdp/bat/pull/1724
- https://github.com/sharkdp/bat/pull/1724
- https://github.com/sharkdp/bat/releases/tag/v0.18.2
- https://github.com/sharkdp/bat/releases/tag/v0.18.2
- https://vuln.ryotak.me/advisories/53
- https://vuln.ryotak.me/advisories/53
Package xfce4-sensors-plugin updated to version 1.4.1-alt2 for branch sisyphus in task 282582.
Closed bugs
Наложение текста в апплете датчики
Package libsecp256k1 updated to version 0.22.0-alt2_1 for branch sisyphus in task 282612.
Closed bugs
Не хватает заголовочного файла secp256k1_recovery.h