ALT-BU-2021-4310-1
Branch p9 update bulletin.
Package alterator-secsetup updated to version 2.1-alt1 for branch p9 in task 286182.
Closed bugs
В интерфейсе web alterator отсутствуют "Настройки безопасности"
Package alterator-multiseat updated to version 0.0.6-alt1 for branch p9 in task 286182.
Closed bugs
Некорректный текст при удалении рабочего места
Package mini_httpd updated to version 1.30-alt1 for branch p9 in task 286992.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2009-4490
mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
- 20100110 Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection
- 20100110 Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection
- http://www.ush.it/team/ush/hack_httpd_escape/adv.txt
- http://www.ush.it/team/ush/hack_httpd_escape/adv.txt
Modified: 2024-11-21
CVE-2015-1548
mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.
Modified: 2024-11-21
CVE-2017-17663
The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution.