ALT-BU-2021-4436-1
Branch sisyphus_mipsel update bulletin.
Package perl-CPAN-Checksums updated to version 2.13-alt1 for branch sisyphus_mipsel.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2020-16155
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.
Package perl-CPAN updated to version 2.29-alt1 for branch sisyphus_mipsel.
Closed vulnerabilities
BDU:2023-01694
Уязвимость функции Module::Signature::_verify() языка программирования Perl, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass.
- http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
- http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
- https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
- https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
- FEDORA-2022-84fd87f7eb
- FEDORA-2022-84fd87f7eb
- FEDORA-2022-21e8372c42
- FEDORA-2022-21e8372c42
- https://metacpan.org/pod/distribution/CPAN/scripts/cpan
- https://metacpan.org/pod/distribution/CPAN/scripts/cpan
Package espeak updated to version 1.48.04-alt3 for branch sisyphus_mipsel.
Closed bugs
espeak-data: конфликты при обновлении
Package python3-module-importlib-metadata updated to version 4.8.1-alt2 for branch sisyphus_mipsel.
Closed bugs
Файловый конфликт при dist-upgrade
Package apache2 updated to version 2.4.51-alt2 for branch sisyphus_mipsel.
Closed bugs
Зависит от systemd
Package bubblewrap updated to version 0.5.0-alt2 for branch sisyphus_mipsel.
Closed bugs
Выключает userns_restrict даже в режиме suid
Package wireshark updated to version 3.4.10-alt1 for branch sisyphus_mipsel.
Closed vulnerabilities
BDU:2021-05776
Уязвимость компонента Modbus анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-05777
Уязвимость службы Bluetooth SDP анализатора трафика компьютерных сетей Wireshark , позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-05801
Уязвимость службы Bluetooth DHT анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-05836
Уязвимость компонента C12.22 анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-05837
Уязвимость службы Bluetooth HCI_ISO анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-05936
Уязвимость набора стандартов связи для коммуникации IEEE 802.11 анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-05943
Уязвимость диссектора IPPUSB анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2022-00029
Уязвимость службы Bluetooth DHT анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2021-39920
NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39920.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39920.json
- https://gitlab.com/wireshark/wireshark/-/issues/17705
- https://gitlab.com/wireshark/wireshark/-/issues/17705
- FEDORA-2021-3747cf6107
- FEDORA-2021-3747cf6107
- FEDORA-2021-97bd631e0a
- FEDORA-2021-97bd631e0a
- GLSA-202210-04
- GLSA-202210-04
- DSA-5019
- DSA-5019
- https://www.wireshark.org/security/wnpa-sec-2021-15.html
- https://www.wireshark.org/security/wnpa-sec-2021-15.html
Modified: 2024-11-21
CVE-2021-39921
NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39921.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39921.json
- https://gitlab.com/wireshark/wireshark/-/issues/17703
- https://gitlab.com/wireshark/wireshark/-/issues/17703
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- FEDORA-2021-3747cf6107
- FEDORA-2021-3747cf6107
- FEDORA-2021-97bd631e0a
- FEDORA-2021-97bd631e0a
- GLSA-202210-04
- GLSA-202210-04
- DSA-5019
- DSA-5019
- https://www.wireshark.org/security/wnpa-sec-2021-14.html
- https://www.wireshark.org/security/wnpa-sec-2021-14.html
Modified: 2024-11-21
CVE-2021-39922
Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39922.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39922.json
- https://gitlab.com/wireshark/wireshark/-/issues/17636
- https://gitlab.com/wireshark/wireshark/-/issues/17636
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- FEDORA-2021-3747cf6107
- FEDORA-2021-3747cf6107
- FEDORA-2021-97bd631e0a
- FEDORA-2021-97bd631e0a
- GLSA-202210-04
- GLSA-202210-04
- DSA-5019
- DSA-5019
- https://www.wireshark.org/security/wnpa-sec-2021-12.html
- https://www.wireshark.org/security/wnpa-sec-2021-12.html
Modified: 2024-11-21
CVE-2021-39923
Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json
- https://gitlab.com/wireshark/wireshark/-/issues/17684
- https://gitlab.com/wireshark/wireshark/-/issues/17684
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- DSA-5019
- DSA-5019
- https://www.wireshark.org/security/wnpa-sec-2021-11.html
- https://www.wireshark.org/security/wnpa-sec-2021-11.html
Modified: 2024-11-21
CVE-2021-39924
Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39924.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39924.json
- https://gitlab.com/wireshark/wireshark/-/issues/17677
- https://gitlab.com/wireshark/wireshark/-/issues/17677
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- FEDORA-2021-3747cf6107
- FEDORA-2021-3747cf6107
- FEDORA-2021-97bd631e0a
- FEDORA-2021-97bd631e0a
- GLSA-202210-04
- GLSA-202210-04
- DSA-5019
- DSA-5019
- https://www.wireshark.org/security/wnpa-sec-2021-10.html
- https://www.wireshark.org/security/wnpa-sec-2021-10.html
Modified: 2024-11-21
CVE-2021-39925
Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39925.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39925.json
- https://gitlab.com/wireshark/wireshark/-/issues/17635
- https://gitlab.com/wireshark/wireshark/-/issues/17635
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- FEDORA-2021-3747cf6107
- FEDORA-2021-3747cf6107
- FEDORA-2021-97bd631e0a
- FEDORA-2021-97bd631e0a
- GLSA-202210-04
- GLSA-202210-04
- DSA-5019
- DSA-5019
- https://www.wireshark.org/security/wnpa-sec-2021-09.html
- https://www.wireshark.org/security/wnpa-sec-2021-09.html
Modified: 2024-11-21
CVE-2021-39926
Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39926.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39926.json
- https://gitlab.com/wireshark/wireshark/-/issues/17649
- https://gitlab.com/wireshark/wireshark/-/issues/17649
- FEDORA-2021-3747cf6107
- FEDORA-2021-3747cf6107
- FEDORA-2021-97bd631e0a
- FEDORA-2021-97bd631e0a
- GLSA-202210-04
- GLSA-202210-04
- DSA-5019
- DSA-5019
- https://www.wireshark.org/security/wnpa-sec-2021-08.html
- https://www.wireshark.org/security/wnpa-sec-2021-08.html
Modified: 2024-11-21
CVE-2021-39928
NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39928.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39928.json
- https://gitlab.com/wireshark/wireshark/-/issues/17704
- https://gitlab.com/wireshark/wireshark/-/issues/17704
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- FEDORA-2021-3747cf6107
- FEDORA-2021-3747cf6107
- FEDORA-2021-97bd631e0a
- FEDORA-2021-97bd631e0a
- GLSA-202210-04
- GLSA-202210-04
- DSA-5019
- DSA-5019
- https://www.wireshark.org/security/wnpa-sec-2021-13.html
- https://www.wireshark.org/security/wnpa-sec-2021-13.html
Modified: 2024-11-21
CVE-2021-39929
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39929.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39929.json
- https://gitlab.com/wireshark/wireshark/-/issues/17651
- https://gitlab.com/wireshark/wireshark/-/issues/17651
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- [debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update
- FEDORA-2021-3747cf6107
- FEDORA-2021-3747cf6107
- FEDORA-2021-97bd631e0a
- FEDORA-2021-97bd631e0a
- GLSA-202210-04
- GLSA-202210-04
- DSA-5019
- DSA-5019
- https://www.wireshark.org/security/wnpa-sec-2021-07.html
- https://www.wireshark.org/security/wnpa-sec-2021-07.html
Package ethtool updated to version 5.15-alt1 for branch sisyphus_mipsel.
Closed bugs
В README.ALT осталось упоминание init-скрипта
Package bluez updated to version 5.62-alt2 for branch sisyphus_mipsel.
Closed bugs
Требует /bin/systemctl
Package alterator-setup updated to version 0.3.14-alt1 for branch sisyphus_mipsel.
Closed bugs
alterator-setup зависит от systemd
Package drbd-utils updated to version 9.19.1-alt3 for branch sisyphus_mipsel.
Closed bugs
Зависит от systemd
Package elinks updated to version 0.14.3-alt1 for branch sisyphus_mipsel.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2012-6709
ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.