BDU:2022-04307

Уязвимость библиотеки приложений exo среды рабочего стола XFCE, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (8.8) Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2022-32278

Published: 2022-06-14
Modified: 2024-11-21

CVE-2022-32278

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Package gimp updated to version 2.10.32-alt1 for branch sisyphus_riscv64.

Published: 2022-05-17
Modified: 2024-11-21

CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

Published: 2022-06-24
Modified: 2024-11-21

CVE-2022-32990

An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

Package make-initrd-bootchain updated to version 0.1.5-alt10 for branch sisyphus_riscv64.

Передаёт инсталятору неверный $PREFIX

Package jack-audio-connection-kit updated to version 1.9.21-alt1 for branch sisyphus_riscv64.

JACK 1.9.21

Падения клиентов jack

Version: 2.1.0

Branch sisyphus_riscv64 update on 2022-06-15

ALT-BU-2022-5217-1

ALT-PU-2022-5213-1

Closed vulnerabilities

BDU:2022-04307

CVE-2022-32278

ALT-PU-2022-5214-1

Closed vulnerabilities

CVE-2022-30067

CVE-2022-32990

ALT-PU-2022-5215-1

Closed bugs

Bug #42965

ALT-PU-2022-5216-1

Closed bugs

Bug #42971

Bug #42979