Branch sisyphus_e2k update bulletin.

Package eepm updated to version 3.27.0-alt1 for branch sisyphus_e2k.

epm play onlyoffice: отсутствует иконка приложения

epm play slack: find-requires: ERROR: /usr/lib/rpm/lib.req failed

epm play flyview-client: find-requires: ERROR: /usr/lib/rpm/lib.req failed

epm play flyview-server: не устанавливается в связи с неудовлетворенными зависимостями

Команда "epm install --repack rstudio-2022.07.1-554-x86_64.rpm" завершается с ошибкой из-за python

Package freeipa updated to version 4.9.10-alt3 for branch sisyphus_e2k.

Ошибка в связанных пакетах рушит работу системы

Package jpegoptim updated to version 1.5.0-alt1 for branch sisyphus_e2k.

Published: 2022-07-02
Modified: 2024-11-21

CVE-2022-32325

JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

Package libstfl0 updated to version 0.24-alt10 for branch sisyphus_e2k.

cannot load such file -- stfl

Package expat updated to version 2.4.9-alt1 for branch sisyphus_e2k.

Published: 2022-09-14

BDU:2023-02596

Уязвимость функции doContent файла xmlparse.c библиотеки синтаксического анализатора XML libexpat, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2022-09-14
Modified: 2024-11-21

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.0

Branch sisyphus_e2k update on 2022-09-26

ALT-BU-2022-6296-1

ALT-PU-2022-6291-1

Closed bugs

Bug #43713

Bug #43718

Bug #43761

Bug #43762

Bug #43794

ALT-PU-2022-6292-1

Closed bugs

Bug #43823

ALT-PU-2022-6293-1

Closed vulnerabilities

CVE-2022-32325

ALT-PU-2022-6294-1

Closed bugs

Bug #43862

ALT-PU-2022-6295-1

Closed vulnerabilities

BDU:2023-02596

CVE-2022-40674