2023-03-24
ALT-BU-2023-2959-1
Branch sisyphus_mipsel update bulletin.
Package xinit updated to version 1.4.1-alt3 for branch sisyphus_mipsel.
Closed bugs
Вернуть xterm
Package crun updated to version 1.8.2-alt2 for branch sisyphus_mipsel.
Closed bugs
Enable python binding
Package dino updated to version 0.4.2-alt1 for branch sisyphus_mipsel.
Closed vulnerabilities
Published: 2023-03-24
Modified: 2025-02-19
Modified: 2025-02-19
CVE-2023-28686
Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of group chats or force a victim to join a group chat; the victim may then be tricked into disclosing sensitive information.
Severity: HIGH (7.1)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
References:
- https://dino.im/security/cve-2023-28686/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQLCEUZS5GPHUQMS7C6W2NS3PHYUFHYF/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GOH6NYTLPM52MDIR2IRVUR3REDVWZV6N/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IIWXAK656EHSRIRUHLPBE3AX2I4TMH7M/
- https://www.debian.org/security/2023/dsa-5379
- https://dino.im/security/cve-2023-28686/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQLCEUZS5GPHUQMS7C6W2NS3PHYUFHYF/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GOH6NYTLPM52MDIR2IRVUR3REDVWZV6N/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IIWXAK656EHSRIRUHLPBE3AX2I4TMH7M/
- https://www.debian.org/security/2023/dsa-5379