ALT-BU-2023-3279-1
Branch sisyphus_e2k update bulletin.
Package sysstat updated to version 12.7.2-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2022-39377
sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). This issue has been patched in version 12.7.1.
- https://github.com/sysstat/sysstat/security/advisories/GHSA-q8r6-g56f-9w7x
- https://github.com/sysstat/sysstat/security/advisories/GHSA-q8r6-g56f-9w7x
- [debian-lts-announce] 20221113 [SECURITY] [DLA 3188-1] sysstat security update
- [debian-lts-announce] 20221113 [SECURITY] [DLA 3188-1] sysstat security update
- FEDORA-2022-9f3af921a5
- FEDORA-2022-9f3af921a5
- FEDORA-2022-5adda2d05f
- FEDORA-2022-5adda2d05f
- FEDORA-2022-dbe48a4bc7
- FEDORA-2022-dbe48a4bc7
- GLSA-202211-07
- GLSA-202211-07
Closed bugs
Ошибка при отображении графика Memory Statistics в isag.
Package lightdm updated to version 1.32.0-alt2 for branch sisyphus_e2k.
Closed bugs
Не входит в систему после обновления до 1.32.0
Package cabextract updated to version 1.11-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
BDU:2019-01362
Уязвимость библиотеки Libmspack и утилиты разархивации CAB-файлов СabExtract, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-18584
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.
- RHSA-2019:2049
- RHSA-2019:2049
- https://bugs.debian.org/911640
- https://bugs.debian.org/911640
- https://github.com/kyz/libmspack/commit/40ef1b4093d77ad3a5cfcee1f5cb6108b3a3bcc2
- https://github.com/kyz/libmspack/commit/40ef1b4093d77ad3a5cfcee1f5cb6108b3a3bcc2
- [debian-lts-announce] 20181026 [SECURITY] [DLA 1555-1] libmspack security update
- [debian-lts-announce] 20181026 [SECURITY] [DLA 1555-1] libmspack security update
- GLSA-201903-20
- GLSA-201903-20
- USN-3814-1
- USN-3814-1
- USN-3814-2
- USN-3814-2
- USN-3814-3
- USN-3814-3
- https://www.cabextract.org.uk/#changes
- https://www.cabextract.org.uk/#changes
- https://www.openwall.com/lists/oss-security/2018/10/22/1
- https://www.openwall.com/lists/oss-security/2018/10/22/1
- https://www.starwindsoftware.com/security/sw-20181213-0001/
- https://www.starwindsoftware.com/security/sw-20181213-0001/
Package chafa updated to version 1.12.4-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2022-2061
Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0.