ALT-BU-2023-3844-1
Branch p10_e2k update bulletin.
Closed bugs
Ставит лишние пакеты от имени пользователя и без согласия
Telegram два ярлыка в меню
При установке пакета создавать пустой /etc/hasplm/nethasp.ini, если в системе такого файла ещё нет.
eepm play vkteams: Failed to find Requires
eepm play vk - невозможно установить мессенджер
epm play rustdesk: Failed to find Requires
eagle не запускается после установки
epm play icq: Failed to find Requires
Не собирает zoom
epm play flyview-server: не запускается сервис ipera-mediaserver
epm play liteide: cannot find go in PATH
epm full-upgrade: ошибка обновления snap-пакетов в тех случаях, когда snapd ранее не использовался
Невозможно установить far2l-portable через appinstall на Alt Workstation 10.1
epm play jetbrain-toolbox: программа не работает
Closed vulnerabilities
Modified: 2025-01-07
CVE-2023-0666
Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
- https://gitlab.com/wireshark/wireshark/-/issues/19085
- https://gitlab.com/wireshark/wireshark/-/issues/19085
- https://security.gentoo.org/glsa/202309-02
- https://security.gentoo.org/glsa/202309-02
- https://takeonme.org/cves/CVE-2023-0666.html
- https://takeonme.org/cves/CVE-2023-0666.html
- https://www.debian.org/security/2023/dsa-5429
- https://www.debian.org/security/2023/dsa-5429
- https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html
- https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html
- https://www.wireshark.org/security/wnpa-sec-2023-18.html
- https://www.wireshark.org/security/wnpa-sec-2023-18.html
Modified: 2025-01-07
CVE-2023-0667
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark
Modified: 2025-01-07
CVE-2023-0668
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
- https://gitlab.com/wireshark/wireshark/-/issues/19087
- https://gitlab.com/wireshark/wireshark/-/issues/19087
- https://security.gentoo.org/glsa/202309-02
- https://security.gentoo.org/glsa/202309-02
- https://takeonme.org/cves/CVE-2023-0668.html
- https://takeonme.org/cves/CVE-2023-0668.html
- https://www.debian.org/security/2023/dsa-5429
- https://www.debian.org/security/2023/dsa-5429
- https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html
- https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html
- https://www.wireshark.org/security/wnpa-sec-2023-19.html
- https://www.wireshark.org/security/wnpa-sec-2023-19.html
Modified: 2025-01-15
CVE-2023-2854
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2854.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2854.json
- https://gitlab.com/wireshark/wireshark/-/issues/19084
- https://gitlab.com/wireshark/wireshark/-/issues/19084
- GLSA-202309-02
- GLSA-202309-02
- DSA-5429
- DSA-5429
- https://www.wireshark.org/security/wnpa-sec-2023-17.html
- https://www.wireshark.org/security/wnpa-sec-2023-17.html
Modified: 2025-01-15
CVE-2023-2855
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2855.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2855.json
- https://gitlab.com/wireshark/wireshark/-/issues/19062
- https://gitlab.com/wireshark/wireshark/-/issues/19062
- GLSA-202309-02
- GLSA-202309-02
- DSA-5429
- DSA-5429
- https://www.wireshark.org/security/wnpa-sec-2023-12.html
- https://www.wireshark.org/security/wnpa-sec-2023-12.html
Modified: 2025-01-15
CVE-2023-2856
VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2856.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2856.json
- https://gitlab.com/wireshark/wireshark/-/issues/19083
- https://gitlab.com/wireshark/wireshark/-/issues/19083
- [debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update
- [debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update
- GLSA-202309-02
- GLSA-202309-02
- DSA-5429
- DSA-5429
- https://www.wireshark.org/security/wnpa-sec-2023-16.html
- https://www.wireshark.org/security/wnpa-sec-2023-16.html
Modified: 2025-01-15
CVE-2023-2857
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2857.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2857.json
- https://gitlab.com/wireshark/wireshark/-/issues/19063
- https://gitlab.com/wireshark/wireshark/-/issues/19063
- GLSA-202309-02
- GLSA-202309-02
- DSA-5429
- DSA-5429
- https://www.wireshark.org/security/wnpa-sec-2023-13.html
- https://www.wireshark.org/security/wnpa-sec-2023-13.html
Modified: 2025-01-15
CVE-2023-2858
NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2858.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2858.json
- https://gitlab.com/wireshark/wireshark/-/issues/19081
- https://gitlab.com/wireshark/wireshark/-/issues/19081
- [debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update
- [debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update
- GLSA-202309-02
- GLSA-202309-02
- DSA-5429
- DSA-5429
- https://www.wireshark.org/security/wnpa-sec-2023-15.html
- https://www.wireshark.org/security/wnpa-sec-2023-15.html
Modified: 2025-01-16
CVE-2023-2879
GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2879.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2879.json
- https://gitlab.com/wireshark/wireshark/-/issues/19068
- https://gitlab.com/wireshark/wireshark/-/issues/19068
- [debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update
- [debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update
- GLSA-202309-02
- GLSA-202309-02
- DSA-5429
- DSA-5429
- https://www.wireshark.org/security/wnpa-sec-2023-14.html
- https://www.wireshark.org/security/wnpa-sec-2023-14.html
Modified: 2025-01-13
CVE-2023-2952
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2952.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2952.json
- https://gitlab.com/wireshark/wireshark/-/issues/19100
- https://gitlab.com/wireshark/wireshark/-/issues/19100
- [debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update
- [debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update
- GLSA-202309-02
- GLSA-202309-02
- DSA-5429
- DSA-5429
- https://www.wireshark.org/security/wnpa-sec-2023-20.html
- https://www.wireshark.org/security/wnpa-sec-2023-20.html