ALT-BU-2023-3956-1
Branch sisyphus_riscv64 update bulletin.
Package python3-module-persistent updated to version 5.0-alt2 for branch sisyphus_riscv64.
Closed bugs
Убрать python3-dev из зависимостей
Package NetworkManager-applet-gtk updated to version 1.33.0-alt1.g4909bd30 for branch sisyphus_riscv64.
Closed bugs
Не импортируется конфигурация для соединения VPN: Ошибка сегментирования
Package sysstat updated to version 12.7.2-alt2 for branch sisyphus_riscv64.
Closed vulnerabilities
Modified: 2025-01-22
CVE-2023-33204
sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.
- https://github.com/sysstat/sysstat/pull/360
- https://github.com/sysstat/sysstat/pull/360
- [debian-lts-announce] 20230527 [SECURITY] [DLA 3434-1] sysstat security update
- [debian-lts-announce] 20230527 [SECURITY] [DLA 3434-1] sysstat security update
- FEDORA-2023-4706cef256
- FEDORA-2023-4706cef256
- FEDORA-2023-ac947ec260
- FEDORA-2023-ac947ec260
Package libportmidi updated to version 2.0.4-alt1 for branch sisyphus_riscv64.
Closed bugs
portmidi: development is moved to github, ver. 2.0.2 is out
Package qt6-tools updated to version 6.4.2-alt2 for branch sisyphus_riscv64.
Closed bugs
qt6-tools: ошибка сборки с clang 16
Package python3 updated to version 3.11.4-alt2 for branch sisyphus_riscv64.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2022-45061
An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.
- https://github.com/python/cpython/issues/98433
- https://github.com/python/cpython/issues/98433
- [debian-lts-announce] 20230524 [SECURITY] [DLA 3432-1] python2.7 security update
- [debian-lts-announce] 20230524 [SECURITY] [DLA 3432-1] python2.7 security update
- [debian-lts-announce] 20230630 [SECURITY] [DLA 3477-1] python3.7 security update
- [debian-lts-announce] 20230630 [SECURITY] [DLA 3477-1] python3.7 security update
- FEDORA-2022-bcf089dd07
- FEDORA-2022-bcf089dd07
- FEDORA-2022-3d7e44dbd5
- FEDORA-2022-3d7e44dbd5
- FEDORA-2022-3e859b6bc6
- FEDORA-2022-3e859b6bc6
- FEDORA-2022-50deb53896
- FEDORA-2022-50deb53896
- FEDORA-2023-f1381c83af
- FEDORA-2023-f1381c83af
- FEDORA-2022-6ba889e0e3
- FEDORA-2022-6ba889e0e3
- FEDORA-2023-5460cf6dfb
- FEDORA-2023-5460cf6dfb
- FEDORA-2023-c43a940a93
- FEDORA-2023-c43a940a93
- FEDORA-2022-e1ce71ff40
- FEDORA-2022-e1ce71ff40
- FEDORA-2023-943556a733
- FEDORA-2023-943556a733
- FEDORA-2022-de755fd092
- FEDORA-2022-de755fd092
- FEDORA-2022-e699dd5247
- FEDORA-2022-e699dd5247
- FEDORA-2022-dbb811d203
- FEDORA-2022-dbb811d203
- FEDORA-2022-6b8b96f883
- FEDORA-2022-6b8b96f883
- FEDORA-2022-45d2cfdfa4
- FEDORA-2022-45d2cfdfa4
- FEDORA-2022-93c6916349
- FEDORA-2022-93c6916349
- FEDORA-2022-e6d0495206
- FEDORA-2022-e6d0495206
- FEDORA-2023-129178fd27
- FEDORA-2023-129178fd27
- FEDORA-2023-af5206f71d
- FEDORA-2023-af5206f71d
- FEDORA-2023-097dd40685
- FEDORA-2023-097dd40685
- FEDORA-2022-fd3771db30
- FEDORA-2022-fd3771db30
- FEDORA-2022-fdb2739feb
- FEDORA-2022-fdb2739feb
- FEDORA-2022-18b234c18b
- FEDORA-2022-18b234c18b
- FEDORA-2022-fbf6a320fe
- FEDORA-2022-fbf6a320fe
- FEDORA-2022-6d51289820
- FEDORA-2022-6d51289820
- FEDORA-2023-a990c93ed0
- FEDORA-2023-a990c93ed0
- FEDORA-2023-78b4ce2f23
- FEDORA-2023-78b4ce2f23
- FEDORA-2022-b2f06fbb62
- FEDORA-2022-b2f06fbb62
- FEDORA-2022-6f4e6120d7
- FEDORA-2022-6f4e6120d7
- GLSA-202305-02
- GLSA-202305-02
- https://security.netapp.com/advisory/ntap-20221209-0007/
- https://security.netapp.com/advisory/ntap-20221209-0007/
Closed bugs
python3: поддержка архитектуры LoongArch
python3: упрощение начальной (bootstrap) сборки