ALT-BU-2023-4021-1
Branch sisyphus_e2k update bulletin.
Package apt updated to version 0.5.15lorg2-alt84 for branch sisyphus_e2k.
Closed bugs
aptitude показывает только первую строчку в описании
apt: ошибка сборки с GCC 13
packagekit fails to show the description of a package if it is translated
Package docs-alt-kworkstation updated to version 10.2-alt3 for branch sisyphus_e2k.
Closed bugs
Опечатка в примечании о создании подтомов в документации для Workstation K 10.1
Ошибка в примечании о установке загрузчика в документации для Workstation K 10.1
Некорректный синтаксис команды для установки пакетов для работы сканеров в документации для Workstation K 10.1
Package sysstat updated to version 12.7.4-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
Modified: 2025-01-22
CVE-2023-33204
sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.
- https://github.com/sysstat/sysstat/pull/360
- https://github.com/sysstat/sysstat/pull/360
- [debian-lts-announce] 20230527 [SECURITY] [DLA 3434-1] sysstat security update
- [debian-lts-announce] 20230527 [SECURITY] [DLA 3434-1] sysstat security update
- FEDORA-2023-4706cef256
- FEDORA-2023-4706cef256
- FEDORA-2023-ac947ec260
- FEDORA-2023-ac947ec260
Package pyclip updated to version 0.7.0-alt2 for branch sisyphus_e2k.
Closed bugs
Не хватает зависимости на xclip
Package php8.0 updated to version 8.0.29-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2023-3247
In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server, and it also made easier to a malicious server to guess the client's nonce.
Package php8.1 updated to version 8.1.20-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2023-3247
In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server, and it also made easier to a malicious server to guess the client's nonce.
Package php8.2 updated to version 8.2.7-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2023-3247
In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server, and it also made easier to a malicious server to guess the client's nonce.
Package appinstall updated to version 1.4.3-alt1 for branch sisyphus_e2k.
Closed bugs
Описание от другого пакета