Branch sisyphus update bulletin.

Package dconf updated to version 0.40.0-alt3 for branch sisyphus in task 325650.

Опакетить /etc/dconf/profile/user

Package R-base updated to version 4.2.2-alt1 for branch sisyphus in task 325689.

Обновите, пожалуйста, R (R-base etc.) до актуальной версии 4.2.2

Package prometheus-blackbox_exporter updated to version 0.24.0-alt1 for branch sisyphus in task 325718.

Published: 2023-04-26
Modified: 2025-02-04

CVE-2023-26735

blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References:

Package dotnet-bootstrap-6.0 updated to version 6.0.20-alt1 for branch sisyphus in task 325725.

Published: 2023-04-11

BDU:2023-02907

Уязвимость программной платформы Microsoft .NET, связанная с некорректной обработкой пути поиска к библиотекам DLL,позволяющая нарушителю выполнить произвольный код

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-28260

Published: 2023-06-13

BDU:2023-03210

Уязвимость программных платформ Microsoft .NET Framework, .NET и средства разработки программного обеспечения Microsoft Visual Studio, связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24895

Published: 2023-06-13

BDU:2023-03308

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24897

Published: 2023-06-13

BDU:2023-03339

Уязвимость средства разработки программного обеспечения Microsoft Visual Studio и программной платформы Microsoft.NET, позволяющая нарушителю повысить свои привилегии

Severity: HIGH (7.3) Vector: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-33135

Published: 2023-06-13

BDU:2023-03439

Severity: MEDIUM (6.5) Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

CVE-2023-29331

Published: 2023-06-13

BDU:2023-03440

Уязвимость программных платформ Microsoft .NET Framework, .NET и средства разработки программного обеспечения Microsoft Visual Studio, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии

Severity: HIGH (7.5) Vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24936

Published: 2023-06-13

BDU:2023-03531

Уязвимость средства разработки программного обеспечения Microsoft Visual Studio и программной платформы Microsoft.NET, связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (7.3) Vector: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-33126

Published: 2023-07-11

BDU:2023-03789

Уязвимость программной платформы .NET и средства разработки программного обеспечения Microsoft Visual Studio, вызванная ошибками синхронизации при использовании общего ресурса, позволяющая нарушителю обойти существующие ограничения безопасности

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-33170

Published: 2023-07-11

BDU:2023-03790

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-33127

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24895

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24897

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

References:

Published: 2023-04-12
Modified: 2024-11-21

CVE-2023-28260

.NET DLL Hijacking Remote Code Execution Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-29337

NuGet Client Remote Code Execution Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33126

.NET and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-07-11
Modified: 2024-11-21

CVE-2023-33127

.NET and Visual Studio Elevation of Privilege Vulnerability

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33128

.NET and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33135

.NET and Visual Studio Elevation of Privilege Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-07-11
Modified: 2025-01-01

CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Package dotnet-runtime-6.0 updated to version 6.0.20-alt1 for branch sisyphus in task 325725.

Published: 2023-04-11

BDU:2023-02907

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-28260

Published: 2023-06-13

BDU:2023-03210

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24895

Published: 2023-06-13

BDU:2023-03308

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24897

Published: 2023-06-13

BDU:2023-03339

Severity: HIGH (7.3) Vector: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-33135

Published: 2023-06-13

BDU:2023-03439

Severity: MEDIUM (6.5) Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

CVE-2023-29331

Published: 2023-06-13

BDU:2023-03440

Severity: HIGH (7.5) Vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24936

Published: 2023-06-13

BDU:2023-03531

Severity: HIGH (7.3) Vector: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-33126

Published: 2023-07-11

BDU:2023-03789

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-33170

Published: 2023-07-11

BDU:2023-03790

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-33127

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24895

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24897

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

References:

Published: 2023-04-12
Modified: 2024-11-21

CVE-2023-28260

.NET DLL Hijacking Remote Code Execution Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-29337

NuGet Client Remote Code Execution Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33126

.NET and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-07-11
Modified: 2024-11-21

CVE-2023-33127

.NET and Visual Studio Elevation of Privilege Vulnerability

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33128

.NET and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33135

.NET and Visual Studio Elevation of Privilege Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-07-11
Modified: 2025-01-01

CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Package dotnet-bootstrap-7.0 updated to version 7.0.9-alt1 for branch sisyphus in task 325727.

Published: 2023-04-11

BDU:2023-02907

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-28260

Published: 2023-06-13

BDU:2023-03210

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24895

Published: 2023-06-13

BDU:2023-03308

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24897

Published: 2023-06-13

BDU:2023-03339

Severity: HIGH (7.3) Vector: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-33135

Published: 2023-06-13

BDU:2023-03439

Severity: MEDIUM (6.5) Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

CVE-2023-29331

Published: 2023-06-13

BDU:2023-03440

Severity: HIGH (7.5) Vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24936

Published: 2023-06-13

BDU:2023-03531

Severity: HIGH (7.3) Vector: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-33126

Published: 2023-07-11

BDU:2023-03789

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-33170

Published: 2023-07-11

BDU:2023-03790

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-33127

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24895

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24897

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

References:

Published: 2023-04-12
Modified: 2024-11-21

CVE-2023-28260

.NET DLL Hijacking Remote Code Execution Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-29337

NuGet Client Remote Code Execution Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-32032

.NET and Visual Studio Elevation of Privilege Vulnerability

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33126

.NET and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-07-11
Modified: 2024-11-21

CVE-2023-33127

.NET and Visual Studio Elevation of Privilege Vulnerability

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33128

.NET and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33135

.NET and Visual Studio Elevation of Privilege Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-07-11
Modified: 2025-01-01

CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Package dotnet-runtime-7.0 updated to version 7.0.9-alt1 for branch sisyphus in task 325727.

Published: 2023-04-11

BDU:2023-02907

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-28260

Published: 2023-06-13

BDU:2023-03210

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24895

Published: 2023-06-13

BDU:2023-03308

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24897

Published: 2023-06-13

BDU:2023-03339

Severity: HIGH (7.3) Vector: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-33135

Published: 2023-06-13

BDU:2023-03439

Severity: MEDIUM (6.5) Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

CVE-2023-29331

Published: 2023-06-13

BDU:2023-03440

Severity: HIGH (7.5) Vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-24936

Published: 2023-06-13

BDU:2023-03531

Severity: HIGH (7.3) Vector: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2023-33126

Published: 2023-07-11

BDU:2023-03789

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-33170

Published: 2023-07-11

BDU:2023-03790

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-33127

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24895

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24897

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

References:

Published: 2023-04-12
Modified: 2024-11-21

CVE-2023-28260

.NET DLL Hijacking Remote Code Execution Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-29337

NuGet Client Remote Code Execution Vulnerability

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-32032

.NET and Visual Studio Elevation of Privilege Vulnerability

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33126

.NET and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-07-11
Modified: 2024-11-21

CVE-2023-33127

.NET and Visual Studio Elevation of Privilege Vulnerability

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33128

.NET and Visual Studio Remote Code Execution Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-06-14
Modified: 2024-11-21

CVE-2023-33135

.NET and Visual Studio Elevation of Privilege Vulnerability

Severity: HIGH (7.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-07-11
Modified: 2025-01-01

CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Package python3-module-GitPython updated to version 3.1.32-alt1 for branch sisyphus in task 325671.

Published: 2023-08-11

BDU:2023-05150

Уязвимость компонентов clone/clone_from библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю выполнить произвольный код

Severity: CRITICAL (9.8) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2023-40267

Published: 2023-08-11
Modified: 2024-11-21

CVE-2023-40267

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.0

ALT-BU-2023-4597-2

Closed bugs

Closed bugs

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities