Branch sisyphus_riscv64 update bulletin.

Package pesign updated to version 116-alt1 for branch sisyphus_riscv64.

Published: 2023-01-31

BDU:2023-00640

Уязвимость демона pesign подсистемы инициализации и управления службами systemd, позволяющая нарушителю повысить свои привилегии

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2022-3560

Published: 2022-04-29
Modified: 2024-11-21

CVE-2022-1249

A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.

Severity: LOW (3.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References:

Published: 2023-02-03
Modified: 2025-03-26

CVE-2022-3560

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

Package NetworkManager-openconnect updated to version 1.2.10-alt1 for branch sisyphus_riscv64.

Unknown username "nm-openconnect" in message bus configuration file в DBus

Package spice-vdagent updated to version 0.22.1-alt1.1 for branch sisyphus_riscv64.

Циклическая зависимость сервисов systemd

Package vim updated to version 9.0.1893-alt1 for branch sisyphus_riscv64.

Published: 2023-09-04
Modified: 2024-11-21

CVE-2023-4733

Use After Free in GitHub repository vim/vim prior to 9.0.1840.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-09-02
Modified: 2024-11-21

CVE-2023-4734

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-09-02
Modified: 2024-11-21

CVE-2023-4735

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-09-02
Modified: 2024-11-21

CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-09-02
Modified: 2024-11-21

CVE-2023-4738

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-09-04
Modified: 2024-11-21

CVE-2023-4750

Use After Free in GitHub repository vim/vim prior to 9.0.1857.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-09-04
Modified: 2024-11-21

CVE-2023-4752

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2023-09-05
Modified: 2024-11-21

CVE-2023-4781

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Package docs-alt-server-v updated to version 10.1-alt8 for branch sisyphus_riscv64.

Ошибка в описании настройки PVE High Availability в документации для Alt Server V.

Непоследовательность в описании кнопок интерфейса конфигурации VLAN в документации для Alt Server V.

VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla

Version: 2.1.1