Branch sisyphus update bulletin.

Package dtk6widget updated to version 6.0.19-alt2 for branch sisyphus in task 358809.

deepin-default-settings содержит системные настройки

Package dtk6log updated to version 0.0.1-alt2 for branch sisyphus in task 358809.

deepin-default-settings содержит системные настройки

Package dtk6core updated to version 6.0.18-alt2 for branch sisyphus in task 358809.

deepin-default-settings содержит системные настройки

Package dtk6gui updated to version 6.0.19-alt2 for branch sisyphus in task 358809.

deepin-default-settings содержит системные настройки

Package dtk6declarative updated to version 6.0.19-alt2 for branch sisyphus in task 358809.

deepin-default-settings содержит системные настройки

Package deepin-application-manager updated to version 1.2.4.0.1.g6096-alt3 for branch sisyphus in task 358809.

deepin-default-settings содержит системные настройки

Package deepin-launchpad updated to version 0.6.12-alt2 for branch sisyphus in task 358809.

deepin-default-settings содержит системные настройки

Package LibreOffice-still updated to version 24.2.6.2-alt1 for branch sisyphus in task 358875.

Published: 2024-09-17

BDU:2024-07260

Уязвимость пакета офисных программ LibreOffice, связанная с некорректной проверкой криптографической подписи, позволяющая нарушителю создать специально сформированный документ, который после восстановления сообщал о действительном статусе электронной подписи

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2024-7788

Published: 2024-09-17
Modified: 2024-11-21

CVE-2024-7788

Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue affects LibreOffice: from 24.2 before < 24.2.5.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Package cheese updated to version 44.1-alt1.1 for branch sisyphus in task 358886.

cheese: Падает вместо того, чтобы работать

Package nix updated to version 2.24.9-alt1 for branch sisyphus in task 358888.

Published: 2024-09-10
Modified: 2024-09-20

CVE-2024-45593

Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the Nix process has access. This will be with root permissions when using the Nix daemon. This issue is fixed in Nix 2.24.6.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Package xfdesktop updated to version 4.19.4-alt1 for branch sisyphus in task 358985.

Не отображаются значки на рабочем столе

Version: 2.1.0

Branch sisyphus update on 2024-10-04

ALT-BU-2024-13537-1

ALT-PU-2024-13469-2

Closed bugs

Bug #48138

ALT-PU-2024-13471-2

Closed bugs

Bug #48138

ALT-PU-2024-13472-2

Closed bugs

Bug #48138

ALT-PU-2024-13473-2

Closed bugs

Bug #48138

ALT-PU-2024-13474-2

Closed bugs

Bug #48138

ALT-PU-2024-13475-2

Closed bugs

Bug #48138

ALT-PU-2024-13476-2

Closed bugs

Bug #48138

ALT-PU-2024-13508-2

Closed vulnerabilities

BDU:2024-07260

CVE-2024-7788

ALT-PU-2024-13512-1

Closed bugs

Bug #51625

ALT-PU-2024-13514-2

Closed vulnerabilities

CVE-2024-45593

ALT-PU-2024-13531-1

Closed bugs

Bug #50685