ALT-BU-2024-14773-1
Branch sisyphus_loongarch64 update bulletin.
Package ocrdesktop updated to version 3.0-alt2 for branch sisyphus_loongarch64.
Closed bugs
ValueError: Namespace Wnck not available
Package ImageMagick updated to version 7.1.1.39-alt1 for branch sisyphus_loongarch64.
Closed bugs
Не работает отмена действий для изображений с большим разрешением
Package buildah updated to version 1.37.5-alt1 for branch sisyphus_loongarch64.
Closed vulnerabilities
Modified: 2025-04-03
CVE-2024-9675
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
- RHSA-2024:8563
- RHSA-2024:8675
- RHSA-2024:8679
- RHSA-2024:8686
- RHSA-2024:8690
- RHSA-2024:8700
- RHSA-2024:8703
- RHSA-2024:8707
- RHSA-2024:8708
- RHSA-2024:8709
- RHSA-2024:8846
- RHSA-2024:8984
- RHSA-2024:8994
- RHSA-2024:9051
- RHSA-2024:9454
- RHSA-2024:9459
- RHSA-2025:2445
- RHSA-2025:2449
- RHSA-2025:2454
- RHSA-2025:2701
- RHSA-2025:2710
- RHSA-2025:3301
- https://access.redhat.com/security/cve/CVE-2024-9675
- RHBZ#2317458
Package podman updated to version 5.2.5-alt1 for branch sisyphus_loongarch64.
Closed vulnerabilities
Modified: 2025-04-03
CVE-2024-9675
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
- RHSA-2024:8563
- RHSA-2024:8675
- RHSA-2024:8679
- RHSA-2024:8686
- RHSA-2024:8690
- RHSA-2024:8700
- RHSA-2024:8703
- RHSA-2024:8707
- RHSA-2024:8708
- RHSA-2024:8709
- RHSA-2024:8846
- RHSA-2024:8984
- RHSA-2024:8994
- RHSA-2024:9051
- RHSA-2024:9454
- RHSA-2024:9459
- RHSA-2025:2445
- RHSA-2025:2449
- RHSA-2025:2454
- RHSA-2025:2701
- RHSA-2025:2710
- RHSA-2025:3301
- https://access.redhat.com/security/cve/CVE-2024-9675
- RHBZ#2317458
Modified: 2025-04-03
CVE-2024-9676
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.
- RHSA-2024:10289
- RHSA-2024:8418
- RHSA-2024:8428
- RHSA-2024:8437
- RHSA-2024:8686
- RHSA-2024:8690
- RHSA-2024:8694
- RHSA-2024:8700
- RHSA-2024:8984
- RHSA-2024:9051
- RHSA-2024:9454
- RHSA-2024:9459
- RHSA-2024:9926
- RHSA-2025:0876
- RHSA-2025:2454
- RHSA-2025:2710
- RHSA-2025:3301
- https://access.redhat.com/security/cve/CVE-2024-9676
- RHBZ#2317467
- https://github.com/advisories/GHSA-wq2p-5pc6-wpgf
Package lightdm updated to version 1.32.0-alt9 for branch sisyphus_loongarch64.
Closed bugs
Невозможно войти из lightdm в классический gnome
Package wolfssl updated to version 5.7.4-alt1 for branch sisyphus_loongarch64.
Closed vulnerabilities
BDU:2024-07276
Уязвимость функции MatchDomainName() библиотеки SSL/TLS WolfSSL, позволяющая нарушителю оказать влияние на доступность защищаемой информации
Modified: 2024-09-07
CVE-2024-5991
In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509_check_host() takes in a pointer and length to check against, with no requirements that it be NULL terminated. If a caller was attempting to do a name check on a non-NULL terminated buffer, the code would read beyond the bounds of the input array until it found a NULL terminator.This issue affects wolfSSL: through 5.7.0.