ALT-BU-2025-10837-1
Branch sisyphus_riscv64 update bulletin.
Package itop updated to version 3.2.2-alt1 for branch sisyphus_riscv64.
Closed vulnerabilities
Modified: 2025-11-12
CVE-2025-47286
Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop instance, execute code on the server. Versions 2.7.13 and 3.2.2 escape and check the config parameter before executing a command based on it.
Modified: 2025-11-12
CVE-2025-49145
Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, a user that has enough rights to create webhooks (mostly administrators) can drop the database. This is fixed in iTop 2.7.13 and 3.2.2 by verifying callback signature.
Package rust updated to version 1.89.0-alt1 for branch sisyphus_riscv64.
Closed bugs
Добавить поддержку wasm32-unknown-unknown в пакет rust для сборки Proxmox Datacenter Manager