ALT-BU-2025-11751-1
Branch sisyphus_riscv64 update bulletin.
Package pdf-compress updated to version 0.4-alt1 for branch sisyphus_riscv64.
Closed bugs
Отсутствует проверка вводимых данных в полях "Что будем сжимать?" и "Куда будем сохранять?".
Package tcpreplay updated to version 4.5.2-alt1 for branch sisyphus_riscv64.
Closed vulnerabilities
Modified: 2025-09-11
CVE-2025-9019
A vulnerability has been found in tcpreplay 4.5.1. This vulnerability affects the function mask_cidr6 of the file cidr.c of the component tcpprep. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The researcher is able to reproduce this with the latest official release 4.5.1 and the current master branch. The code maintainer cannot reproduce this for 4.5.2-beta1. In his reply the maintainer explains that "[i]n that case, this is a duplicate that was fixed in 4.5.2."
- https://drive.google.com/file/d/13SQYVIb_YQoRfaJaaLf6iLtMiCRCHlBc/view?usp=sharing
- https://github.com/appneta/tcpreplay/issues/958
- https://github.com/appneta/tcpreplay/issues/958#issuecomment-3124876035
- https://github.com/appneta/tcpreplay/issues/959
- https://vuldb.com/?ctiid.320080
- https://vuldb.com/?id.320080
- https://vuldb.com/?submit.623635
- https://vuldb.com/?submit.623636
- https://vuldb.com/?submit.623637
- https://vuldb.com/?submit.623638
- https://vuldb.com/?submit.623639
- https://github.com/appneta/tcpreplay/issues/958
- https://github.com/appneta/tcpreplay/issues/959
- https://vuldb.com/?submit.623639
Package oauth2-proxy updated to version 7.12.0-alt2 for branch sisyphus_riscv64.
Closed bugs
Добавить в пакет systemd сервис
Package python3-module-icalendar updated to version 6.3.1-alt1 for branch sisyphus_riscv64.
Closed bugs
AttributeError: module 'icalendar' has no attribute 'use_pytz'
Package gsl updated to version 2.8-alt4 for branch sisyphus_riscv64.
Closed vulnerabilities
Modified: 2025-09-04
CVE-2024-50610
GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.