pkmon: finalized without ever returning

Документация docs-alt-server-v, п.39.4.14. CephFS: опечатка в примечании

Документация docs-alt-server-v, п. 39.5. FC/iSCSI SAN: опечатка в предложении

Документация docs-alt-server-v, п. ⁠43.5. Доступ к LXC контейнеру: дополнить командой в предупреждении

Документация docs-alt-server-v, Глава 44. Миграция ВМ и контейнеров: ошибки пунктуации

Документация docs-alt-server-v, п. ⁠51.4. Двухфакторная аутентификация: ошибки пунктуации

Глава "⁠39.6.3.2. Удаление монитора": необходимо внести правки в пример команды

Глава "39.6.4.2. Удаление менеджера": внести правки в пример команды

Проблемы с пунктуацией в главе "39.6.7. Ceph CRUSH и классы устройств"

Права устнавливаются серез %post

Документация docs-alt-education - гл. 66: исправить пунктуацию

Опечатка в главе ⁠42.4.2. Правила по VID&PID документации docs-alt-server

В OEM установке на шаге "Язык" меняются местами варианты переключения раскладки клавиатуры

Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system, along with a salted hash of an empty password. Under these conditions, Navidrome treats the request as authenticated, granting access to various Subsonic endpoints without requiring valid credentials. An attacker can use any non-existent username to bypass the authentication system and gain access to various read-only data in Navidrome, such as user playlists. However, any attempt to modify data fails with a "permission denied" error due to insufficient permissions, limiting the impact to unauthorized viewing of information. Version 0.54.5 contains a patch for this issue.

Отсутствуют драйвера баз данных

The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing a denial of service (DoS).

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address (when knowing only their Tox Id) by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion connection with the attacker, guessing the target's DHT public key and creating a DHT node with public key close to it, and finally onion-routing a NAT Ping Request to the target, requesting it to ping the just created DHT node.

A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the handling of received network packets) allows remote attackers to crash the process or potentially execute arbitrary code via a network packet.

Не работает с Java 17 (java.lang.NoClassDefFoundError: jdk/nashorn/api/scripting/ClassFilter)

Во время установки образа при переходе в tty сообщение: "mkdir: cannot create directory `/root/.kbd': File exists"