ALT-BU-2025-6209-1
Branch sisyphus_e2k update bulletin.
Package multipath-tools updated to version 0.11.1-alt3 for branch sisyphus_e2k.
Closed bugs
multipath-tools 0.11.1-alt2 имеет зависимость на systemctl
Package postgresql14 updated to version 14.17-alt4 for branch sisyphus_e2k.
Closed bugs
Не замещает libpq5
Package postgresql17-1C updated to version 17.2-alt8 for branch sisyphus_e2k.
Closed bugs
Не замещает libpq5
Package postgresql13 updated to version 13.20-alt4 for branch sisyphus_e2k.
Closed bugs
Не замещает libpq5
Package R-base updated to version 4.5.0-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
BDU:2024-03807
Уязвимость интерпретатора языка программирования R, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код в целевой системе
Modified: 2025-02-13
CVE-2024-27322
Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS (R Data Serialization) formatted file or R package to run arbitrary code on an end user’s system when interacted with.
- http://www.openwall.com/lists/oss-security/2024/04/29/3
- http://www.openwall.com/lists/oss-security/2024/04/29/3
- https://hiddenlayer.com/research/r-bitrary-code-execution/
- https://hiddenlayer.com/research/r-bitrary-code-execution/
- https://https://kb.cert.org/vuls/id/238194
- https://https://kb.cert.org/vuls/id/238194
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZLV4OWXZIJ7EFBIWUZADUSHYJTFAQ4D/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZLV4OWXZIJ7EFBIWUZADUSHYJTFAQ4D/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JVE5FDLFJGTAMOSJ6DREFAODEUBRFWSG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JVE5FDLFJGTAMOSJ6DREFAODEUBRFWSG/
- https://www.kb.cert.org/vuls/id/238194
- https://www.kb.cert.org/vuls/id/238194
Closed bugs
Обновите до свежей версии
просьба обноить до 4.3.2
Просьба обновить до 4.4.x
Просьба обновить до 4.4.x
Обновление до 4.3.3
Package postgresql16 updated to version 16.8-alt4 for branch sisyphus_e2k.
Closed bugs
Не замещает libpq5
Package postgresql17 updated to version 17.4-alt4 for branch sisyphus_e2k.
Closed bugs
Не замещает libpq5
Package postgresql15 updated to version 15.12-alt4 for branch sisyphus_e2k.
Closed bugs
Не замещает libpq5
Package passim updated to version 0.1.9-alt1 for branch sisyphus_e2k.
Closed bugs
passim: FTBFS