ALT-BU-2025-6445-1
Branch sisyphus update bulletin.
Closed bugs
0ad: port to mozjs128
Closed bugs
Отсутсвует LSP при сборке.
Closed bugs
Ошибка при экспорте в форматы OpenSCAD Format, OpenSCAD CSG Format
Ошибка при выборе верстака OpenSCAD
Closed bugs
Не запускается.
Package thunderbird updated to version 138.0-alt2 for branch sisyphus in task 383544.
Closed bugs
Не переведены кнопки диалогового окна Опустошение Уделенные
Package postgresql16 updated to version 16.9-alt1 for branch sisyphus in task 383526.
Closed vulnerabilities
Modified: 2025-05-09
CVE-2025-4207
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.
Package postgresql17-1C updated to version 17.2-alt9 for branch sisyphus in task 383526.
Closed vulnerabilities
Modified: 2025-05-09
CVE-2025-4207
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.
Package postgresql15 updated to version 15.13-alt1 for branch sisyphus in task 383526.
Closed vulnerabilities
Modified: 2025-05-09
CVE-2025-4207
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.
Package postgresql17 updated to version 17.5-alt1 for branch sisyphus in task 383526.
Closed vulnerabilities
Modified: 2025-05-09
CVE-2025-4207
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.
Package postgresql13 updated to version 13.21-alt1 for branch sisyphus in task 383526.
Closed vulnerabilities
Modified: 2025-05-09
CVE-2025-4207
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.
Package postgresql14 updated to version 14.18-alt1 for branch sisyphus in task 383526.
Closed vulnerabilities
Modified: 2025-05-09
CVE-2025-4207
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.
Closed vulnerabilities
BDU:2025-05008
Уязвимость функции ReadParams реализации протокола FastCGI библиотеки fcgi2 (fcgi), позволяющая нарушителю выполнить произвольный код
Modified: 2025-04-24
CVE-2025-23016
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.
- http://www.openwall.com/lists/oss-security/2025/04/23/4
- https://github.com/FastCGI-Archives/fcgi2/issues/67
- https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.5
- https://www.synacktiv.com/en/publications/cve-2025-23016-exploiting-the-fastcgi-library
- https://www.synacktiv.com/en/publications/cve-2025-23016-exploiting-the-fastcgi-library
Closed bugs
Нет русской локализации
Package gnome-shell-extension-ddterm updated to version 61-alt1 for branch sisyphus in task 383571.
Closed bugs
npm/eslint не нужен