ALT-BU-2025-7129-1
Branch sisyphus update bulletin.
Closed bugs
recollq is missing
Closed bugs
crudini: просьба обновить и добавить в p11
Package python3-module-fenrir updated to version 1.9.9-alt2 for branch sisyphus in task 384792.
Closed bugs
Unit fenrir.service could not be found
Package userpasswd updated to version 1.0.1-alt1 for branch sisyphus in task 384804.
Closed bugs
Содержит dekstop-файл для запуска несуществующей программы
Не работает смена пароля с samba доменом
userpasswd-gnome
Package firefox-esr updated to version 128.10.1-alt1 for branch sisyphus in task 384815.
Closed vulnerabilities
Modified: 2025-09-22
CVE-2025-4918
An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.
- https://bugzilla.mozilla.org/show_bug.cgi?id=1966612
- https://www.mozilla.org/security/advisories/mfsa2025-36/
- https://www.mozilla.org/security/advisories/mfsa2025-37/
- https://www.mozilla.org/security/advisories/mfsa2025-38/
- https://www.mozilla.org/security/advisories/mfsa2025-40/
- https://www.mozilla.org/security/advisories/mfsa2025-41/
- https://www.vicarius.io/vsociety/posts/cve-2025-4918-detect-firefox-out-of-bounds-write
- https://www.vicarius.io/vsociety/posts/cve-2025-4918-mitigate-firefox-out-of-bounds-write
Modified: 2025-05-28
CVE-2025-4919
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.
- https://bugzilla.mozilla.org/show_bug.cgi?id=1966614
- https://www.mozilla.org/security/advisories/mfsa2025-36/
- https://www.mozilla.org/security/advisories/mfsa2025-37/
- https://www.mozilla.org/security/advisories/mfsa2025-38/
- https://www.mozilla.org/security/advisories/mfsa2025-40/
- https://www.mozilla.org/security/advisories/mfsa2025-41/
Package integrity-notifier updated to version 0.7.2-alt1 for branch sisyphus in task 384886.
Closed bugs
integrity-notifier.service crash and not restart