ALT-BU-2025-7660-1
Branch sisyphus_loongarch64 update bulletin.
Package vault updated to version 1.19.5-alt1 for branch sisyphus_loongarch64.
Closed vulnerabilities
BDU:2024-07431
Уязвимость платформ для архивирования корпоративной информации HashiCorp Vault и Vault Enterprise, связанная с вставкой конфиденциальной информации в файл журнала, позволяющая нарушителю получить доступ к конфиденциальной информации
Modified: 2024-09-04
CVE-2024-8365
Vault Community Edition and Vault Enterprise experienced a regression where functionality that HMAC’d sensitive headers in the configured audit device, specifically client tokens and token accessors, was removed. This resulted in the plaintext values of client tokens and token accessors being stored in the audit log. This vulnerability, CVE-2024-8365, was fixed in Vault Community Edition and Vault Enterprise 1.17.5 and Vault Enterprise 1.16.9.
Package python3-module-setuptools_rust updated to version 1.11.1-alt2 for branch sisyphus_loongarch64.
Closed bugs
missing dependency on rust toolchain
Package gst-plugins-good1.0 updated to version 1.26.2-alt1 for branch sisyphus_loongarch64.
Closed vulnerabilities
No data currently available.
No data currently available.
Package fotocx updated to version 25.0-alt1.1 for branch sisyphus_loongarch64.
Closed bugs
Дополнительно необходимая утилита opj_decompress называется opj2_decompress в репозитории
Package augeas updated to version 1.14.1-alt2 for branch sisyphus_loongarch64.
Closed vulnerabilities
Modified: 2025-04-01
CVE-2025-2588
A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
- https://github.com/hercules-team/augeas/issues/852
- https://github.com/hercules-team/augeas/issues/852#issue-2905999609
- https://github.com/hercules-team/augeas/issues/852#issue-2905999609
- VDB-300568 | CTI Indicators (IOB, IOC, IOA)
- VDB-300568 | Hercules Augeas fa.c re_case_expand null pointer dereference
- Submit #517281 | https://github.com/hercules-team/augeas augeas 1.14.1 NULL Pointer Dereference
Package LibreOffice updated to version 25.2.3.2-alt1 for branch sisyphus_loongarch64.
Closed vulnerabilities
BDU:2025-05910
Уязвимость пакета офисных программ LibreOffice, связанная с некорректной проверкой криптографической подписи, позволяющая нарушителю подделывать цифровые подписи
Modified: 2025-05-12
CVE-2025-2866
Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This issue affects LibreOffice: from 24.8 before < 24.8.6, from 25.2 before < 25.2.2.
Package gst-plugins-base1.0 updated to version 1.26.2-alt1 for branch sisyphus_loongarch64.
Closed vulnerabilities
No data currently available.
No data currently available.
Package pfs updated to version 0.0.3-alt1.1 for branch sisyphus_loongarch64.
Closed bugs
Скрыть значок запуска