ALT-BU-2025-8971-1
Branch p11 update bulletin.
Closed bugs
Невозможно ввести название папки на русском языке
Closed bugs
/usr/bin/audacity is huge
Closed bugs
не работает просмотр ГОСТ сертификатов
Package qbittorrent updated to version 5.1.1-alt1 for branch p11 in task 388307.
Closed vulnerabilities
Modified: 2025-03-05
BDU:2024-09433
Уязвимость кросс-платформенный BitTorrent клиента qBittorrent, связанная с неправильным подтверждением подлинности сертификата SSL/TLS, позволяющая нарушителю выполнить атаку типа "человек посередине"
Modified: 2024-11-06
CVE-2024-51774
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.
Package greetd-regreet updated to version 0.2.0-alt4 for branch p11 in task 388420.
Closed bugs
Неправильная команда запуска Hyprland
Отсутсвуют необходимые директории или не хватает прав для кэширования и логирования.
Package quick-usb-formatter updated to version 0.6-alt25 for branch p11 in task 388667.
Closed bugs
Не работает форматирование USB.
Closed vulnerabilities
Modified: 2025-09-30
BDU:2025-07725
Уязвимость реализации протокола аутентификации OIDC сервера системы управления базами данных MongoDB, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2025-09-15
CVE-2025-6706
An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific combination of rarely-used aggregation pipeline expressions. This issue affects MongoDB Server v6.0 version prior to 6.0.21, MongoDB Server v7.0 version prior to 7.0.17 and MongoDB Server v8.0 version prior to 8.0.4 when the SBE engine is enabled.
Modified: 2025-09-26
CVE-2025-6707
Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5.
Modified: 2025-09-15
CVE-2025-6709
The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious JSON payload leading to an invariant failure and server crash. This issue affects MongoDB Server v7.0 versions prior to 7.0.17 and MongoDB Server v8.0 versions prior to 8.0.5. The same issue affects MongoDB Server v6.0 versions prior to 6.0.21, but an attacker can only induce denial of service after authenticating.
Modified: 2025-09-15
CVE-2025-6710
MongoDB Server may be susceptible to stack overflow due to JSON parsing mechanism, where specifically crafted JSON inputs may induce unwarranted levels of recursion, resulting in excessive stack space consumption. Such inputs can lead to a stack overflow that causes the server to crash which could occur pre-authorisation. This issue affects MongoDB Server v7.0 versions prior to 7.0.17 and MongoDB Server v8.0 versions prior to 8.0.5. The same issue affects MongoDB Server v6.0 versions prior to 6.0.21, but an attacker can only induce denial of service after authenticating.
Package goldendict-ng updated to version 25.07.0-alt1 for branch p11 in task 388821.
Closed bugs
Не предоставляет stardict >= 2.4.2