All errata/sisyphus/ALT-PU-2026-10045-3
ALT-PU-2026-10045-3

Package update kotlin in branch sisyphus

Version2.4.20-alt0.5031
Task#422615
Published2026-06-29
Max severityCRITICAL
Severity:

Closed issues (6)

BDU:2022-04645
MEDIUM5.3

Уязвимость интерпретатора языка программирования JetBrains Kotlin, связанная с неправильными настройками прав доступа по умолчанию, позволяющая нарушителю раскрыть защищаемую информацию

Published: 2022-07-26
CVSS 3.xMEDIUM 5.3
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
References
CVE-2020-29582
MEDIUM5.3

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

Published: 2021-02-03Modified: 2026-06-17
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS 3.xMEDIUM 5.3
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
CVE-2022-24329
MEDIUM5.3

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.

Published: 2022-02-25Modified: 2026-06-17
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS 3.xMEDIUM 5.3
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
References
GHSA-2qp4-g3q3-f92w
MEDIUM5.3

Improper Locking in JetBrains Kotlin

Published: 2022-02-26Modified: 2024-10-29
CVSS 3.xMEDIUM 5.3
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
References
GHSA-cqj8-47ch-rvvq
MEDIUM5.3

Incorrect Default Permissions in JetBrains Kotlin

Published: 2022-05-24Modified: 2022-06-23
CVSS 3.xMEDIUM 5.3
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References