ALT-PU-2019-1740

Критический

ALT-PU-2019-1740: package odoo update to version 12.0-alt1.20190424

Источник

errata.altlinux.org

Дата публикации

26.04.2019

Дата обновления

26.04.2019

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades odoo to version 12.0-alt1.20190424.

Устраненные уязвимости13

CVE-2018-14733

Высокий 7.5

Дата публикации: 05.07.2019

CWE-20

The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.

CVSS 3.0

Высокий 7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 5

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2018-14733 https://nvd.nist.gov/vuln/detail/CVE-2018-14733

Ссылки1

ALT-PU-2019-1740 https://errata.altlinux.org/ALT-PU-2019-1740

Связанные уязвимости

CVE-2018-14733

CVSS3: 7.5

nvd

больше 7 лет назад

The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.

CVE-2018-14733

CVSS3: 7.5

debian

больше 7 лет назад

The Odoo Community Association (OCA) dbfilter_from_header module makes ...

GHSA-v99f-mwxv-vmfm

CVSS3: 7.5

github

больше 4 лет назад

The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.

CVE-2018-14859

CVSS3: 8.1

nvd

больше 7 лет назад

Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated users to reset the password of other users by being the first party to use the secure token.

CVE-2018-14859

CVSS3: 8.1

debian

больше 7 лет назад

Incorrect access control in the password reset component in Odoo Commu ...