Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-3070

Критический

ALT-PU-2020-3070: package freecol update to version 0.11.6-alt2

Источник
errata.altlinux.org
Дата публикации
19.10.2020
Дата обновления
19.10.2020
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades freecol to version 0.11.6-alt2.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 10
ubuntu
почти 8 лет назад

FreeCol version <= nightly-2018-08-22 contains a XML External Entity (XXE) vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Freecol file.

CVSS3: 10
nvd
почти 8 лет назад

FreeCol version <= nightly-2018-08-22 contains a XML External Entity (XXE) vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Freecol file.

CVSS3: 10
debian
почти 8 лет назад

FreeCol version <= nightly-2018-08-22 contains a XML External Entity ( ...

CVSS3: 10
github
больше 4 лет назад

FreeCol version <= nightly-2018-08-22 contains a XML External Entity (XXE) vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Freecol file.