Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-3130

Критический

ALT-PU-2020-3130: package glpi update to version 9.5.2-alt2

Источник
errata.altlinux.org
Дата публикации
27.10.2020
Дата обновления
27.10.2020
Устраненные уязвимости
11

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades glpi to version 9.5.2-alt2.

Устраненные уязвимости11

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 6 лет назад

In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a weak/predictable password, an attacker could decrypt data. This is fixed in version 9.5.0 by using a more secure encryption library. The library chosen is sodium.

CVSS3: 7.5
nvd
около 6 лет назад

In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a weak/predictable password, an attacker could decrypt data. This is fixed in version 9.5.0 by using a more secure encryption library. The library chosen is sodium.

CVSS3: 7.5
debian
около 6 лет назад

In GLPI before version 9.5.0, the encryption algorithm used is insecur ...

CVSS3: 7.1
ubuntu
больше 6 лет назад

In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.

CVSS3: 7.1
nvd
больше 6 лет назад

In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.