ALT-PU-2021-1634

Критический

ALT-PU-2021-1634: package stone_soup update to version 0.26.1-alt1

Источник

errata.altlinux.org

Дата публикации

12.04.2021

Дата обновления

12.04.2021

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades stone_soup to version 0.26.1-alt1.

Устраненные уязвимости1

CVE-2020-11722

Критический 9.8

Дата публикации: 12.04.2020

CWE-434

Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.

CVSS 3.1

Критический 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Высокий 7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2020-11722 https://nvd.nist.gov/vuln/detail/CVE-2020-11722

Ссылки1

ALT-PU-2021-1634 https://errata.altlinux.org/ALT-PU-2021-1634

Связанные уязвимости

CVE-2020-11722

CVSS3: 9.8

ubuntu

больше 6 лет назад

Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.

CVE-2020-11722

CVSS3: 9.8

nvd

больше 6 лет назад

Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.

CVE-2020-11722

CVSS3: 9.8

debian

больше 6 лет назад

Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote ...

openSUSE-SU-2020:0549-1

suse-cvrf

больше 6 лет назад

Security update for crawl

GHSA-293j-rh9p-w2r8

github

больше 4 лет назад

Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.