ALT-PU-2022-2554

Критический

ALT-PU-2022-2554: package jobe update to version 1.6.7-alt1

Источник

errata.altlinux.org

Дата публикации

02.09.2022

Дата обновления

02.09.2022

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades jobe to version 1.6.7-alt1.

Устраненные уязвимости1

CVE-2021-4297

Критический 9.8

Дата публикации: 01.01.2023

A vulnerability has been found in trampgeek jobe up to 1.6.4 and classified as problematic. This vulnerability affects the function runs_post of the file application/controllers/Restapi.php. The manipulation of the argument sourcefilename leads to an unknown weakness. Upgrading to version 1.6.5 is able to address this issue. The patch is identified as 694da5013dbecc8d30dd83e2a83e78faadf93771. It is recommended to upgrade the affected component. VDB-217174 is the identifier assigned to this vulnerability.

CVSS 3.1

Критический 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Средний 4.9

AV:A/AC:M/Au:S/C:P/I:P/A:P

Access vector: Adjacent_network
Complexity: Medium
Authentication: Single
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2021-4297 https://nvd.nist.gov/vuln/detail/CVE-2021-4297

Ссылки1

ALT-PU-2022-2554 https://errata.altlinux.org/ALT-PU-2022-2554

Связанные уязвимости

CVE-2021-4297

CVSS3: 9.8

nvd

почти 4 года назад

GHSA-7w5v-94w3-9cq7

CVSS3: 9.8

github

почти 4 года назад

A vulnerability has been found in trampgeek jobe up to 1.6.4 and classified as problematic. This vulnerability affects the function runs_post of the file application/controllers/Restapi.php. The manipulation of the argument sourcefilename leads to an unknown weakness. Upgrading to version 1.6.5 is able to address this issue. The name of the patch is 694da5013dbecc8d30dd83e2a83e78faadf93771. It is recommended to upgrade the affected component. VDB-217174 is the identifier assigned to this vulnerability.

ALT-PU-2022-2503

CVSS3: 9.8

altlinux

около 4 лет назад

ALT-PU-2022-2503: package `jobe` update to version 1.6.7-alt1