ALT-PU-2022-3124

Критический

ALT-PU-2022-3124: package libde265 update to version 1.0.9-alt1

Источник

errata.altlinux.org

Дата публикации

18.11.2022

Дата обновления

18.11.2022

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades libde265 to version 1.0.9-alt1.

Устраненные уязвимости1

CVE-2022-1253

Критический 9.8

Дата публикации: 06.04.2022

CWE-122

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.

CVSS 3.1

Критический 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Высокий 7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2022-1253 https://nvd.nist.gov/vuln/detail/CVE-2022-1253

Ссылки1

ALT-PU-2022-3124 https://errata.altlinux.org/ALT-PU-2022-3124

Связанные уязвимости

CVE-2022-1253

CVSS3: 9.8

ubuntu

больше 4 лет назад

CVE-2022-1253

CVSS3: 9.8

nvd

больше 4 лет назад

CVE-2022-1253

CVSS3: 9.8

debian

больше 4 лет назад

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 pr ...

GHSA-232g-h7w4-2pxj

CVSS3: 9.8

github

больше 4 лет назад

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to 1.0.8.

ALT-PU-2023-2046

CVSS3: 9.8

altlinux

больше 3 лет назад

ALT-PU-2023-2046: package `libde265` update to version 1.0.11-alt1