ALT-PU-2024-10169

Высокий

ALT-PU-2024-10169: package libredwg update to version 0.13.3.7265-alt0.p10.1

Источник

errata.altlinux.org

Дата публикации

26.07.2024

Дата обновления

26.07.2024

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades libredwg to version 0.13.3.7265-alt0.p10.1.

Устраненные уязвимости1

CVE-2023-26157

Высокий 7.5

Дата публикации: 02.01.2024

CWE-125

Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.

CVSS 3.1

Высокий 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

Ссылки

CVE-2023-26157 https://nvd.nist.gov/vuln/detail/CVE-2023-26157

Ссылки1

ALT-PU-2024-10169 https://errata.altlinux.org/ALT-PU-2024-10169

Связанные уязвимости

CVE-2023-26157

CVSS3: 7.5

nvd

почти 3 года назад

Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.

CVE-2023-26157

CVSS3: 7.5

debian

почти 3 года назад

Versions of the package libredwg before 0.12.5.6384 are vulnerable to ...

openSUSE-SU-2024:0147-1

suse-cvrf

больше 2 лет назад

Security update for libredwg

GHSA-5rxp-9658-h93v

CVSS3: 5.5

github

почти 3 года назад

Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.

ALT-PU-2024-6594

CVSS3: 7.5

altlinux

больше 2 лет назад

ALT-PU-2024-6594: package `libredwg` update to version 0.13.3.7227-alt1