ALT-PU-2026-6727: package sympa update to version 6.2.78-alt1
Описание
This update upgrades sympa to version 6.2.78-alt1.
Устраненные уязвимости5
Ссылки6
GHSA-9gj3-hwp5-pmwc
https://github.com/advisories/GHSA-9gj3-hwp5-pmwcGHSA-gpqq-952q-5327
https://github.com/advisories/GHSA-gpqq-952q-5327GHSA-h6gj-6jjq-h8g9
https://github.com/advisories/GHSA-h6gj-6jjq-h8g9GHSA-j7qv-pgf6-hvh4
https://github.com/advisories/GHSA-j7qv-pgf6-hvh4Связанные уязвимости
ALT-PU-2023-6282: package `moodle` update to version 3.11.17-alt1
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.
jQuery-UI is the official jQuery user interface library. Prior to vers ...