Описание
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| stellarium | fixed | 23.3-1 | package | |
| stellarium | ignored | bookworm | package | |
| stellarium | no-dsa | bullseye | package | |
| stellarium | no-dsa | buster | package |
Примечания
https://github.com/Stellarium/stellarium/commit/1261f74dc4aa6bbd01ab514343424097f8cf46b7 (v23.1)
https://github.com/Stellarium/stellarium/commit/787a894897b7872ae96e6f5804a182210edd5c78 (v23.1)
https://github.com/Stellarium/stellarium/commit/eba61df3b38605befcb43687a4c0a159dbc0c5cb (v23.1)
EPSS
Связанные уязвимости
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.
ALT-PU-2024-15503: package `stellarium` update to version 24.3-alt0.p10.1
EPSS