Security fix for the ALT Linux 9 package glpi version 9.5.10-alt1

🗓️ 04 Nov 2022 00:00:00Reported by https://packages.altlinux.org/en/sisyphus/security/Type

altlinux

altlinux🔗 packages.altlinux.org👁 32 Views

Security fix for the ALT Linux 9 package glpi version 9.5.10-alt1, includes security patches for multiple CVE

Reporter	Title	Published	Views	Family All 208
Huntr	User's session persist after permanently deleting his account	18 Sep 202211:50	–	huntr
ALT Linux	Security fix for the ALT Linux 10 package glpi version 9.5.10-alt1	4 Nov 202200:00	–	altlinux
BDU FSTEC	The vulnerability of the GLPI system’s request and incident handling process, related to incorrect validation of input data, allows attackers to compromise the integrity of the system.	29 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s handling of requests and incidents stems from the lack of measures taken to protect the website structure. This allows attackers to carry out cross-site scripting attacks.	29 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request and incident handling process, related to incorrect input cancellation during the generation of web pages, allows a perpetrator to execute arbitrary code.	29 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request and incident handling capabilities, related to insufficient session duration, allows attackers to compromise the integrity of the system.	29 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request and incident handling process, related to incorrect input cancellation during the generation of web pages, allows a perpetrator to execute arbitrary code.	29 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the GLPI system’s handling of requests and incidents, related to improper neutralization of special elements used in SQL commands, allows an attacker to carry out an attack based on time, using SQL injections in the REST API user_token.	29 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI system’s request and incident handling process, related to incorrect input cancellation during the generation of web pages, allows a malicious attacker to carry out XSS attacks.	29 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GLPI request and incident handling system lies in its ability to gain access to the debugging panel through an update script of GLPI. This allows a malicious actor to compromise the integrity of the system.	29 Jul 202400:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
ALT Linux	9	src	glpi-9.5.12-alt1.src.rpm	9.5.10-alt1	glpi-9.5.12-alt1.src.rpm
ALT Linux	9	noarch	glpi-9.5.12-alt1.noarch.rpm	9.5.10-alt1	glpi-9.5.12-alt1.noarch.rpm
ALT Linux	9	noarch	glpi-apache2-9.5.12-alt1.noarch.rpm	9.5.10-alt1	glpi-apache2-9.5.12-alt1.noarch.rpm
ALT Linux	9	noarch	glpi-php7-9.5.12-alt1.noarch.rpm	9.5.10-alt1	glpi-php7-9.5.12-alt1.noarch.rpm

04 Nov 2022 00:00Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.34251

alt linux 9 glpi security fixes cve-2022-39276 cve-2022-39372 cve-2022-39376 cve-2022-39370 cve-2022-39234 cve-2022-39262 cve-2022-39277 cve-2022-39375 cve-2022-39323