Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/D37A66E1CE7616399D52A9C502A9176E
HistoryApr 14, 2021 - 12:00 a.m.

Security fix for the ALT Linux 9 package glpi version 9.5.4-alt1

2021-04-1400:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
8

0.025 Low

EPSS

Percentile

90.3%

9.5.4-alt1 built April 14, 2021 Pavel Zilke in task #269862

March 31, 2021 Pavel Zilke

- New version 9.5.4
- This is a security release, upgrading is recommended
- Security fixes:
 + CVE-2021-21326 : Horizontal Privilege Escalation
 + CVE-2021-21255 : entities switch IDOR
 + CVE-2021-21258 : XSS injection in ajax/kanban
 + CVE-2021-21314 : XSS injection on ticket update
 + CVE-2021-21312 : Stored XSS on documents
 + CVE-2021-21313 : XSS on tabs
 + CVE-2021-21325 : Stored XSS in budget type
 + CVE-2021-21327 : Unsafe Reflection in getItemForItemtype()
 + CVE-2021-21324 : Insecure Direct Object Reference (IDOR) on "Solutions"

0.025 Low

EPSS

Percentile

90.3%