yun2025 发表于 昨天 13:26

长安启源公布天枢领航数据,累计避险超过386万次

长安启源公布天枢领航数据,累计避险超过386万次

ddev:归档解包过程对符号链接的检查与落盘不一致

11月7日公开的漏洞记录CVE-2026-108262涉及ddev。这个本地开发环境工具支持导入归档。程序检查链接时先将目标映射到解包目录内,真正创建链接时却保留了原来的绝对位置。两步处理所用路径不一致,使归档内后续文件有机会写到预定目录之外。公告将相关问题定位在归档解包环节。版本清单标出的受影响范围包括不低于1.25.2且低于1.25.4。

这条记录给出的CVSS 3.1基础评分为6.5分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为无、高、无。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/7065023d4be9d941a14c29397952ef18
https://lightroom.adobe.com/shares/210a53aaab54874fb3e0599fe1738497
https://lightroom.adobe.com/shares/bb0d68c81b3f6b4f9288d0055dea3094
https://lightroom.adobe.com/shares/1a93b39ca3010044b6178e71ed4b7e2f
https://lightroom.adobe.com/shares/b77e21c767cdd149b89df43b6c916ffc
https://lightroom.adobe.com/shares/2ab8567d790b304cb9785638685c8f38
https://lightroom.adobe.com/shares/906a8e959c0bd54b9183854e6883ca0f
https://lightroom.adobe.com/shares/bc2203b1c2e0834e81d17a8dafd2aeac
https://lightroom.adobe.com/shares/79006cdd77da214b82f4a810a8e2682f
https://lightroom.adobe.com/shares/83e65c0a3ea3dc4a812c776e99e5b37a
https://lightroom.adobe.com/shares/e69d71e4430ed244b0e77d7282d7014a
https://lightroom.adobe.com/shares/8b35f2a534d7c142b28412a6dc2ec234
https://lightroom.adobe.com/shares/6f8a3705ff9d494dad2c02677277478f
https://lightroom.adobe.com/shares/b562ee8a047e724fbf49c21399d8ff3f
https://lightroom.adobe.com/shares/75bae9c3bbcc484e9cd0a93385a161f5
https://lightroom.adobe.com/shares/2153198297f23642bbe92cac16ebe13f
https://lightroom.adobe.com/shares/a1f21a66307b2340a459c94d4eb3f70a
https://lightroom.adobe.com/shares/2842924870412343aca10f031e6b037e
https://lightroom.adobe.com/shares/264390c6a08a3646bfc76d080bdeba4b
https://lightroom.adobe.com/shares/d06945f7a2c9a3449bcb7c4894c75aad
https://lightroom.adobe.com/shares/e21aa93fe9cf6f4d8833a4c08eaf4a4d
https://lightroom.adobe.com/shares/d15cefaf069d524f8ce600896537cb01
https://lightroom.adobe.com/shares/936f94f4d393064988661bbd3a918c47
https://lightroom.adobe.com/shares/fc238d519b59d941a987ccb2d7bb5e9c
https://lightroom.adobe.com/shares/e140b4b761fb5c4d81813e415d3ef049
https://lightroom.adobe.com/shares/076d909cb1e9d5488edf46380dd7c415
https://lightroom.adobe.com/shares/d9a63025abf708418fc54b327dc90d3e
https://lightroom.adobe.com/shares/5cdb2210c9f1514ab2b13fcd62440c2c
https://lightroom.adobe.com/shares/daf5b6364ec91842a30bffd55900e8a8
https://lightroom.adobe.com/shares/bb2c23b5d03c1c4e9fd3521c3c6d6921
https://lightroom.adobe.com/shares/70e2d8826759c14bbdb7d74ab2ec905a
https://lightroom.adobe.com/shares/f57f00ed4679a046b9e87d0c135e52f4
https://lightroom.adobe.com/shares/67c4c0bd53c4e44cab8c5219163c49fc
https://lightroom.adobe.com/shares/21ffae5f18f723428a93e7392fcbe2bd
https://lightroom.adobe.com/shares/5a649a1f5fe3384fa10ecd076bd9225c
https://lightroom.adobe.com/shares/35a08d916e5ae446a3a301ca7c8be16b
https://lightroom.adobe.com/shares/cd93762b14f3594eade0e6c207de79ef
https://lightroom.adobe.com/shares/77071bc05edb1a4aac0ec4f7fbc12f84
https://lightroom.adobe.com/shares/d770d8c32fa63d4abaf02aa536a6e46d
https://lightroom.adobe.com/shares/3f1566954f8c394da8cd5877470baa3d
https://lightroom.adobe.com/shares/d1d53a40bdfd694a9d862f50f3718e6a
https://lightroom.adobe.com/shares/bd141fe019204247a5306b75901dfca7
https://lightroom.adobe.com/shares/55b8694c9e2c414ca2251a8ec6902571
https://lightroom.adobe.com/shares/42fa88aae7c1874dbf1604b6225186bf
https://lightroom.adobe.com/shares/4044c09d3dc91d459a201a072b859fe1
https://lightroom.adobe.com/shares/7cab0eec8d12504cbf69acdf61685b42
https://lightroom.adobe.com/shares/d501e56a40b40f4f90519ceadf8246a2
https://lightroom.adobe.com/shares/64c727bab74f9b45915ac835e720212d
https://lightroom.adobe.com/shares/4975d1e4083610438ad153b81677f1a3
https://lightroom.adobe.com/shares/18d88f767cf3df4e9795fb378bdb9048

卡拉克西英杰 发表于 昨天 13:31

小手一抖,沙发到手!
页: [1]
查看完整版本: 长安启源公布天枢领航数据,累计避险超过386万次