乌克兰称能源基础设施持续遭袭 多地停电

yun2026

乌克兰称能源基础设施持续遭袭 多地停电

ddev：归档解包过程对符号链接的检查与落盘不一致

11月7日公开的漏洞记录CVE-2026-108262涉及ddev。这个本地开发环境工具支持导入归档。程序检查链接时先将目标映射到解包目录内，真正创建链接时却保留了原来的绝对位置。两步处理所用路径不一致，使归档内后续文件有机会写到预定目录之外。公告将相关问题定位在归档解包环节。版本清单标出的受影响范围包括不低于1.25.2且低于1.25.4。

这条记录给出的CVSS 3.1基础评分为6.5分，分级为中危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为无、高、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4ODM4NTE3Mg==.html
https://v.youku.com/v_show/id_XNjU4ODM4NjYwNA==.html
https://v.youku.com/v_show/id_XNjU4ODM4MzUwMA==.html
https://v.youku.com/v_show/id_XNjU3ODY5MjkxNg==.html
https://v.youku.com/v_show/id_XNjU3ODY5MDMzNg==.html
https://v.youku.com/v_show/id_XNjU4ODM4NDkxNg==.html
https://v.youku.com/v_show/id_XNjU3ODY5MDI5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM4MzI2NA==.html
https://v.youku.com/v_show/id_XNjU4ODM4MzI1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODM3NTg0OA==.html
https://v.youku.com/v_show/id_XNjU3ODY4NzA4OA==.html
https://v.youku.com/v_show/id_XNjU3ODY4NTU4MA==.html
https://v.youku.com/v_show/id_XNjU4ODM3NzA2NA==.html
https://v.youku.com/v_show/id_XNjU4ODM3NDE2NA==.html
https://v.youku.com/v_show/id_XNjU4ODM4MDAyMA==.html
https://v.youku.com/v_show/id_XNjU4ODM3NzAzNg==.html
https://v.youku.com/v_show/id_XNjU4ODM3Njk0MA==.html
https://v.youku.com/v_show/id_XNjU4ODM3NDAwOA==.html
https://v.youku.com/v_show/id_XNjU3ODY4ODMyMA==.html
https://v.youku.com/v_show/id_XNjU3ODY4ODE5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODY4NTA4OA==.html
https://v.youku.com/v_show/id_XNjU4ODM2Nzg2MA==.html
https://v.youku.com/v_show/id_XNjU3ODY4ODA5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODY4MzcwNA==.html
https://v.youku.com/v_show/id_XNjU4ODM2MTU5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODY4MzY5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM2NzYxMg==.html
https://v.youku.com/v_show/id_XNjU4ODM3MDY2NA==.html
https://v.youku.com/v_show/id_XNjU4ODM3MjEyOA==.html
https://v.youku.com/v_show/id_XNjU4ODM3MjA3Mg==.html
https://v.youku.com/v_show/id_XNjU4ODM2NzM1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM2NzI4MA==.html
https://v.youku.com/v_show/id_XNjU3ODY4MDc0OA==.html
https://v.youku.com/v_show/id_XNjU4ODM2MTE0OA==.html
https://v.youku.com/v_show/id_XNjU4ODM2MjYzMg==.html
https://v.youku.com/v_show/id_XNjU3ODY4MDUzMg==.html
https://v.youku.com/v_show/id_XNjU4ODM2MDk2MA==.html
https://v.youku.com/v_show/id_XNjU3ODY4MTg0NA==.html
https://v.youku.com/v_show/id_XNjU4ODM2MDkwNA==.html
https://v.youku.com/v_show/id_XNjU3ODY3NTc5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM1OTQ4NA==.html
https://v.youku.com/v_show/id_XNjU4ODM1OTQ1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODY3NDI3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODY3NzA5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM1OTM4MA==.html
https://v.youku.com/v_show/id_XNjU4ODM1NzgyOA==.html
https://v.youku.com/v_show/id_XNjU3ODY3NTcyMA==.html
https://v.youku.com/v_show/id_XNjU4ODM1NjU3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODY3NzAxMg==.html
https://v.youku.com/v_show/id_XNjU4ODM1MTkyNA==.html