Security fix for the ALT Linux 10 package bind version 9.11.5.P4-alt1

Feb. 22, 2019 Stanislav Levin 9.11.5.P4-alt1 - 9.11.5 - 9.11.5.P4 fixes: CVE-2018-5744, CVE-2018-5745, CVE-2019-6465...

Security fix for the ALT Linux 8 package runc version 1.0.0-alt7.git0a012df

1.0.0-alt7.git0a012df built Feb. 20, 2019 Alexey Shabalin in task 221967 Feb. 13, 2019 Alexey Shabalin - snapshot of master branch. - Fixes CVE-2019-5736...

Security fix for the ALT Linux 9 package systemd version 1:241-alt2

Feb. 19, 2019 Alexey Shabalin 1:241-alt2 - Fixes for the following security vulnerabilities: + CVE-2019-6454: systemd PID1 crash with specially crafted D-Bus message...

Security fix for the ALT Linux 10 package firefox-esr version 60.5.1-alt1

Feb. 15, 2019 Andrey Cherepanov 60.5.1-alt1 - New ESR version 60.5.1. - Fixed: + CVE-2018-18356 Use-after-free in Skia + CVE-2019-5785 Integer overflow in Skia + CVE-2018-18335 Buffer overflow in Skia with accelerated Canvas 2D...

Security fix for the ALT Linux 10 package thunderbird version 60.5.1-alt1

Feb. 15, 2019 Andrey Cherepanov 60.5.1-alt1 - New version 60.5.1. - Fixes: + CVE-2018-18356 Use-after-free in Skia + CVE-2019-5785 Integer overflow in Skia + CVE-2018-18335 Buffer overflow in Skia with accelerated Canvas 2D + CVE-2018-18509 S/MIME signature spoofing...

Security fix for the ALT Linux 8 package kf5-kauth version 5.49.0-alt2

5.49.0-alt2 built Feb. 14, 2019 Sergey V Turchin in task 221227 Feb. 11, 2019 Sergey V Turchin - security fixes: CVE-2019-7443...

Security fix for the ALT Linux 10 package runc version 1.0.0-alt7.git0a012df

Feb. 13, 2019 Alexey Shabalin 1.0.0-alt7.git0a012df - snapshot of master branch. - Fixes CVE-2019-5736...

Security fix for the ALT Linux 8 package curl version 7.64.0-alt1

7.64.0-alt1 built Feb. 8, 2019 Anton Farygin in task 220788 Feb. 6, 2019 Anton Farygin - 7.64.0 - fixes: CVE-2018-16890: NTLM type-2 out-of-bounds buffer read CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow CVE-2019-3823: SMTP end-of-response out-of-bounds read...

Security fix for the ALT Linux 10 package firefox-esr version 60.5.0-alt1

Feb. 1, 2019 Andrey Cherepanov 60.5.0-alt1 - New ESR version 60.5.0. - Fixed: + CVE-2018-18500 Use-after-free parsing HTML5 stream + CVE-2018-18505 Privilege escalation through IPC channel messages + CVE-2018-18501 Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5...

Security fix for the ALT Linux 10 package thunderbird version 60.5.0-alt1

Feb. 1, 2019 Andrey Cherepanov 60.5.0-alt1 - New version 60.5.0. - Fixes: + CVE-2018-18500 Use-after-free parsing HTML5 stream + CVE-2018-18505 Privilege escalation through IPC channel messages + CVE-2016-5824 DoS use-after-free via a crafted ics file + CVE-2018-18501 Memory safety bugs fixed in...

Security fix for the ALT Linux 10 package python3 version 3.6.8-alt1

Jan. 29, 2019 Aleksei Nikiforov 3.6.8-alt1 - Updated to upstream version 3.6.8 - Removed dependency on rpm-build-python3 from python3 package Closes: 35992 - Applied security fix Fixes: CVE-2019-5010...

Security fix for the ALT Linux 8 package apache2 version 1:2.4.38-alt1

1:2.4.38-alt1 built Jan. 28, 2019 Anton Farygin in task 219984 Jan. 25, 2019 Anton Farygin - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.38-alt1

Jan. 25, 2019 Anton Farygin 1:2.4.38-alt1 - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow request bodies. CVE-2018-17189...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.38-alt1

Jan. 25, 2019 Anton Farygin 1:2.4.38-alt1 - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow request bodies. CVE-2018-17189...

Security fix for the ALT Linux 10 package golang version 1.11.5-alt1

Jan. 24, 2019 Alexey Shabalin 1.11.5-alt1 - 1.11.5 - fixed CPU DoS vulnerability affecting P-521 and P-384 Fixes: CVE-2019-6486 - add ppc64le to goarches...

Security fix for the ALT Linux 8 package php7 version 7.2.14-alt1

7.2.14-alt1 built Jan. 23, 2019 Anton Farygin in task 219433 Jan. 15, 2019 Anton Farygin - 7.2.14 fixes: CVE-2018-19935 - removed the .a archive from php7-mysqlnd package closes: 34521 - E2K: worked around the lack of gcc5's builtins in lcc-1.23 closes: 35856...

Security fix for the ALT Linux 10 package php8.1 version Jan.

Jan. 15, 2019 Anton Farygin 7.2.14-alt1 - 7.2.14 fixes: CVE-2018-19935 - removed the .a archive from php7-mysqlnd package closes: 34521 - E2K: worked around the lack of gcc5's builtins in lcc-1.23 closes: 35856...

Security fix for the ALT Linux 10 package php8.0 version Jan.

Jan. 15, 2019 Anton Farygin 7.2.14-alt1 - 7.2.14 fixes: CVE-2018-19935 - removed the .a archive from php7-mysqlnd package closes: 34521 - E2K: worked around the lack of gcc5's builtins in lcc-1.23 closes: 35856...

Security fix for the ALT Linux 9 package polkit version 0.115-alt5

Jan. 9, 2019 Yuri N. Sedunov 0.115-alt5 - updated to 0.115-26-gc898fdf fixed CVE-2018-19788...

Security fix for the ALT Linux 9 package krb5 version 1.16.3-alt1

Jan. 8, 2019 Ivan A. Melnikov 1.16.3-alt1 - 1.16.3 CVE-2018-20217 - apply bootstrap and e2k tweaks mike@ closes: 32982 + introduce doc, ldap, selinux, verto knobs on by default + conditionally package bundled libverto + e2k: disable -Werror=pointer-arith,uninitialized lcc...