Security fix for the ALT Linux 9 package wireshark version 2.2.8-alt1

July 21, 2017 Anton Farygin 2.2.8-alt1 - new version: wnpa-sec-2017-13 WBMXL dissector infinite loop CVE-2017-7702, CVE-2017-11410 wnpa-sec-2017-28 openSAFETY dissector memory exhaustion CVE-2017-9350, CVE-2017-11411 wnpa-sec-2017-34 AMQP dissector crash CVE-2017-11408 wnpa-sec-2017-35 MQ dissect...

Security fix for the ALT Linux 7 package samba version 4.5.12-alt1.M70P.1

4.5.12-alt1.M70P.1 built July 13, 2017 Evgeny Sinelnikov in task 185331 July 12, 2017 Evgeny Sinelnikov - Update to summer security release - Security fixes: + CVE-2017-11103 Orpheus' Lyre KDC-REP service name validation Samba binaries built against MIT Kerberos are not vulnerable...

Security fix for the ALT Linux 7 package samba-DC version 4.5.12-alt1.M70P.1

4.5.12-alt1.M70P.1 built July 13, 2017 Evgeny Sinelnikov in task 185331 July 12, 2017 Evgeny Sinelnikov - Update to summer security release - Security fixes: + CVE-2017-11103 Orpheus' Lyre KDC-REP service name validation...

Security fix for the ALT Linux 8 package samba version July

July 12, 2017 Evgeny Sinelnikov 4.6.6-alt1 - Update to summer security release - Security fixes: + CVE-2017-11103 Orpheus' Lyre KDC-REP service name validation Samba binaries built against MIT Kerberos are not vulnerable...

Security fix for the ALT Linux 10 package samba version 4.6.6-alt1.S1

July 12, 2017 Evgeny Sinelnikov 4.6.6-alt1.S1 - Update to summer security release - Security fixes: + CVE-2017-11103 Orpheus' Lyre KDC-REP service name validation...

Security fix for the ALT Linux 8 package oniguruma version 6.4.0-alt1

July 12, 2017 Anton Farygin 6.4.0-alt1 - new version with security fixes CVE-2017-9224, CVE-2017-9225, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229...

Security fix for the ALT Linux 8 package ocaml version 4.04.2-alt1.M80P.1

4.04.2-alt1.M80P.1 built July 12, 2017 Anton Farygin in task 185295 --- July 4, 2017 Anton Farygin - new version with security fixes: + CVE-2017-9772 Local privilege escalation issue with ocaml binaries...

Security fix for the ALT Linux 8 package samba-DC version 4.6.6-alt1

July 12, 2017 Evgeny Sinelnikov 4.6.6-alt1 - Update to summer security release - Security fixes: + CVE-2017-11103 Orpheus' Lyre KDC-REP service name validation...

Security fix for the ALT Linux 9 package bind version 9.10.5.P3-alt1

July 11, 2017 Dmitry V. Levin 9.10.5.P3-alt1 - 9.10.4-P8 - 9.10.5-P3 fixes: CVE-2017-3140, CVE-2017-3141, CVE-2017-3142, CVE-2017-3143...

Security fix for the ALT Linux 8 package bind version 9.10.5.P3-alt1

July 11, 2017 Dmitry V. Levin 9.10.5.P3-alt1 - 9.10.4-P8 - 9.10.5-P3 fixes: CVE-2017-3140, CVE-2017-3141, CVE-2017-3142, CVE-2017-3143...

Security fix for the ALT Linux 9 package nginx version 1.12.1-alt1

July 11, 2017 Gleb Fotengauer-Malinovskiy 1.12.1-alt1 - Updated to 1.12.1 Fixes CVE-2017-7529...

Security fix for the ALT Linux 8 package tor version 0.3.0.9-alt1.M80P.1

0.3.0.9-alt1.M80P.1 built July 3, 2017 Anton Farygin in task 184902 June 30, 2017 Vladimir Didenko - new version Fixes: CVE-2017-0377...

Security fix for the ALT Linux 10 package thunderbird version 52.2.0-alt1

June 22, 2017 Andrey Cherepanov 52.2.0-alt1 - New version 52.2.0 - Security fixes: + CVE-2017-5472: Use-after-free using destroyed node when regenerating trees + CVE-2017-7749: Use-after-free during docshell reloading + CVE-2017-7750: Use-after-free with track elements + CVE-2017-7751:...

Security fix for the ALT Linux 10 package firefox-esr version 52.2.0-alt1

June 21, 2017 Andrey Cherepanov 52.2.0-alt1 - New ESR version 52.2.0 - Security fixes: + CVE-2017-5472: Use-after-free using destroyed node when regenerating trees + CVE-2017-7749: Use-after-free during docshell reloading + CVE-2017-7750: Use-after-free with track elements + CVE-2017-7751:...

Security fix for the ALT Linux 9 package openvpn version June

June 21, 2017 Nikolay A. Fetisov 2.4.3-alt1 - New version - Security fixes: + CVE-2017-7522 Post-authentication --x509-track remote DoS + CVE-2017-7521 Post-authentication remote-triggerable memory leaks + CVE-2017-7521 Potential post-authentication remote code execution on servers that use the...

Security fix for the ALT Linux 8 package curl version 7.54.1-alt1

June 14, 2017 Anton Farygin 7.54.1-alt1 - new version with security fixes: CVE-2017-9502: URL file scheme drive letter buffer overflow...

PT-2017-16516

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 54 ALT Linux affected versions not specified Description Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run...

Security fix for the ALT Linux 7 package wireshark version 2.2.7-alt1.M70P.1

2.2.7-alt1.M70P.1 built June 4, 2017 Anton Farygin in task 183813 June 4, 2017 Anton Farygin - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read...

Security fix for the ALT Linux 8 package sudo version 1:1.8.20p1-alt1

May 31, 2017 Evgeny Sinelnikov 1:1.8.20p1-alt1 - Update to spring security release Fixes: CVE-2017-1000367...

Security fix for the ALT Linux 7 package samba-DC version 4.5.10-alt1.M70P.1

4.5.10-alt1.M70P.1 built May 25, 2017 Evgeny Sinelnikov in task 183302 May 24, 2017 Evgeny Sinelnikov - Update to second spring security release - Fix longtime initialization bug in ldb proxy - Security fixes: + CVE-2017-7494 Remote code execution from a writable share...