Security fix for the ALT Linux 10 package python3-module-django version 2.2.12-alt1

April 12, 2020 Alexey Shabalin 2.2.12-alt1 - 2.2.12 - Fixes for the following security vulnerabilities: + CVE-2019-19118 Privilege escalation in the Django admin. + CVE-2019-19844 Potential account hijack via password reset form + CVE-2020-7471 Potential SQL injection via StringAggdelimiter +...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.12-alt1

April 12, 2020 Alexey Shabalin 2.2.12-alt1 - 2.2.12 - Fixes for the following security vulnerabilities: + CVE-2019-19118 Privilege escalation in the Django admin. + CVE-2019-19844 Potential account hijack via password reset form + CVE-2020-7471 Potential SQL injection via StringAggdelimiter +...

Security fix for the ALT Linux 8 package apache2 version 1:2.4.43-alt1

1:2.4.43-alt1 built April 9, 2020 Anton Farygin in task 249456 April 6, 2020 Anton Farygin - 2.4.43 Fixes: CVE-2020-1927, CVE-2020-1934...

Security fix for the ALT Linux 10 package thunderbird version 68.7.0-alt1

April 8, 2020 Andrey Cherepanov 68.7.0-alt1 - New version 68.7.0. - Fixes: + CVE-2020-6819 Use-after-free while running the nsDocShell destructor + CVE-2020-6820 Use-after-free when handling a ReadableStream + CVE-2020-6821 Uninitialized memory could be read when using the WebGL copyTexSubImage...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.43-alt1

1:2.4.43-alt1 built April 8, 2020 Anton Farygin in task 249454 April 6, 2020 Anton Farygin - 2.4.43 Fixes: CVE-2020-1927, CVE-2020-1934...

Security fix for the ALT Linux 10 package firefox-esr version 68.7.0-alt1

April 6, 2020 Andrey Cherepanov 68.7.0-alt1 - New ESR version 68.7.0. - Fixes: + CVE-2020-6828 Preference overwrite via crafted Intent from malicious Android application + CVE-2020-6827 Custom Tabs in Firefox for Android could have the URI spoofed + CVE-2020-6821 Uninitialized memory could be rea...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.43-alt1

April 6, 2020 Anton Farygin 1:2.4.43-alt1 - 2.4.43 Fixes: CVE-2020-1927, CVE-2020-1934...

Security fix for the ALT Linux 10 package firefox-esr version 68.6.1-alt1

April 4, 2020 Andrey Cherepanov 68.6.1-alt1 - New ESR version 68.6.1. - Fixed: + CVE-2020-6819 Use-after-free while running the nsDocShell destructor + CVE-2020-6820 Use-after-free when handling a ReadableStream...

Security fix for the ALT Linux 8 package php7 version 7.2.29-alt1

7.2.29-alt1 built March 27, 2020 Anton Farygin in task 248389 March 24, 2020 Anton Farygin - 7.2.29 Fixes: CVE-2020-7064, CVE-2020-7066...

Security fix for the ALT Linux 9 package php7 version 7.3.16-alt1

7.3.16-alt1 built March 26, 2020 Anton Farygin in task 248404 March 24, 2020 Anton Farygin - 7.3.16 Fixes: CVE-2020-7064, CVE-2020-7065, CVE-2020-7066...

Security fix for the ALT Linux 10 package php8.1 version 7.3.16-alt1

March 24, 2020 Anton Farygin 7.3.16-alt1 - 7.3.16 Fixes: CVE-2020-7064, CVE-2020-7065, CVE-2020-7066...

Security fix for the ALT Linux 10 package php8.0 version 7.3.16-alt1

March 24, 2020 Anton Farygin 7.3.16-alt1 - 7.3.16 Fixes: CVE-2020-7064, CVE-2020-7065, CVE-2020-7066...

Security fix for the ALT Linux 9 package wireshark version 3.0.9-alt1

3.0.9-alt1 built March 24, 2020 Anton Farygin in task 247751 March 12, 2020 Anton Farygin - 3.0.9 - fixes: LTE RRC dissector could leak memory. CVE-2020-9431 WiMax DLMAP dissector could crash. CVE-2020-9430...

Security fix for the ALT Linux 10 package git version 2.25.3-alt1

March 18, 2020 Dmitry V. Levin 2.25.3-alt1 - 2.25.2 - 2.25.3 fixes: CVE-2020-5260...

Security fix for the ALT Linux 9 package squid version 4.10-alt1

4.10-alt1 built March 16, 2020 Alexey Shabalin in task 247850 --- March 14, 2020 Alexey Shabalin - Updated to 4.10. - Fixes: + CVE-2019-12526 Heap Overflow issue in URN processing. + CVE-2019-12523 Multiple issues in URI processing. + CVE-2019-18676 Multiple issues in URI processing. +...

Security fix for the ALT Linux 10 package thunderbird version 68.6.0-alt1

March 14, 2020 Andrey Cherepanov 68.6.0-alt1 - New version 68.6.0. - Fixed: + CVE-2020-6805 Use-after-free when removing data about origins + CVE-2020-6806 BodyStream::OnInputStreamReady was missing protections against state confusion + CVE-2020-6807 Use-after-free in cubeb during stream...

Security fix for the ALT Linux 8 package libssh version 0.8.8-alt1

0.8.8-alt1 built March 13, 2020 Sergey V Turchin in task 247316 March 4, 2020 Sergey V Turchin - new version Fixes: CVE-2019-14889...

Security fix for the ALT Linux 9 package ppp version 2.4.7-alt6

2.4.7-alt6 built March 13, 2020 Alexey Shabalin in task 247576 --- March 10, 2020 Alexey Shabalin - Fixed: CVE-2020-8597...

Security fix for the ALT Linux 10 package wireshark version 3.0.9-alt1

March 12, 2020 Anton Farygin 3.0.9-alt1 - 3.0.9 - fixes: LTE RRC dissector could leak memory. CVE-2020-9431 WiMax DLMAP dissector could crash. CVE-2020-9430...

Security fix for the ALT Linux 10 package firefox-esr version 68.6.0-alt1

March 10, 2020 Andrey Cherepanov 68.6.0-alt1 - New ESR version 68.6.0. - Fix license tag according to SPDX. - Fixed: + CVE-2020-6805 Use-after-free when removing data about origins + CVE-2020-6806 BodyStream::OnInputStreamReady was missing protections against state confusion + CVE-2020-6807...