Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 2.1.9-alt1

March 13, 2019 Vitaly Lipatov 2.1.9-alt1 - new version 2.1.9 with rpmrb script - includes .NET Core 2.1.9, ASP.NET Core 2.1.9 and .NET Core SDK 2.1.505 - CVE-2019-0657: .NET Core NuGet Tampering Vulnerability...

Security fix for the ALT Linux 10 package node version 10.15.3-alt1

March 9, 2019 Vitaly Lipatov 10.15.3-alt1 - new version 10.15.3 with rpmrb script - 2018-03-05, Version 10.15.3 'Dubnium' LTS, @BethGriggs - CVE-2019-5737 - fix rpm's cflags using, add -latomic on mipsel - use external gyp...

Security fix for the ALT Linux 10 package bind version 9.11.5.P4-alt1

Feb. 22, 2019 Stanislav Levin 9.11.5.P4-alt1 - 9.11.5 - 9.11.5.P4 fixes: CVE-2018-5744, CVE-2018-5745, CVE-2019-6465...

Security fix for the ALT Linux 10 package thunderbird version 60.5.1-alt1

Feb. 15, 2019 Andrey Cherepanov 60.5.1-alt1 - New version 60.5.1. - Fixes: + CVE-2018-18356 Use-after-free in Skia + CVE-2019-5785 Integer overflow in Skia + CVE-2018-18335 Buffer overflow in Skia with accelerated Canvas 2D + CVE-2018-18509 S/MIME signature spoofing...

Security fix for the ALT Linux 10 package firefox-esr version 60.5.1-alt1

Feb. 15, 2019 Andrey Cherepanov 60.5.1-alt1 - New ESR version 60.5.1. - Fixed: + CVE-2018-18356 Use-after-free in Skia + CVE-2019-5785 Integer overflow in Skia + CVE-2018-18335 Buffer overflow in Skia with accelerated Canvas 2D...

Security fix for the ALT Linux 10 package runc version 1.0.0-alt7.git0a012df

Feb. 13, 2019 Alexey Shabalin 1.0.0-alt7.git0a012df - snapshot of master branch. - Fixes CVE-2019-5736...

Security fix for the ALT Linux 10 package firefox-esr version 60.5.0-alt1

Feb. 1, 2019 Andrey Cherepanov 60.5.0-alt1 - New ESR version 60.5.0. - Fixed: + CVE-2018-18500 Use-after-free parsing HTML5 stream + CVE-2018-18505 Privilege escalation through IPC channel messages + CVE-2018-18501 Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5...

Security fix for the ALT Linux 10 package python3 version 3.6.8-alt1

Jan. 29, 2019 Aleksei Nikiforov 3.6.8-alt1 - Updated to upstream version 3.6.8 - Removed dependency on rpm-build-python3 from python3 package Closes: 35992 - Applied security fix Fixes: CVE-2019-5010...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.38-alt1

Jan. 25, 2019 Anton Farygin 1:2.4.38-alt1 - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow request bodies. CVE-2018-17189...

Security fix for the ALT Linux 10 package php8.0 version Jan.

Jan. 15, 2019 Anton Farygin 7.2.14-alt1 - 7.2.14 fixes: CVE-2018-19935 - removed the .a archive from php7-mysqlnd package closes: 34521 - E2K: worked around the lack of gcc5's builtins in lcc-1.23 closes: 35856...

Security fix for the ALT Linux 10 package samba version 4.9.4-alt1

Dec. 20, 2018 Evgeny Sinelnikov 4.9.4-alt1 - Update to first winter security release - Security fixes regressions: + CVE-2018-16853 Do not segfault if client is not set + CVE-2018-14629 Fix CNAME loop prevention using counter regression...

Security fix for the ALT Linux 10 package firefox-esr version 60.4.0-alt1

Dec. 11, 2018 Andrey Cherepanov 60.4.0-alt1 - New ESR version 60.4.0 - Fixed: + CVE-2018-17466 Buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11 + CVE-2018-18492 Use-after-free with select element + CVE-2018-18493 Buffer overflow in accelerated 2D canvas with Skia +...

Security fix for the ALT Linux 10 package samba version 4.9.3-alt1

Nov. 28, 2018 Evgeny Sinelnikov 4.9.3-alt1 - Update to autumn security release - Revert Samba DC to build with internal Heimdal Kerberos implementation - Clean test module of thirdparty/iso8601 and subunit modules - Security fixes: + CVE-2018-14629 Unprivileged adding of CNAME record causing loop...

Security fix for the ALT Linux 10 package thunderbird version 60.3.0-alt1

Nov. 2, 2018 Andrey Cherepanov 60.3.0-alt1 - New version 60.3.0. - Fixes: + CVE-2018-12391 HTTP Live Stream audio data is accessible cross-origin + CVE-2018-12392 Crash with nested event loops + CVE-2018-12393 Integer overflow during Unicode conversion while loading JavaScript + CVE-2018-12389...

Security fix for the ALT Linux 10 package firefox-esr version 60.3.0-alt1

Oct. 23, 2018 Andrey Cherepanov 60.3.0-alt1 - New ESR version 60.3.0. - Fixed: + CVE-2018-12391 HTTP Live Stream audio data is accessible cross-origin + CVE-2018-12392 Crash with nested event loops + CVE-2018-12393 Integer overflow during Unicode conversion while loading JavaScript + CVE-2018-123...

Security fix for the ALT Linux 10 package clamav version 0.100.2-alt1

Oct. 17, 2018 Sergey Y. Afonin 0.100.2-alt1 - 0.100.2 CVE-2018-15378, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682...

Security fix for the ALT Linux 10 package git version 2.17.2-alt1

Sept. 27, 2018 Dmitry V. Levin 2.17.2-alt1 - 2.17.1 - 2.17.2 fixes: CVE-2018-17456...

Security fix for the ALT Linux 10 package firefox-esr version 60.2.1-alt1

Sept. 24, 2018 Andrey Cherepanov 60.2.1-alt1 - New ESR version 60.2.1. - Fixed: + CVE-2018-12385 Crash in TransportSecurityInfo due to cached data + CVE-2018-12383 Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords...

Security fix for the ALT Linux 10 package firefox-esr version 60.2.0-alt1

Sept. 10, 2018 Andrey Cherepanov 60.2.0-alt1 - New ESR version 60.2.0. - Fixed: + CVE-2018-12377 Use-after-free in refresh driver timers + CVE-2018-12378 Use-after-free in IndexedDB + CVE-2018-12379 Out-of-bounds write with malicious MAR file + CVE-2017-16541 Proxy bypass using automount and auto...

Security fix for the ALT Linux 10 package node version 8.11.4-alt1

Aug. 29, 2018 Vitaly Lipatov 8.11.4-alt1 - new version 8.11.4 with rpmrb script - 2018-08-15, Version 8.11.4 'Carbon' LTS, @rvagg - CVE-2018-0732, CVE-2018-12115 - build with external libnghttp2 - fix build with ICU = 61 add -DUUSINGICUNAMESPACE=1...