Security fix for the ALT Linux 10 package gnutls30 version 3.6.7-alt1

March 28, 2019 Mikhail Efremov 3.6.7-alt1 - Updated to 3.6.7 fixes: CVE-2019-3836, CVE-2019-3829. - Don't make check in parallel mode...

Security fix for the ALT Linux 10 package clamav version 0.101.2-alt1

March 28, 2019 Sergey Y. Afonin 0.101.2-alt1 - 0.101.2 + CVE-2019-1787, CVE-2019-1789, CVE-2019-1788 - 0.101.1 and prior + CVE-2019-1786, CVE-2019-1785, CVE-2019-1798 - 0.101.1 and 0.101.0 only - switched to libpcre2...

Security fix for the ALT Linux 10 package thunderbird version 60.6.1-alt1

March 26, 2019 Andrey Cherepanov 60.6.1-alt1 - New version 60.6.1. - Fixes: + CVE-2019-9810 IonMonkey MArraySlice has incorrect alias information + CVE-2019-9813 Ionmonkey type confusion with proto mutations...

Security fix for the ALT Linux 10 package thunderbird version 60.6.0-alt1

March 21, 2019 Andrey Cherepanov 60.6.0-alt1 - New version 60.6.0. - Fixes: + CVE-2019-9790 Use-after-free when removing in-use DOM elements + CVE-2019-9791 Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey + CVE-2019-9792 IonMonkey leaks...

Security fix for the ALT Linux 10 package firefox-esr version 60.6.0-alt1

March 21, 2019 Andrey Cherepanov 60.6.0-alt1 - New ESR version 60.6.0. - Fixed: + CVE-2019-9790 Use-after-free when removing in-use DOM elements + CVE-2019-9791 Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey + CVE-2019-9792 IonMonkey leaks...

Security fix for the ALT Linux 10 package samba version 4.9.5-alt1

March 15, 2019 Evgeny Sinelnikov 4.9.5-alt1 - Update to latest release with security ldb fixes CVE-2019-3824 - Prepare to replace runtime files from /var/run to /run directory...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 2.1.9-alt1

March 13, 2019 Vitaly Lipatov 2.1.9-alt1 - new version 2.1.9 with rpmrb script - includes .NET Core 2.1.9, ASP.NET Core 2.1.9 and .NET Core SDK 2.1.505 - CVE-2019-0657: .NET Core NuGet Tampering Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 2.1.9-alt1

March 13, 2019 Vitaly Lipatov 2.1.9-alt1 - new version 2.1.9 with rpmrb script - includes .NET Core 2.1.9, ASP.NET Core 2.1.9 and .NET Core SDK 2.1.505 - CVE-2019-0657: .NET Core NuGet Tampering Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 2.1.9-alt1

March 13, 2019 Vitaly Lipatov 2.1.9-alt1 - new version 2.1.9 with rpmrb script - includes .NET Core 2.1.9, ASP.NET Core 2.1.9 and .NET Core SDK 2.1.505 - CVE-2019-0657: .NET Core NuGet Tampering Vulnerability...

Security fix for the ALT Linux 10 package node version 10.15.3-alt1

March 9, 2019 Vitaly Lipatov 10.15.3-alt1 - new version 10.15.3 with rpmrb script - 2018-03-05, Version 10.15.3 'Dubnium' LTS, @BethGriggs - CVE-2019-5737 - fix rpm's cflags using, add -latomic on mipsel - use external gyp...

Security fix for the ALT Linux 10 package bind version 9.11.5.P4-alt1

Feb. 22, 2019 Stanislav Levin 9.11.5.P4-alt1 - 9.11.5 - 9.11.5.P4 fixes: CVE-2018-5744, CVE-2018-5745, CVE-2019-6465...

Security fix for the ALT Linux 10 package firefox-esr version 60.5.1-alt1

Feb. 15, 2019 Andrey Cherepanov 60.5.1-alt1 - New ESR version 60.5.1. - Fixed: + CVE-2018-18356 Use-after-free in Skia + CVE-2019-5785 Integer overflow in Skia + CVE-2018-18335 Buffer overflow in Skia with accelerated Canvas 2D...

Security fix for the ALT Linux 10 package thunderbird version 60.5.1-alt1

Feb. 15, 2019 Andrey Cherepanov 60.5.1-alt1 - New version 60.5.1. - Fixes: + CVE-2018-18356 Use-after-free in Skia + CVE-2019-5785 Integer overflow in Skia + CVE-2018-18335 Buffer overflow in Skia with accelerated Canvas 2D + CVE-2018-18509 S/MIME signature spoofing...

Security fix for the ALT Linux 10 package runc version 1.0.0-alt7.git0a012df

Feb. 13, 2019 Alexey Shabalin 1.0.0-alt7.git0a012df - snapshot of master branch. - Fixes CVE-2019-5736...

Security fix for the ALT Linux 10 package firefox-esr version 60.5.0-alt1

Feb. 1, 2019 Andrey Cherepanov 60.5.0-alt1 - New ESR version 60.5.0. - Fixed: + CVE-2018-18500 Use-after-free parsing HTML5 stream + CVE-2018-18505 Privilege escalation through IPC channel messages + CVE-2018-18501 Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5...

Security fix for the ALT Linux 10 package python3 version 3.6.8-alt1

Jan. 29, 2019 Aleksei Nikiforov 3.6.8-alt1 - Updated to upstream version 3.6.8 - Removed dependency on rpm-build-python3 from python3 package Closes: 35992 - Applied security fix Fixes: CVE-2019-5010...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.38-alt1

Jan. 25, 2019 Anton Farygin 1:2.4.38-alt1 - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow request bodies. CVE-2018-17189...

Security fix for the ALT Linux 10 package php8.0 version Jan.

Jan. 15, 2019 Anton Farygin 7.2.14-alt1 - 7.2.14 fixes: CVE-2018-19935 - removed the .a archive from php7-mysqlnd package closes: 34521 - E2K: worked around the lack of gcc5's builtins in lcc-1.23 closes: 35856...

Security fix for the ALT Linux 10 package samba version 4.9.4-alt1

Dec. 20, 2018 Evgeny Sinelnikov 4.9.4-alt1 - Update to first winter security release - Security fixes regressions: + CVE-2018-16853 Do not segfault if client is not set + CVE-2018-14629 Fix CNAME loop prevention using counter regression...

Security fix for the ALT Linux 10 package firefox-esr version 60.4.0-alt1

Dec. 11, 2018 Andrey Cherepanov 60.4.0-alt1 - New ESR version 60.4.0 - Fixed: + CVE-2018-17466 Buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11 + CVE-2018-18492 Use-after-free with select element + CVE-2018-18493 Buffer overflow in accelerated 2D canvas with Skia +...