Security fix for the ALT Linux 10 package php8.2 version 8.0.11-alt1

Sept. 23, 2021 Anton Farygin 8.0.11-alt1 - 8.0.11 Fixes: CVE-2021-21706...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.49-alt1

Sept. 23, 2021 Anton Farygin 1:2.4.49-alt1 - 2.4.48 - 2.4.49 Fixes: CVE-2021-40438, CVE-2021-39275, CVE-2021-36160, CVE-2021-34798, CVE-2021-33193...

Security fix for the ALT Linux 10 package php8.1 version 8.0.11-alt1

Sept. 23, 2021 Anton Farygin 8.0.11-alt1 - 8.0.11 Fixes: CVE-2021-21706...

Security fix for the ALT Linux 9 package glibc version 6:2.27-alt14

6:2.27-alt14 built Sept. 23, 2021 Dmitry V. Levin in task 285569 July 9, 2021 Dmitry V. Levin - Updated to glibc-2.27-174-g73886db621 from 2.27 branch fixes: CVE-2016-10228, CVE-2020-1751, CVE-2020-10029, CVE-2020-27618, CVE-2020-29562, CVE-2021-27645, CVE-2021-35942...

Security fix for the ALT Linux 9 package libssh version 0.9.6-alt1

0.9.6-alt1 built Sept. 17, 2021 Sergey V Turchin in task 284394 Sept. 2, 2021 Sergey V Turchin - new version - security fixes: CVE-2021-3634...

Security fix for the ALT Linux 9 package php7 version 7.3.30-alt1

7.3.30-alt1 built Sept. 16, 2021 Anton Farygin in task 284588 Sept. 3, 2021 Anton Farygin - 7.3.30 Fixes: CVE-2021-21704...

Security fix for the ALT Linux 10 package thunderbird version 91.1.0-alt1

91.1.0-alt1 built Sept. 15, 2021 Andrey Cherepanov in task 284957 Sept. 8, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-38492 Navigating to mk: URL scheme could load Internet Explorer + CVE-2021-38495 Memory safety bugs fixed in Thunderbird 91.1...

Security fix for the ALT Linux 8 package cyrus-imapd version 2.5.17-alt0.M80P.2

2.5.17-alt0.M80P.2 built Sept. 13, 2021 Sergey Y. Afonin in task 284610 Sept. 5, 2021 Sergey Y. Afonin - updated to latest cyrus-imapd-2.5 branch 6c804c1337cb; fixes: CVE-2021-33582...

Security fix for the ALT Linux 10 package golang version 1.17.1-alt1

Sept. 13, 2021 Alexey Shabalin 1.17.1-alt1 - New version 1.17.1. - Fixes: + CVE-2021-39293...

Security fix for the ALT Linux 9 package ntfs-3g version 2:2021.8.22-alt1

2:2021.8.22-alt1 built Sept. 10, 2021 Valery Inozemtsev in task 284295 Aug. 31, 2021 Valery Inozemtsev - 2021.8.22 Fixes: CVE-2021-33285, CVE-2021-35269, CVE-2021-35268, CVE-2021-33289, CVE-2021-33286, CVE-2021-35266, CVE-2021-33287, CVE-2021-35267, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253,...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.6-alt1

3.2.6-alt1 built Sept. 10, 2021 Alexey Shabalin in task 283535 Aug. 18, 2021 Alexey Shabalin - new version 3.2.6 - Rename dbbackend-psycopg2 to dbbackend-postgresql - Add dbbackend-oracle package - Fixes for the following security vulnerabilities: + CVE-2021-35042 Potential SQL injection via...

Security fix for the ALT Linux 9 package cyrus-imapd version 3.2.8-alt1

3.2.8-alt1 built Sept. 9, 2021 Sergey Y. Afonin in task 284606 Sept. 5, 2021 Sergey Y. Afonin - 3.2.8 fixes: CVE-2021-33582...

Security fix for the ALT Linux 10 package firefox-esr version 91.0.1-alt1

Sept. 4, 2021 Andrey Cherepanov 91.0.1-alt1 - New ESR version. - Security fixes: + CVE-2021-29991: Header Splitting possible with HTTP/3 Responses + CVE-2021-29981: Live range splitting could have led to conflicting assignments in the JIT + CVE-2021-29983: Firefox for Android could get stuck in...

Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1l-alt1

1.1.1l-alt1 built Sept. 2, 2021 Gleb Fotengauer-Malinovskiy in task 283690 Aug. 24, 2021 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1l fixes CVE-2021-3711, CVE-2021-3712...

Security fix for the ALT Linux 10 package node version 14.17.6-alt1

Sept. 1, 2021 Vitaly Lipatov 14.17.6-alt1 - new version 14.17.6 with rpmrb script - set npm = 6.14.15 - set openssl = 1.1.1l - CVE-2021-32803, CVE-2021-32804, CVE-2021-37701, CVE-2021-37712, CVE-2021-37713, CVE-2021-39134, CVE-2021-39135...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1l-alt1

1.1.1l-alt1 built Aug. 27, 2021 Gleb Fotengauer-Malinovskiy in task 283689 Aug. 24, 2021 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1l fixes CVE-2021-3711, CVE-2021-3712...

llvm-alt (>=0.3.2 <=0.5.0), llvm-rs (>=0.1.0 <=0.2.1) potentially affected by CVE-2020-35860 via cbox (=0.3.0)

cbox CARGO version =0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cbox and may be impacted: - llvm-alt =0.3.2, =0.1.0, =0.2.1 Source cves: CVE-2020-35860 Source advisory: OSV:GHSA-3VJM-36RR-7QRQ...

Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.12.7-alt1_0jpp10

Aug. 25, 2021 Andrey Cherepanov 0:11.0.12.7-alt10jpp10 - new version - security fixes: + CVE-2021-2341: Improve file transfers + CVE-2021-2369: Better jar file validation + CVE-2021-2388: Enhance compiler validation + CVE-2021-2161: Less ambiguous processing + CVE-2021-2163: Enhance opening JARs ...

CVE-2021-24564

The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the unfilteredhtml capability is disallowed...

Cross site scripting

The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the unfilteredhtml capability is disallowed...