Mozilla Firefox Security Advisory (MFSA2015-44) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Security fix for the ALT Linux 10 package thunderbird version 91.3.0-alt1

91.3.0-alt1 built Nov. 10, 2021 Andrey Cherepanov in task 288818 Nov. 3, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-38503 iframe sandbox rules did not apply to XSLT stylesheets + CVE-2021-38504 Use-after-free in file picker dialog + CVE-2021-38505 Windows 10 Cloud Clipboar...

Security fix for the ALT Linux 10 package postgresql15 version 14.1-alt1

Nov. 10, 2021 Alexei Takaseev 14.1-alt1 - 14.1 Fixes CVE-2021-23214, CVE-2021-23222...

Security fix for the ALT Linux 10 package postgresql15-1C version 13.3-alt5

Nov. 10, 2021 Alexei Takaseev 13.3-alt5 - Fixes CVE-2021-23214, CVE-2021-23222...

Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1

91.3.0-alt1 built Nov. 9, 2021 Andrey Cherepanov in task 288753 Nov. 2, 2021 Andrey Cherepanov - New ESR version. - Security fixes: + CVE-2021-38503 iframe sandbox rules did not apply to XSLT stylesheets + CVE-2021-38504 Use-after-free in file picker dialog + CVE-2021-38505 Windows 10 Cloud...

Mozilla Firefox Security Advisory (MFSA2016-70) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Security fix for the ALT Linux 10 package bind version 9.11.36-alt1

9.11.36-alt1 built Nov. 8, 2021 Stanislav Levin in task 288327 Oct. 28, 2021 Stanislav Levin - 9.11.32 - 9.11.36 fixes: CVE-2021-25219...

Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.13.8-alt1_1jpp11

0:11.0.13.8-alt11jpp11 built Nov. 8, 2021 Andrey Cherepanov in task 287838 Oct. 23, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-35550 Update the default enabled cipher suites preference + CVE-2021-35565 com.sun.net.HttpsServer spins on TLS session close + CVE-2021-35556...

Security fix for the ALT Linux 9 package mailman version 5:2.1.35-alt1

Nov. 6, 2021 Konstantin Lepikhov 5:2.1.35-alt1 - Updated to 2.1.35: - Security fixes: + CVE-2021-42096: Attack to obtain the list admin password. + CVE-2021-42097: A CSRF attack via the user options page could allow takeover of a users...

Security fix for the ALT Linux 10 package golang version 1.17.3-alt1

Nov. 4, 2021 Alexey Shabalin 1.17.3-alt1 - New version 1.17.3 Fixes: CVE-2021-41771, CVE-2021-41772...

Security fix for the ALT Linux 10 package thunderbird version 91.2.1-alt1

91.2.1-alt1 built Nov. 2, 2021 Anton Farygin in task 281644 91.2.1-alt1 built Oct. 26, 2021 Andrey Cherepanov in task 287811 Oct. 22, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-38502 Downgrade attack on SMTP STARTTLS connections + CVE-2021-38496 Use-after-free in MessageTa...

Security fix for the ALT Linux 10 package firefox-esr version 91.2.0-alt1

91.2.0-alt1 built Nov. 2, 2021 Anton Farygin in task 281644 91.2.0-alt1 built Oct. 12, 2021 Andrey Cherepanov in task 286492 Oct. 5, 2021 Andrey Cherepanov - New ESR version. - Security fixes: + CVE-2021-38496 Use-after-free in MessageTask + CVE-2021-38497 Validation message could have been...

Security fix for the ALT Linux 10 package php8.0 version 8.0.12-alt1

8.0.12-alt1 built Nov. 2, 2021 Anton Farygin in task 287171 Oct. 28, 2021 Anton Farygin - 8.0.12 Fixes: CVE-2021-21703...

Security fix for the ALT Linux 9 package freerdp version 2.4.1-alt1

2.4.1-alt1 built Nov. 1, 2021 Andrey Cherepanov in task 287815 Oct. 21, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-41159 Improper client input validation for gateway connections allows to overwrite memory + CVE-2021-41160 Improper region checks in all clients allow out of...

Security fix for the ALT Linux 10 package samba version 4.14.9-alt1

Nov. 1, 2021 Evgeny Sinelnikov 4.14.9-alt1 - Update to latest security release of Samba 4.14 - Backport bronze bit fixes, tests, and selftest improvements. Provide a fix for MS in Samba SECURITY 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal Fixes:...

Security fix for the ALT Linux 9 package php7 version 7.3.32-alt1

7.3.32-alt1 built Oct. 30, 2021 Anton Farygin in task 285278 Oct. 28, 2021 Anton Farygin - 7.3.32 Fixes: CVE-2021-21703...

Security fix for the ALT Linux 10 package php8.1 version 8.0.12-alt1

Oct. 28, 2021 Anton Farygin 8.0.12-alt1 - 8.0.12 Fixes: CVE-2021-21703...

Security fix for the ALT Linux 10 package php8.2 version 8.0.12-alt1

Oct. 28, 2021 Anton Farygin 8.0.12-alt1 - 8.0.12 Fixes: CVE-2021-21703...

UBUNTU-CVE-2021-41182

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now...

WordPress Logo Showcase with Slick Slider plugin <= 1.2.4 - Arbitrary Media Title/Description/Alt Text/URL Update vulnerability

Arbitrary Media Title/Description/Alt Text/URL Update vulnerability discovered by apple502j in WordPress Logo Showcase with Slick Slider plugin versions = 1.2.4. Solution Update the WordPress Logo Showcase with Slick Slider plugin to the latest available version at least 1.2.5...