Security fix for the ALT Linux 10 package samba version 4.12.9-alt1

Oct. 29, 2020 Evgeny Sinelnikov 4.12.9-alt1 - Update to latest stable security release of the Samba 4.12 - Security fixes: + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify + CVE-2020-14323: Unprivileged user can crash winbind + CVE-2020-14383: An authenticated user can...

Security fix for the ALT Linux 10 package glpi version 9.5.2-alt1

Oct. 26, 2020 Pavel Zilke 9.5.2-alt1 - New version 9.5.2 - Security fixes: + CVE-2020-15176 : SQL injection with a query parameter of user form + CVE-2020-15175 : Removal of .htaccess file in the files folder via a plugin endpoint + CVE-2020-15217 : Leakage issue with knowledge base +...

Security fix for the ALT Linux 9 package glpi version 9.5.2-alt1

Oct. 26, 2020 Pavel Zilke 9.5.2-alt1 - New version 9.5.2 - Security fixes: + CVE-2020-15176 : SQL injection with a query parameter of user form + CVE-2020-15175 : Removal of .htaccess file in the files folder via a plugin endpoint + CVE-2020-15217 : Leakage issue with knowledge base +...

Security fix for the ALT Linux 9 package ntfs-3g version 2:2017.3.23-alt3

Oct. 23, 2020 Valery Inozemtsev 2:2017.3.23-alt3 - add upstream fix for CVE-2019-9755...

Security fix for the ALT Linux 10 package thunderbird version 78.4.0-alt1

Oct. 22, 2020 Andrey Cherepanov 78.4.0-alt1 - New version 78.4.0. - Fixes: + CVE-2020-15969 Use-after-free in usersctp + CVE-2020-15683 Memory safety bugs fixed in Thunderbird 78.4...

Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1

1.42.027-alt1 built Oct. 21, 2020 Alexey Shabalin in task 260176 Oct. 19, 2020 Alexey Shabalin - snapshot of 1.4 branch 0c66d2335a9dd13006c83ed64ae565a4a3cb7f0c - Update jQuery to address three CVE Vulnerabilities - Fixes: + CVE-2020-11022 + CVE-2020-11023 + CVE-2019-11358...

Security fix for the ALT Linux 10 package firefox-esr version 78.4.0-alt1

Oct. 20, 2020 Andrey Cherepanov 78.4.0-alt1 - New version 78.4.0. - Fixes: + CVE-2020-15969 Use-after-free in usersctp + CVE-2020-15683 Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4...

RHEL 7 : kernel-alt (RHSA-2020:4279)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4279 advisory. The kernel-alt packages provide the Linux kernel version 4.x. Security Fixes: kernel: net: bluetooth: type confusion while processing AMP...

Important: Red Hat Security Advisory: kernel-alt security update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Security fix for the ALT Linux 9 package mediawiki version 1.35.0-alt1

1.35.0-alt1 built Oct. 14, 2020 Vitaly Lipatov in task 259569 Oct. 9, 2020 Vitaly Lipatov - new version 1.35.0 LTS with rpmrb script - CVE-2020-25813, CVE-2020-25812, CVE-2020-25815 - CVE-2020-17367, CVE-2020-17368, CVE-2020-25814 - CVE-2020-25828, CVE-2020-25869, CVE-2020-25827...

Security fix for the ALT Linux 8 package php7 version 7.2.34-alt1

7.2.34-alt1 built Oct. 13, 2020 Anton Farygin in task 259367 Oct. 7, 2020 Anton Farygin - 7.2.34 Fixes: CVE-2020-7069, CVE-2020-7070...

Security fix for the ALT Linux 9 package php7 version 7.3.23-alt1

7.3.23-alt1 built Oct. 10, 2020 Anton Farygin in task 259362 Oct. 7, 2020 Anton Farygin - 7.3.23 Fixes: CVE-2020-7069, CVE-2020-7070...

Security fix for the ALT Linux 9 package systemd version 1:243.9-alt1

1:243.9-alt1 built Oct. 6, 2020 Alexey Shabalin in task 258476 Oct. 3, 2020 Alexey Shabalin - 243.9 Fixes: CVE-2020-13776 - kernelinstalldir path /usr/lib/kernel/install.d - /lib/kernel/install.d - install kernel-install script to /sbin - move systemd-boot and bootctl utils to systemd-boot-efi...

Security fix for the ALT Linux 9 package wireshark version 3.2.7-alt1

3.2.7-alt1 built Oct. 5, 2020 Anton Farygin in task 258926 Sept. 30, 2020 Anton Farygin - 3.2.7 - fixes: BLIP dissector crash. CVE-2020-25866 TCP dissector crash. CVE-2020-25862 MIME Multipart dissector crash. CVE-2020-25863...

Security fix for the ALT Linux 9 package libetpan version 1.9.4-alt2

1.9.4-alt2 built Oct. 5, 2020 Aleksei Nikiforov in task 259053 Oct. 1, 2020 Aleksei Nikiforov - Applied security fixes from upstream Fixes: CVE-2020-15953...

Security fix for the ALT Linux 10 package libetpan version 1.9.4-alt2

Oct. 1, 2020 Aleksei Nikiforov 1.9.4-alt2 - Applied security fixes from upstream Fixes: CVE-2020-15953...

Security fix for the ALT Linux 10 package wireshark version 3.2.7-alt1

Sept. 30, 2020 Anton Farygin 3.2.7-alt1 - 3.2.7 - fixes: BLIP dissector crash. CVE-2020-25866 TCP dissector crash. CVE-2020-25862 MIME Multipart dissector crash. CVE-2020-25863...

Security fix for the ALT Linux 10 package thunderbird version 78.3.0-alt1

Sept. 25, 2020 Andrey Cherepanov 78.3.0-alt1 - New version 78.3.0. - Fixes: + CVE-2020-15677 Download origin spoofing via redirect + CVE-2020-15676 XSS when pasting attacker-controlled data into a contenteditable element + CVE-2020-15678 When recursing through layers while scrolling, an iterator...

Security fix for the ALT Linux 10 package firefox-esr version 78.3.0-alt1

Sept. 23, 2020 Andrey Cherepanov 78.3.0-alt1 - New release 78.3.0. - Fixes: + CVE-2020-15677 Download origin spoofing via redirect + CVE-2020-15676 XSS when pasting attacker-controlled data into a contenteditable element + CVE-2020-15678 When recursing through layers while scrolling, an iterator...

Information Disclosure

firefox is vulnerable to information disclosure. The HTTP Alternative Services header Alt-Svc can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded...