Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package mediawiki version 1.34.2-alt1

Aug. 1, 2020 Vitaly Lipatov 1.34.2-alt1 - new version 1.34.2 with rpmrb script - CVE-2020-15005...

Security fix for the ALT Linux 8 package clamav version 0.102.4-alt1

0.102.4-alt1 built July 30, 2020 Sergey Y. Afonin in task 255498 July 28, 2020 Sergey Y. Afonin - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...

Security fix for the ALT Linux 9 package clamav version 0.102.4-alt1

0.102.4-alt1 built July 29, 2020 Sergey Y. Afonin in task 255486 July 28, 2020 Sergey Y. Afonin - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...

Security fix for the ALT Linux 10 package clamav version 0.102.4-alt1

July 28, 2020 Sergey Y. Afonin 0.102.4-alt1 - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...

Security fix for the ALT Linux 10 package firefox-esr version 78.1.0-alt1

July 28, 2020 Andrey Cherepanov 78.1.0-alt1 - New release 78.1.0. - Fixes: + CVE-2020-15652 Potential leak of redirect targets when loading scripts in a worker + CVE-2020-6514 WebRTC data channel leaks internal address to peer + CVE-2020-15655 Extension APIs could be used to bypass Same-Origin...

Security fix for the ALT Linux 9 package golang version 1.14.6-alt1

1.14.6-alt1 built July 27, 2020 Alexey Shabalin in task 255353 July 23, 2020 Alexey Shabalin - New version 1.14.6. Fixes: CVE-2020-15586, CVE-2020-14039...

Security fix for the ALT Linux 10 package kubernetes version 1.18.6-alt1

July 24, 2020 Mikhail Gordeev 1.18.6-alt1 - 1.18.6 - Fixes: CVE-2020-8559...

Security fix for the ALT Linux 9 package freerdp version 2.2.0-alt1

2.2.0-alt1 built July 23, 2020 Andrey Cherepanov in task 255257 July 21, 2020 Andrey Cherepanov - New version. - Fixes: + CVE-2020-15103 - Integer overflow due to missing input sanitation in rdpegfx channel...

Security fix for the ALT Linux 10 package golang version 1.14.6-alt1

July 23, 2020 Alexey Shabalin 1.14.6-alt1 - New version 1.14.6. Fixes: CVE-2020-15586, CVE-2020-14039...

Security fix for the ALT Linux 9 package libslirp version 4.3.0-alt1

4.3.0-alt1 built July 22, 2020 Alexey Shabalin in task 254589 --- May 8, 2020 Alexey Shabalin - new version 4.3.0 Fixes: CVE-2020-1983...

Security fix for the ALT Linux 9 package edk2-tools version 20200229-alt1

20200229-alt1 built July 22, 2020 Alexey Shabalin in task 254589 --- May 16, 2020 Alexey Shabalin - edk2-stable202002 Fixes: CVE-2019-14575, CVE-2019-14559, CVE-2019-14587, CVE-2019-14558, CVE-2019-14586, CVE-2019-14563...

Security fix for the ALT Linux 10 package thunderbird version 78.0-alt1

July 21, 2020 Andrey Cherepanov 78.0-alt1 - New version 78.0. - Fixes: + CVE-2020-12415 AppCache manifest poisoning due to url encoded character processing + CVE-2020-12416 Use-after-free in WebRTC VideoBroadcaster + CVE-2020-12417 Memory corruption due to missing sign-extension for ValueTags on...

PT-2020-6619 · Mbed Tls +1 · Mbed Tls +1

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions prior to 2.24.0 Description: An issue in the verification of X.509 certificates allows an attacker to impersonate a domain by getting a certificate for the corresponding IPv4 or IPv6 address, provided they control that IP...

PT-2020-14187 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.12.6 Envoy versions prior to 1.13.4 Envoy versions prior to 1.14.4 Envoy versions prior to 1.15.0 Description: The issue arises when validating TLS certificates, where Envoy incorrectly allows a wildcard DNS Subject...

Security fix for the ALT Linux 10 package thunderbird version 68.10.0-alt1

July 13, 2020 Andrey Cherepanov 68.10.0-alt1 - New version 68.10.0. - Fixes: + CVE-2020-12417 Memory corruption due to missing sign-extension for ValueTags on ARM64 + CVE-2020-12418 Information disclosure due to manipulated URL object + CVE-2020-12419 Use-after-free in nsGlobalWindowInner +...

Security fix for the ALT Linux 9 package json-c version 0.13.1-alt2

0.13.1-alt2 built July 8, 2020 Alexey Shabalin in task 254507 --- July 4, 2020 Alexey Shabalin - Update to json-c-0.13 branch ee9f67c81a3c2a44557f0cc16dc136c140293252 - Fixes: CVE-2020-12762...

Important: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...