Security fix for the ALT Linux 9 package cyrus-imapd version 3.0.12-alt1

3.0.12-alt1 built Nov. 20, 2019 Sergey Y. Afonin in task 240896 Nov. 16, 2019 Sergey Y. Afonin - 3.0.12 fixes: CVE-2019-18928 - logging of reached limits the patch from the https://github.com/cyrusimap/cyrus-imapd/issues/2913...

Security fix for the ALT Linux 10 package php8.1 version 7.3.11-alt1

Nov. 19, 2019 Anton Farygin 7.3.11-alt1 - 7.3.11 fixes: CVE-2019-11043...

Security fix for the ALT Linux 10 package php8.0 version 7.3.11-alt1

Nov. 19, 2019 Anton Farygin 7.3.11-alt1 - 7.3.11 fixes: CVE-2019-11043...

Security fix for the ALT Linux 8 package 389-ds-base version 1.3.9.1-alt1.gitb6ba77876

1.3.9.1-alt1.gitb6ba77876 built Nov. 15, 2019 Stanislav Levin in task 240814 Nov. 14, 2019 Stanislav Levin - 1.3.9.0 - 1.3.9.1. - Applied upstream fixes fixes: CVE-2019-14824...

CVE-2019-15803

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50AAHH.0C0. Through an undocumented sequence of keypresses, undocumented functionality is triggered. A diagnostics shell is triggered via CTRL-ALT-t, which prompts for the password returned by fdssyspassDebugPasswdret. The...

Security fix for the ALT Linux 10 package libtiff version 4.1.0-alt1

Nov. 14, 2019 Vladimir D. Seleznev 4.1.0-alt1 - Updated to 4.1.0 fixed CVE-2019-17546. - Dropped tiff-CVE-2018-12900.patch...

Security fix for the ALT Linux 10 package thunderbird version 68.2.2-alt1

Nov. 9, 2019 Andrey Cherepanov 68.2.2-alt1 - New version 68.2.2. - Fixed: + CVE-2019-15903 Heap overflow in expat library in XMLGetCurrentLineNumber + CVE-2019-11757 Use-after-free when creating index updates in IndexedDB + CVE-2019-11758 Potentially exploitable crash due to 360 Total Security +...

Security fix for the ALT Linux 10 package golang version 1.12.11-alt1

Nov. 6, 2019 Alexey Shabalin 1.12.11-alt1 - New version 1.12.11. Fixes: CVE-2019-17596...

Security fix for the ALT Linux 10 package golang version 1.13.4-alt1

Nov. 6, 2019 Alexey Shabalin 1.13.4-alt1 - 1.13.4 Fixes: CVE-2019-17596...

Security fix for the ALT Linux 8 package samba version 4.9.15-alt1

4.9.15-alt1 built Nov. 5, 2019 Evgeny Sinelnikov in task 239962 Oct. 29, 2019 Evgeny Sinelnikov - Update to second security autumn release - Security fixes: + CVE-2019-10218 Client code can return filenames containing path separators + CVE-2019-14833 Samba AD DC check password script does not...

Security fix for the ALT Linux 8 package samba-DC version 4.9.15-alt1

4.9.15-alt1 built Nov. 5, 2019 Evgeny Sinelnikov in task 239962 Oct. 29, 2019 Evgeny Sinelnikov - Update to second security autumn release - Security fixes: + CVE-2019-10218 Client code can return filenames containing path separators + CVE-2019-14833 Samba AD DC check password script does not...

Security fix for the ALT Linux 8 package sudo version 1:1.8.28-alt1

1:1.8.28-alt1 built Oct. 31, 2019 Ivan Zakharyaschev in task 240030 Oct. 15, 2019 Evgeny Sinelnikov - Update to autumn security release closes: 37334 - Code execution with euid==0 in rare box configurations fixes: CVE-2019-14287 - Fix post script for sudowheel control in case of upgrade in not...

Important: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Security fix for the ALT Linux 10 package firefox-esr version 68.2.0-alt1

Oct. 27, 2019 Andrey Cherepanov 68.2.0-alt1 - New ESR version 68.2.0. - Fixed: + CVE-2019-15903 Heap overflow in expat library in XMLGetCurrentLineNumber + CVE-2019-11757 Use-after-free when creating index updates in IndexedDB + CVE-2019-11758 Potentially exploitable crash due to 360 Total Securi...

Security fix for the ALT Linux 9 package mediawiki version 1.33.1-alt1

Oct. 12, 2019 Vitaly Lipatov 1.33.1-alt1 - new version 1.33.1 with rpmrb script - CVE-2019-16738...

Security fix for the ALT Linux 10 package runc version 1.0.0-alt10.rc9

Oct. 10, 2019 Vladimir Didenko 1.0.0-alt10.rc9 - New version - fixes: CVE-2019-16884...

Security fix for the ALT Linux 10 package golang version 1.12.10-alt1

Oct. 10, 2019 Alexey Shabalin 1.12.10-alt1 - New version 1.12.10. Fixes: CVE-2019-16276...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2019:2251-1 Rating: important References: 1109465 1117473 1123482 1124525 1133810 1138688 1140868 1141322 1145665 1149292 1149293 1149294 1149295 1149296 1149297 1149298 1149299 1149302 1149303 1149304 11493...

PT-2019-15559 · Alt Linux Team +2 · Alt Linux +1

Name of the Vulnerable Software and Affected Versions: ClickHouse versions prior to 19.13.5.44 ALT Linux affected versions not specified Description: The issue allows HTTP header injection via the url table function. There is also a mention of a vulnerability in the ALT Linux package, but details...

Security fix for the ALT Linux 8 package samba version 4.9.13-alt1

4.9.13-alt1 built Sept. 27, 2019 Evgeny Sinelnikov in task 237896 Sept. 20, 2019 Evgeny Sinelnikov - Update to first security autumn release - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...