Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2n-alt1

Dec. 7, 2017 Gleb Fotengauer-Malinovskiy 1.0.2n-alt1 - Updated to v1.0.2n fixes CVE-2017-3737, CVE-2017-3738. - Added --disable tsget knob. - Added support of s390x and mips architectures...

Security fix for the ALT Linux 8 package mariadb version 10.1.29-alt1

Dec. 6, 2017 Alexey Shabalin 10.1.29-alt1 - 10.1.29 - Fixes for the following security vulnerabilities: + CVE-2017-10378 + CVE-2017-10268 + MDEV-13819...

Security fix for the ALT Linux 8 package tor version 0.3.1.9-alt1.M80P.1

0.3.1.9-alt1.M80P.1 built Dec. 6, 2017 Vladimir Didenko in task 195838 Dec. 1, 2017 Vladimir Didenko - new version Fixes: CVE-2017-8819, CVE-2017-8820, CVE-2017-8821, CVE-2017-8822, CVE-2017-8823...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.46-alt0.M70P.1.1

1:4.1.46-alt0.M70P.1.1 built Dec. 5, 2017 kernelbot in task 195831 Dec. 5, 2017 Kernel Bot - temporary fix for HugeDirtyCowPOC fixes CVE-2017-1000405...

Security fix for the ALT Linux 10 package palemoon version 2:27.6.2-alt1

Dec. 2, 2017 Hihin Ruslan 2:27.6.2-alt1 - New Version - Release 27.6.2 - Fixed CVE-2017-7832, CVE-2017-7835, CVE-2017-7840. See Changelog...

Security fix for the ALT Linux 8 package curl version 7.57.0-alt1

Dec. 1, 2017 Anton Farygin 7.57.0-alt1 - new version - fixes: CVE-2017-8818 SSL out of buffer access CVE-2017-8817 FTP wildcard out of bounds read CVE-2017-8816 NTLM buffer overflow via integer overflow...

alt-goerlitz.de XSS vulnerability

Open Bug Bounty ID: OBB-441428 Description| Value ---|--- Affected Website:| alt-goerlitz.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

bootstrap_carousel - Moderately critical - Cross Site Scripting - SA-CONTRIB-2017-088

This module provides a way to make carousels, based on bootstrap-carousel.js. The module doesn't sufficiently handle output of img HTML tag's alt property. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Carousel: Create new content" or any simil...

anne-reitsma.nl XSS vulnerability

Open Bug Bounty ID: OBB-440914 Description| Value ---|--- Affected Website:| anne-reitsma.nl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Security fix for the ALT Linux 10 package thunderbird version 52.5.0-alt1

Nov. 24, 2017 Andrey Cherepanov 52.5.0-alt1 - New version 52.5.0 - Fixes: + CVE-2017-7828 Use-after-free of PressShell while restyling layout + CVE-2017-7830 Cross-origin URL information leak through Resource + CVE-2017-7826 Memory safety bugs fixed in Firefox 57, Firefox ESR 52.5, and Thunderbir...

Security fix for the ALT Linux 8 package samba version 4.6.11-alt1

Nov. 21, 2017 Evgeny Sinelnikov 4.6.11-alt1 - Second autumn security release Fixes: CVE-2017-14746, CVE-2017-15275...

Security fix for the ALT Linux 10 package samba version 4.6.11-alt1.S1

Nov. 21, 2017 Evgeny Sinelnikov 4.6.11-alt1.S1 - Second autumn security release Fixes: CVE-2017-14746, CVE-2017-15275...

Security fix for the ALT Linux 8 package samba-DC version 4.6.11-alt1

Nov. 21, 2017 Evgeny Sinelnikov 4.6.11-alt1 - Second autumn security release Fixes: CVE-2017-14746, CVE-2017-15275...

Security fix for the ALT Linux 9 package openvpn version 2.4.4-alt1

Nov. 18, 2017 Nikolay A. Fetisov 2.4.4-alt1 - New version - Security fixes: + CVE-2017-12166: Buffer overflow when using obsolete '--key-method 1'...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.46-alt0.M70P.1

1:4.1.46-alt0.M70P.1 built Nov. 16, 2017 kernelbot in task 194626 Nov. 15, 2017 Kernel Bot - v4.1.46 Fixes: CVE-2017-0786, CVE-2017-12153, CVE-2017-12154, CVE-2017-12193, CVE-2017-15265...

Security fix for the ALT Linux 10 package firefox-esr version 52.5.0-alt1

Nov. 15, 2017 Andrey Cherepanov 52.5.0-alt1 - New ESR version 52.5.0 - Fixes: + CVE-2017-7828 Use-after-free of PressShell while restyling layout + CVE-2017-7830 Cross-origin URL information leak through Resource + CVE-2017-7826 Memory safety bugs fixed in Firefox 57 and Firefox ESR...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2m-alt0.M80P.1

1.0.2m-alt0.M80P.1 built Nov. 7, 2017 Gleb Fotengauer-Malinovskiy in task 193204 Nov. 4, 2017 Gleb Fotengauer-Malinovskiy - Backported to p8 branch fixes CVE-2017-3735, CVE-2017-3736...

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2m-alt1

Nov. 4, 2017 Gleb Fotengauer-Malinovskiy 1.0.2m-alt1 - Updated to v1.0.2m fixes CVE-2017-3735, CVE-2017-3736...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2m-alt1

Nov. 4, 2017 Gleb Fotengauer-Malinovskiy 1.0.2m-alt1 - Updated to v1.0.2m fixes CVE-2017-3735, CVE-2017-3736...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2m-alt1

Nov. 4, 2017 Gleb Fotengauer-Malinovskiy 1.0.2m-alt1 - Updated to v1.0.2m fixes CVE-2017-3735, CVE-2017-3736...