Security fix for the ALT Linux 10 package yandex-browser-stable version 23.1.2.1033-alt1

23.1.2.1033-alt1 built April 4, 2023 Yandex Browser Team in task 317282 March 20, 2023 Yandex Browser Team - browser updated to 23.1.2 + High CVE-2022-4436: Use after free in Blink Media. + High CVE-2022-4437: Use after free in Mojo IPC. + High CVE-2022-4438: Use after free in Blink Frames. + Hig...

Security fix for the ALT Linux 10 package firejail version 0.9.72-alt1

0.9.72-alt1 built April 3, 2023 Anton Farygin in task 317165 March 21, 2023 Anton Farygin - 0.9.68 - 0.9.72 Fixes: CVE-2022-31214...

Security fix for the ALT Linux 10 package libmemcached version 1.1.4-alt1

1.1.4-alt1 built April 3, 2023 Alexander Danilov in task 317669 March 29, 2023 Alexei Takaseev - 1.1.4 Fixes CVE-2023-27478 - Change URL to new upstream project - Use CMAKE...

Security fix for the ALT Linux 10 package dnsmasq version 2.89-alt2

2.89-alt2 built March 31, 2023 Mikhail Efremov in task 317627 March 28, 2023 Mikhail Efremov - Added patches from upstream git: + Avoid undefined behaviour with the ctype3 functions + Fix --rev-server option + Fix possible SEGV when no servers defined + Set the default maximum DNS UDP packet size...

Security fix for the ALT Linux 10 package firefox-esr version 102.9.0-alt1

102.9.0-alt1 built March 31, 2023 Pavel Vasenkov in task 317236 March 22, 2023 Pavel Vasenkov - New ESR version. - Security fixes + CVE-2023-25751 Incorrect code generation during JIT compilation + CVE-2023-28164 URL being dragged from a removed cross-origin iframe into the same tab triggered...

Security fix for the ALT Linux 10 package thunderbird version 102.9.0-alt1

102.9.0-alt1 built March 31, 2023 Pavel Vasenkov in task 317237 March 22, 2023 Pavel Vasenkov - New version. - Security fixes: + CVE-2023-25751 Incorrect code generation during JIT compilation + CVE-2023-28164 URL being dragged from a removed cross-origin iframe into the same tab triggered...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.18-alt1

3.2.18-alt1 built March 31, 2023 Alexey Shabalin in task 317508 March 24, 2023 Alexey Shabalin - New version 3.2.18. - Fixes for the following security vulnerabilities: + CVE-2023-23969 Potential denial-of-service via Accept-Language headers + CVE-2023-24580 Potential denial-of-service...

Security fix for the ALT Linux 10 package cri-o version 1.26.2-alt1

1.26.2-alt1 built March 29, 2023 Alexander Stepchenko in task 317575 March 27, 2023 Alexander Stepchenko - 1.26.2 - Fixes: CVE-2022-2995, CVE-2022-27652, CVE-2022-4318...

Security fix for the ALT Linux 10 package kubernetes version 1.26.3-alt1

1.26.3-alt1 built March 29, 2023 Alexander Stepchenko in task 317575 March 24, 2023 Alexander Stepchenko - 1.26.3 Fixes: CVE-2022-3172, CVE-2022-3162, CVE-2022-3294...

Security fix for the ALT Linux 9 package glpi version 9.5.12-alt1

9.5.12-alt1 built March 29, 2023 Pavel Zilke in task 317348 March 18, 2023 Pavel Zilke - New version 9.5.12 - This release fixes several security issues that has been recently discovered. Update is recommended! - Security fixes: + CVE-2023-22722 : XSS on browse views + CVE-2023-22725 : XSS on...

Security fix for the ALT Linux 10 package flatpak version 1.14.4-alt1

1.14.4-alt1 built March 27, 2023 Yuri N. Sedunov in task 317059 March 20, 2023 Yuri N. Sedunov - 1.14.4 fixed CVE-2023-28100, CVE-2023-28101...

Security fix for the ALT Linux 8 package clamav version 0.103.8-alt1

0.103.8-alt1 built March 27, 2023 Sergey Y. Afonin in task 316773 March 9, 2023 Sergey Y. Afonin - 0.103.8 CVE-2023-20032, CVE-2023-20052...

Security fix for the ALT Linux 10 package python3 version 3.9.16-alt1

3.9.16-alt1 built March 27, 2023 Grigory Ustinov in task 317117 March 21, 2023 Grigory Ustinov - Updated to upstream version 3.9.16 Closes: 45598 Fixes: CVE-2022-37454...

Security fix for the ALT Linux 10 package glpi version 9.5.12-alt1

9.5.12-alt1 built March 22, 2023 Pavel Zilke in task 316955 March 18, 2023 Pavel Zilke - New version 9.5.12 - This release fixes several security issues that has been recently discovered. Update is recommended! - Security fixes: + CVE-2023-22722 : XSS on browse views + CVE-2023-22725 : XSS on...

Security fix for the ALT Linux 10 package podman version 4.4.2-alt1

4.4.2-alt1 built March 22, 2023 Alexey Shabalin in task 315926 Feb. 27, 2023 Alexey Shabalin - new version 4.4.2 Fixes: CVE-2023-0778...

Security fix for the ALT Linux 10 package node version 16.19.1-alt1

16.19.1-alt1 built March 22, 2023 Andrey Cherepanov in task 316988 March 13, 2023 Vitaly Lipatov - new version 16.19.1 with rpmrb script - CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule High - CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs...

WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Update Image Tag Alt Attribute Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 06d58607dd7f Credits István...

Security fix for the ALT Linux 10 package node version 16.18.1-alt1

16.18.1-alt1 built March 18, 2023 Andrey Cherepanov in task 310327 Nov. 23, 2022 Vitaly Lipatov - new version 16.18.1 with rpmrb script - CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address Medium...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.17-alt1

5.0.17-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 12, 2023 Vitaly Lipatov - new version 5.0.17 with rpmgs script - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package dotnet-aspnetcore-3.1 version 3.1.32-alt1

3.1.32-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - ASP.NET Core 3.1.32 - CVE-2022-38013: .NET Denial of Service Vulnerability...