WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Software Update Image Tag Alt Attribute Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27455 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ba6000222dd7 Credits...

Update Image Tag Alt Attribute <= 2.4.5 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Linux Client Shortcut Key Ctrl+Alt+Enter will work as Ctrl+Alt+Delete in Linux VDA

Normally, Ctrl+Alt+Enter from a Windows Client will change xfreerdp from "Window Mode" to "Full Screen" and vice versa in a Linux VDA's ICA session. However, on a Linux Client the same shortcut key Ctrl+Alt+Enter will work as Ctrl+Alt+Delete to the application xfreerdp in a Linux VDA's ICA sessio...

Security fix for the ALT Linux 10 package etcd version 3.5.8-alt1

3.5.8-alt1 built April 17, 2023 Alexey Shabalin in task 317882 April 14, 2023 Alexey Shabalin - 3.5.8 Fixes: CVE-2021-28235...

Security fix for the ALT Linux 10 package samba version 4.16.10-alt1

4.16.10-alt1 built April 14, 2023 Evgeny Sinelnikov in task 317735 March 29, 2023 Evgeny Sinelnikov - Update to security release of Samba 4.16 with update libldb to 2.5.3: + ldb wildcard matching makes excessive allocations Samba15331. - Security fixes Samba15270, Samba15315: + CVE-2023-0922: The...

Security fix for the ALT Linux 10 package yandex-browser-stable version 23.3.1.916-alt1

April 11, 2023 Yandex Browser Team 23.3.1.916-alt1 - Browser updated to 23.3.1 + Critical CVE-2023-0941: Use after free in Prompts. + High CVE-2023-0927: Use after free in Web Payments API. + High CVE-2023-0928: Use after free in SwiftShader. + High CVE-2023-0929: Use after free in Vulkan. + High...

Security fix for the ALT Linux 9 package gzip version 1.10-alt1.p9.1

1.10-alt1.p9.1 built April 10, 2023 Andrey Cherepanov in task 316771 April 4, 2023 Andrey Cherepanov - Fixed CVE-2022-1271 ALT 44053...

Security fix for the ALT Linux 10 package golang version 1.19.8-alt1

1.19.8-alt1 built April 10, 2023 Alexey Shabalin in task 318045 April 4, 2023 Alexey Shabalin - New version 1.19.8 Fixes: CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538...

Security fix for the ALT Linux 10 package libsixel version 1.10.3-alt1

1.10.3-alt1 built April 7, 2023 Konstantin Lepikhov in task 317774 March 30, 2023 Konstantin Lepikhov - 1.10.3. - switch to meson. - Security fixes for CVE-2020-11721, CVE-2020-19668...

Security fix for the ALT Linux 10 package libmicrohttpd version 0.9.76-alt1

0.9.76-alt1 built April 6, 2023 Alexander Danilov in task 317701 March 29, 2023 Sergey Bolshakov - 0.9.76 released fixes: CVE-2023-27371...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt8

2:1.20.14-alt8 built April 5, 2023 Valery Inozemtsev in task 317705 March 29, 2023 Valery Inozemtsev - cherry pick upstream fixes for CVE-2023-1393...

Security fix for the ALT Linux 10 package yandex-browser-stable version 23.1.2.1033-alt1

23.1.2.1033-alt1 built April 4, 2023 Yandex Browser Team in task 317282 March 20, 2023 Yandex Browser Team - browser updated to 23.1.2 + High CVE-2022-4436: Use after free in Blink Media. + High CVE-2022-4437: Use after free in Mojo IPC. + High CVE-2022-4438: Use after free in Blink Frames. + Hig...

Security fix for the ALT Linux 10 package libmemcached version 1.1.4-alt1

1.1.4-alt1 built April 3, 2023 Alexander Danilov in task 317669 March 29, 2023 Alexei Takaseev - 1.1.4 Fixes CVE-2023-27478 - Change URL to new upstream project - Use CMAKE...

Security fix for the ALT Linux 10 package firejail version 0.9.72-alt1

0.9.72-alt1 built April 3, 2023 Anton Farygin in task 317165 March 21, 2023 Anton Farygin - 0.9.68 - 0.9.72 Fixes: CVE-2022-31214...

Security fix for the ALT Linux 10 package firefox-esr version 102.9.0-alt1

102.9.0-alt1 built March 31, 2023 Pavel Vasenkov in task 317236 March 22, 2023 Pavel Vasenkov - New ESR version. - Security fixes + CVE-2023-25751 Incorrect code generation during JIT compilation + CVE-2023-28164 URL being dragged from a removed cross-origin iframe into the same tab triggered...

Security fix for the ALT Linux 10 package thunderbird version 102.9.0-alt1

102.9.0-alt1 built March 31, 2023 Pavel Vasenkov in task 317237 March 22, 2023 Pavel Vasenkov - New version. - Security fixes: + CVE-2023-25751 Incorrect code generation during JIT compilation + CVE-2023-28164 URL being dragged from a removed cross-origin iframe into the same tab triggered...

Security fix for the ALT Linux 10 package dnsmasq version 2.89-alt2

2.89-alt2 built March 31, 2023 Mikhail Efremov in task 317627 March 28, 2023 Mikhail Efremov - Added patches from upstream git: + Avoid undefined behaviour with the ctype3 functions + Fix --rev-server option + Fix possible SEGV when no servers defined + Set the default maximum DNS UDP packet size...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.18-alt1

3.2.18-alt1 built March 31, 2023 Alexey Shabalin in task 317508 March 24, 2023 Alexey Shabalin - New version 3.2.18. - Fixes for the following security vulnerabilities: + CVE-2023-23969 Potential denial-of-service via Accept-Language headers + CVE-2023-24580 Potential denial-of-service...

Security fix for the ALT Linux 10 package kubernetes version 1.26.3-alt1

1.26.3-alt1 built March 29, 2023 Alexander Stepchenko in task 317575 March 24, 2023 Alexander Stepchenko - 1.26.3 Fixes: CVE-2022-3172, CVE-2022-3162, CVE-2022-3294...

Security fix for the ALT Linux 10 package cri-o version 1.26.2-alt1

1.26.2-alt1 built March 29, 2023 Alexander Stepchenko in task 317575 March 27, 2023 Alexander Stepchenko - 1.26.2 - Fixes: CVE-2022-2995, CVE-2022-27652, CVE-2022-4318...