Security fix for the ALT Linux 10 package apache2 version 1:2.4.55-alt1

1:2.4.55-alt1 built Feb. 7, 2023 Anton Farygin in task 314495 Feb. 1, 2023 Anton Farygin - 2.4.55 Fixes: CVE-2022-37436, CVE-2006-20001, CVE-2022-36760...

Security fix for the ALT Linux 10 package bind version 9.16.37-alt1

9.16.37-alt1 built Feb. 6, 2023 Stanislav Levin in task 314185 Jan. 25, 2023 Stanislav Levin - 9.16.36 - 9.16.37 fixes: CVE-2022-3094, CVE-2022-3736, CVE-2022-3924...

Security fix for the ALT Linux 10 package libxml2 version 1:2.9.12-alt1.p10.1

1:2.9.12-alt1.p10.1 built Feb. 2, 2023 Alexander Danilov in task 314068 Jan. 24, 2023 Alexander Danilov - Applied security fixes from upstream Fixes: CVE-2022-23308, CVE-2022-29824, CVE-2022-40303, CVE-2022-40304...

Security fix for the ALT Linux 10 package grafana version 8.5.20-alt1

8.5.20-alt1 built Jan. 31, 2023 Alexey Shabalin in task 314152 Jan. 25, 2023 Alexey Shabalin - 8.5.20 - Fixes: + CVE-2022-39307 + CVE-2022-39306 + CVE-2022-39229 + CVE-2022-39201 + CVE-2022-36062 + CVE-2022-35957 + CVE-2022-31130 + CVE-2022-31123 + CVE-2022-31107 + CVE-2022-31097 + CVE-2022-29170...

Security fix for the ALT Linux 10 package thunderbird version 102.7.0-alt1

102.7.0-alt1 built Jan. 26, 2023 Pavel Vasenkov in task 314033 Jan. 24, 2023 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-46871 libusrsctp library out of date + CVE-2023-23598 Arbitrary file read from GTK drag and drop on Linux + CVE-2023-23599 Malicious command could be hidden in...

CVE-2022-4548

CVE-2022-4548 affects the WordPress plugin “Optimize images ALT Text & names for SEO using AI” (versions before 2.0.8). Root cause: missing CSRF protection when updating plugin settings, enabling a logged-in attacker to change settings via CSRF. Reported impact is limited to admin-context changes...

WordPress plugin Optimize images ALT Text & names for SEO using AI 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Optimize...

Security fix for the ALT Linux 10 package poppler115 version 21.11.0-alt1.p10.1

21.11.0-alt1.p10.1 built Jan. 20, 2023 Andrey Cherepanov in task 313730 Jan. 19, 2023 Andrey Cherepanov - JBIG2Stream: Fix crash on broken file CVE-2021-30860, CVE-2022-27337, CVE-2022-38784...

Security fix for the ALT Linux 9 package systemd version 1:247.13-alt1

1:247.13-alt1 built Jan. 20, 2023 Alexey Shabalin in task 313189 Jan. 11, 2023 Alexey Shabalin - 247.13 Fixes: CVE-2022-4415...

Security fix for the ALT Linux 10 package git version 2.33.6-alt1

2.33.6-alt1 built Jan. 20, 2023 Dmitry V. Levin in task 313612 Dec. 13, 2022 Dmitry V. Levin - 2.33.5 - 2.33.6 fixes: CVE-2022-41903, CVE-2022-23521...

Security fix for the ALT Linux 10 package php8.0 version 8.0.27-alt1

8.0.27-alt1 built Jan. 17, 2023 Anton Farygin in task 313104 Jan. 9, 2023 Anton Farygin - 8.0.26 - 8.0.27 Fixes: CVE-2022-31631...

Security fix for the ALT Linux 10 package php8.1 version 8.1.14-alt1

8.1.14-alt1 built Jan. 16, 2023 Anton Farygin in task 313148 Jan. 9, 2023 Anton Farygin - 8.1.13 - 8.1.14 Fixes: CVE-2022-31631...

Security fix for the ALT Linux 9 package libetpan version 1.9.4-alt3

1.9.4-alt3 built Jan. 11, 2023 Mikhail Efremov in task 312090 Dec. 20, 2022 Mikhail Efremov - Fixed libssl knob. - Fixed License tag. - Added Vcs tag. - Patch from upstream: + Fixed crash when stinfolist is NULL fixes: CVE-2022-4121...

Security fix for the ALT Linux 10 package php8.2 version 8.1.14-alt1

Jan. 9, 2023 Anton Farygin 8.1.14-alt1 - 8.1.13 - 8.1.14 Fixes: CVE-2022-31631...

Security fix for the ALT Linux 10 package libcairo version 1:1.16.0-alt2

1:1.16.0-alt2 built Jan. 6, 2023 Valery Inozemtsev in task 312192 Dec. 22, 2022 Valery Inozemtsev - cherry pick upstream fixes for CVE-2018-19876, CVE-2020-35492...

Security fix for the ALT Linux 10 package thunderbird version 102.6.1-alt1

102.6.1-alt1 built Dec. 29, 2022 Pavel Vasenkov in task 312281 Dec. 23, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-46874 Drag and Dropped Filenames could have been truncated to malicious extensions...

Optimize images ALT Text (alt tag) & names for SEO using AI < 2.0.8 - Settings Update via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. PoC Use the following form to abuse the CSRF vulnerability on the settings page: action| ---|--- layout| textColor| contentBackgroundColor|...

Optimize images ALT Text (alt tag) & names for SEO using AI < 2.0.8 - Settings Update via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Use the following form to abuse the CSRF vulnerability on the settings page: action layout textColor contentBackgroundColor starColor...

WordPress Optimize images ALT Text (alt tag) & names for SEO using AI Plugin < 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Optimize images ALT Text alt tag & names for SEO using AI Type Plugin Vulnerable versions 2.0.8 Fixed in 2.0.8 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-4548 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 6.0.12-alt1

Dec. 27, 2022 Vitaly Lipatov 6.0.12-alt1 - new version 6.0.12 with rpmrb script - CVE-2022-41032: .NET Elevation of Privilege Vulnerability - CVE-2022-38013: .NET Denial of Service Vulnerability - CVE-2022-34716: .NET Information Disclosure Vulnerability...