SUSE CVE-2021-29946

Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

SUSE CVE-2021-41182

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now...

SUSE CVE-2021-44532

Node.js 12.22.9, 14.18.3, 16.13.2, and 17.3.1 converts SANs Subject Alternative Names to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerability when name constraints were used withi...

SUSE CVE-2022-32207

When curl 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally widen the permissions for the target file, leaving the...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt7

2:1.20.14-alt7 built Feb. 15, 2023 Valery Inozemtsev in task 314787 Feb. 7, 2023 Valery Inozemtsev - cherry pick upstream fixes for CVE-2023-0494...

Security fix for the ALT Linux 10 package java-17-openjdk version 0:17.0.6.0.10-alt1

0:17.0.6.0.10-alt1 built Feb. 15, 2023 Andrey Cherepanov in task 314967 Feb. 8, 2023 Andrey Cherepanov - New version. - Security fixes: + CVE-2023-21835 + CVE-2023-21843...

Security fix for the ALT Linux 9 package libxml2 version 1:2.9.10-alt6.p9.1

1:2.9.10-alt6.p9.1 built Feb. 13, 2023 Andrey Cherepanov in task 314487 Feb. 1, 2023 Andrey Cherepanov - Applied security fixes from upstream Fixes: CVE-2022-40303, CVE-2022-40304...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1

1.1.1t-alt1 built Feb. 10, 2023 Gleb Fotengauer-Malinovskiy in task 314825 Feb. 7, 2023 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1t fixes CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304...

Security fix for the ALT Linux 10 package thunderbird version 102.7.1-alt1

102.7.1-alt1 built Feb. 9, 2023 Pavel Vasenkov in task 314605 Feb. 3, 2023 Pavel Vasenkov - New version. - Security fixes: + CVE-2023-0430 Revocation status of S/Mime signature certificates was not checked...

CLSA-2023-1675774889 Update of alt-php

Initial build for Ubuntu 18.04...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.55-alt1

1:2.4.55-alt1 built Feb. 7, 2023 Anton Farygin in task 314495 Feb. 1, 2023 Anton Farygin - 2.4.55 Fixes: CVE-2022-37436, CVE-2006-20001, CVE-2022-36760...

Security fix for the ALT Linux 10 package libXpm version 3.5.15-alt1

3.5.15-alt1 built Feb. 7, 2023 Valery Inozemtsev in task 313642 Jan. 18, 2023 Valery Inozemtsev - 3.5.15 fixes: CVE-2022-46285, CVE-2022-44617, CVE-2022-4883...

Security fix for the ALT Linux 10 package bind version 9.16.37-alt1

9.16.37-alt1 built Feb. 6, 2023 Stanislav Levin in task 314185 Jan. 25, 2023 Stanislav Levin - 9.16.36 - 9.16.37 fixes: CVE-2022-3094, CVE-2022-3736, CVE-2022-3924...

Security fix for the ALT Linux 10 package libxml2 version 1:2.9.12-alt1.p10.1

1:2.9.12-alt1.p10.1 built Feb. 2, 2023 Alexander Danilov in task 314068 Jan. 24, 2023 Alexander Danilov - Applied security fixes from upstream Fixes: CVE-2022-23308, CVE-2022-29824, CVE-2022-40303, CVE-2022-40304...

Security fix for the ALT Linux 10 package grafana version 8.5.20-alt1

8.5.20-alt1 built Jan. 31, 2023 Alexey Shabalin in task 314152 Jan. 25, 2023 Alexey Shabalin - 8.5.20 - Fixes: + CVE-2022-39307 + CVE-2022-39306 + CVE-2022-39229 + CVE-2022-39201 + CVE-2022-36062 + CVE-2022-35957 + CVE-2022-31130 + CVE-2022-31123 + CVE-2022-31107 + CVE-2022-31097 + CVE-2022-29170...

Security fix for the ALT Linux 10 package thunderbird version 102.7.0-alt1

102.7.0-alt1 built Jan. 26, 2023 Pavel Vasenkov in task 314033 Jan. 24, 2023 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-46871 libusrsctp library out of date + CVE-2023-23598 Arbitrary file read from GTK drag and drop on Linux + CVE-2023-23599 Malicious command could be hidden in...

CVE-2022-4548

CVE-2022-4548 affects the WordPress plugin “Optimize images ALT Text & names for SEO using AI” (versions before 2.0.8). Root cause: missing CSRF protection when updating plugin settings, enabling a logged-in attacker to change settings via CSRF. Reported impact is limited to admin-context changes...

WordPress plugin Optimize images ALT Text & names for SEO using AI 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Optimize...

Security fix for the ALT Linux 9 package systemd version 1:247.13-alt1

1:247.13-alt1 built Jan. 20, 2023 Alexey Shabalin in task 313189 Jan. 11, 2023 Alexey Shabalin - 247.13 Fixes: CVE-2022-4415...

Security fix for the ALT Linux 10 package poppler115 version 21.11.0-alt1.p10.1

21.11.0-alt1.p10.1 built Jan. 20, 2023 Andrey Cherepanov in task 313730 Jan. 19, 2023 Andrey Cherepanov - JBIG2Stream: Fix crash on broken file CVE-2021-30860, CVE-2022-27337, CVE-2022-38784...