Security fix for the ALT Linux 10 package libtiff version 4.4.0-alt2

4.4.0-alt2 built Dec. 27, 2022 Alexander Danilov in task 311968 Dec. 18, 2022 Vladimir D. Seleznev - Applied SUSE patches fixed tiff-CVE-2022-2056, CVE-2022-2057, CVE-2022-2058, CVE-2022-2519, CVE-2022-2520, CVE-2022-2521, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626, CVE-2022-3627,...

Security fix for the ALT Linux 10 package thunderbird version 102.6.0-alt1

102.6.0-alt1 built Dec. 23, 2022 Pavel Vasenkov in task 311857 Dec. 16, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-46880 Use-after-free in WebGL + CVE-2022-46872 Arbitrary file read from a compromised content process + CVE-2022-46881 Memory corruption in WebGL + CVE-2022-4687...

Security fix for the ALT Linux 10 package libetpan version 1.9.4-alt3

1.9.4-alt3 built Dec. 23, 2022 Mikhail Efremov in task 312089 Dec. 20, 2022 Mikhail Efremov - Fixed libssl knob. - Fixed License tag. - Added Vcs tag. - Patch from upstream: + Fixed crash when stinfolist is NULL fixes: CVE-2022-4121...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt6

2:1.20.14-alt6 built Dec. 22, 2022 Valery Inozemtsev in task 311677 Dec. 19, 2022 Valery Inozemtsev - cherry pick upstream fixes for CVE-2022-46340...

Security fix for the ALT Linux 10 package firefox-esr version 102.6.0-alt1

102.6.0-alt1 built Dec. 22, 2022 Pavel Vasenkov in task 311776 Dec. 14, 2022 Pavel Vasenkov - New ESR version. - Security fixes + CVE-2022-46880 Use-after-free in WebGL + CVE-2022-46872 Arbitrary file read from a compromised content process + CVE-2022-46881 Memory corruption in WebGL +...

Security fix for the ALT Linux 10 package xrdp version 0.9.21-alt1

0.9.21-alt1 built Dec. 21, 2022 Andrey Cherepanov in task 311590 Dec. 11, 2022 Andrey Cherepanov - New version. - Security fixes: CVE-2022-23468, CVE-2022-23477, CVE-2022-23478, CVE-2022-23479, CVE-2022-23480, CVE-2022-23481, CVE-2022-23483, CVE-2022-23482, CVE-2022-23484, CVE-2022-23493...

Security fix for the ALT Linux 10 package edk2 version 20221117-alt1

20221117-alt1 built Dec. 21, 2022 Alexey Shabalin in task 307814 Nov. 30, 2022 Alexey Shabalin - edk2-stable202211 Fixes: CVE-2021-38578 - add 4M builds...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt5

Dec. 14, 2022 Valery Inozemtsev 2:1.20.14-alt5 - cherry pick upstream fixes for CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-46283...

Security fix for the ALT Linux 10 package thunderbird version 102.5.1-alt1

102.5.1-alt1 built Dec. 13, 2022 Pavel Vasenkov in task 311239 Dec. 5, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-45414 Quoting from an HTML email with certain tags will trigger network requests and load remote content, regardless of a configuration...

Security fix for the ALT Linux 10 package libarchive version 3.6.1-alt2

3.6.1-alt2 built Dec. 12, 2022 Alexander Danilov in task 311215 Dec. 5, 2022 Alexander Danilov - security fixes: CVE-2022-36227...

curl: Unpreserved file permissions

A vulnerability was found in curl. This issue occurs because when curl saves cookies, alt-svc, and HSTS data to local files, it makes the operation atomic by finalizing the process with a rename from a temporary name to the final target file name. This flaw leads to unpreserved file permissions,...

curl: Unpreserved file permissions

A vulnerability was found in curl. This issue occurs because when curl saves cookies, alt-svc, and HSTS data to local files, it makes the operation atomic by finalizing the process with a rename from a temporary name to the final target file name. This flaw leads to unpreserved file permissions,...

Security fix for the ALT Linux 10 package helm version 3.10.2-alt1

3.10.2-alt1 built Dec. 8, 2022 Mikhail Gordeev in task 311367 Dec. 3, 2022 Mikhail Gordeev - new version 3.10.2 - Fixes: CVE-2022-36055 CVE-2022-36049 CVE-2021-32690 CVE-2021-21303...

Security fix for the ALT Linux 10 package golang version 1.19.4-alt1

Dec. 7, 2022 Alexey Shabalin 1.19.4-alt1 - New version 1.19.4 Fixes: CVE-2022-41717, CVE-2022-41720...

Security fix for the ALT Linux 9 package freerdp version 2.9.0-alt1

2.9.0-alt1 built Dec. 6, 2022 Andrey Cherepanov in task 310221 Nov. 18, 2022 Andrey Cherepanov - New version. - Fixed multiple client side input validation issues CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319, CVE-2022-39320, CVE-2022-41877, CVE-2022-39347...

Security fix for the ALT Linux 9 package tcpreplay version 4.4.2-alt1

4.4.2-alt1 built Nov. 30, 2022 Anton Farygin in task 310755 Nov. 28, 2022 Anton Farygin - 4.4.2 Fixes: CVE-2022-28487, CVE-2022-27942, CVE-2022-27940, CVE-2022-37047, CVE-2022-37049, CVE-2022-27939, CVE-2022-25484, CVE-2022-27941...

Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt4

1.17.2-alt4 built Nov. 24, 2022 Ivan A. Melnikov in task 310094 Nov. 16, 2022 Ivan A. Melnikov - Backports from 1.19.4: + fix integer overflows in PAC parsing Fixes: CVE-2022-42898; + fix some memory leaks...

Security fix for the ALT Linux 10 package thunderbird version 102.5.0-alt1

102.5.0-alt1 built Nov. 24, 2022 Pavel Vasenkov in task 310334 Nov. 16, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-45403 Service Workers might have learned size of cross-origin media files + CVE-2022-45404 Fullscreen notification bypass + CVE-2022-45405 Use-after-free in...

Security fix for the ALT Linux 10 package cri-o version 1.24.3-alt1

Nov. 24, 2022 Mikhail Gordeev 1.24.3-alt1 - 1.24.3 - Fixes: CVE-2022-1708...

CVE-2022-41928 XWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml

XWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' in AttachmentSelector.xml. The issue can also be reproduced by inserting the dangerous payload in the height or alt macro properties. This has been patched in versions 13.10.7, 14.4.2...