Security fix for the ALT Linux 9 package systemd version 1:247.13-alt1

1:247.13-alt1 built Jan. 20, 2023 Alexey Shabalin in task 313189 Jan. 11, 2023 Alexey Shabalin - 247.13 Fixes: CVE-2022-4415...

Security fix for the ALT Linux 10 package poppler115 version 21.11.0-alt1.p10.1

21.11.0-alt1.p10.1 built Jan. 20, 2023 Andrey Cherepanov in task 313730 Jan. 19, 2023 Andrey Cherepanov - JBIG2Stream: Fix crash on broken file CVE-2021-30860, CVE-2022-27337, CVE-2022-38784...

Security fix for the ALT Linux 10 package git version 2.33.6-alt1

2.33.6-alt1 built Jan. 20, 2023 Dmitry V. Levin in task 313612 Dec. 13, 2022 Dmitry V. Levin - 2.33.5 - 2.33.6 fixes: CVE-2022-41903, CVE-2022-23521...

Security fix for the ALT Linux 10 package php8.0 version 8.0.27-alt1

8.0.27-alt1 built Jan. 17, 2023 Anton Farygin in task 313104 Jan. 9, 2023 Anton Farygin - 8.0.26 - 8.0.27 Fixes: CVE-2022-31631...

Security fix for the ALT Linux 10 package php8.1 version 8.1.14-alt1

8.1.14-alt1 built Jan. 16, 2023 Anton Farygin in task 313148 Jan. 9, 2023 Anton Farygin - 8.1.13 - 8.1.14 Fixes: CVE-2022-31631...

Security fix for the ALT Linux 9 package libetpan version 1.9.4-alt3

1.9.4-alt3 built Jan. 11, 2023 Mikhail Efremov in task 312090 Dec. 20, 2022 Mikhail Efremov - Fixed libssl knob. - Fixed License tag. - Added Vcs tag. - Patch from upstream: + Fixed crash when stinfolist is NULL fixes: CVE-2022-4121...

Security fix for the ALT Linux 10 package php8.2 version 8.1.14-alt1

Jan. 9, 2023 Anton Farygin 8.1.14-alt1 - 8.1.13 - 8.1.14 Fixes: CVE-2022-31631...

Security fix for the ALT Linux 10 package libcairo version 1:1.16.0-alt2

1:1.16.0-alt2 built Jan. 6, 2023 Valery Inozemtsev in task 312192 Dec. 22, 2022 Valery Inozemtsev - cherry pick upstream fixes for CVE-2018-19876, CVE-2020-35492...

Security fix for the ALT Linux 10 package thunderbird version 102.6.1-alt1

102.6.1-alt1 built Dec. 29, 2022 Pavel Vasenkov in task 312281 Dec. 23, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-46874 Drag and Dropped Filenames could have been truncated to malicious extensions...

Optimize images ALT Text (alt tag) & names for SEO using AI < 2.0.8 - Settings Update via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Use the following form to abuse the CSRF vulnerability on the settings page: action layout textColor contentBackgroundColor starColor...

WordPress Optimize images ALT Text (alt tag) & names for SEO using AI Plugin < 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Optimize images ALT Text alt tag & names for SEO using AI Type Plugin Vulnerable versions 2.0.8 Fixed in 2.0.8 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-4548 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

Optimize images ALT Text (alt tag) & names for SEO using AI < 2.0.8 - Settings Update via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. PoC Use the following form to abuse the CSRF vulnerability on the settings page: action| ---|--- layout| textColor| contentBackgroundColor|...

Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 6.0.12-alt1

Dec. 27, 2022 Vitaly Lipatov 6.0.12-alt1 - new version 6.0.12 with rpmrb script - CVE-2022-41032: .NET Elevation of Privilege Vulnerability - CVE-2022-38013: .NET Denial of Service Vulnerability - CVE-2022-34716: .NET Information Disclosure Vulnerability...

Security fix for the ALT Linux 10 package libtiff version 4.4.0-alt2

4.4.0-alt2 built Dec. 27, 2022 Alexander Danilov in task 311968 Dec. 18, 2022 Vladimir D. Seleznev - Applied SUSE patches fixed tiff-CVE-2022-2056, CVE-2022-2057, CVE-2022-2058, CVE-2022-2519, CVE-2022-2520, CVE-2022-2521, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626, CVE-2022-3627,...

Security fix for the ALT Linux 10 package thunderbird version 102.6.0-alt1

102.6.0-alt1 built Dec. 23, 2022 Pavel Vasenkov in task 311857 Dec. 16, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-46880 Use-after-free in WebGL + CVE-2022-46872 Arbitrary file read from a compromised content process + CVE-2022-46881 Memory corruption in WebGL + CVE-2022-4687...

Security fix for the ALT Linux 10 package libetpan version 1.9.4-alt3

1.9.4-alt3 built Dec. 23, 2022 Mikhail Efremov in task 312089 Dec. 20, 2022 Mikhail Efremov - Fixed libssl knob. - Fixed License tag. - Added Vcs tag. - Patch from upstream: + Fixed crash when stinfolist is NULL fixes: CVE-2022-4121...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt6

2:1.20.14-alt6 built Dec. 22, 2022 Valery Inozemtsev in task 311677 Dec. 19, 2022 Valery Inozemtsev - cherry pick upstream fixes for CVE-2022-46340...

Security fix for the ALT Linux 10 package firefox-esr version 102.6.0-alt1

102.6.0-alt1 built Dec. 22, 2022 Pavel Vasenkov in task 311776 Dec. 14, 2022 Pavel Vasenkov - New ESR version. - Security fixes + CVE-2022-46880 Use-after-free in WebGL + CVE-2022-46872 Arbitrary file read from a compromised content process + CVE-2022-46881 Memory corruption in WebGL +...

Security fix for the ALT Linux 10 package edk2 version 20221117-alt1

20221117-alt1 built Dec. 21, 2022 Alexey Shabalin in task 307814 Nov. 30, 2022 Alexey Shabalin - edk2-stable202211 Fixes: CVE-2021-38578 - add 4M builds...

Security fix for the ALT Linux 10 package xrdp version 0.9.21-alt1

0.9.21-alt1 built Dec. 21, 2022 Andrey Cherepanov in task 311590 Dec. 11, 2022 Andrey Cherepanov - New version. - Security fixes: CVE-2022-23468, CVE-2022-23477, CVE-2022-23478, CVE-2022-23479, CVE-2022-23480, CVE-2022-23481, CVE-2022-23483, CVE-2022-23482, CVE-2022-23484, CVE-2022-23493...