Security fix for the ALT Linux 10 package php8.0 version 8.0.24-alt1

8.0.24-alt1 built Oct. 13, 2022 Anton Farygin in task 307752 Sept. 30, 2022 Anton Farygin - 8.0.23 - 8.0.24 Fixes: CVE-2022-31629...

Security fix for the ALT Linux 10 package php8.1 version 8.1.11-alt1

8.1.11-alt1 built Oct. 11, 2022 Anton Farygin in task 307734 Sept. 30, 2022 Anton Farygin - 8.1.10 - 8.1.11 fixes: CVE-2022-31628, CVE-2022-31629...

Security fix for the ALT Linux 10 package thunderbird version 102.3.1-alt1

Oct. 10, 2022 Pavel Vasenkov 102.3.1-alt1 - New version. - Security fixes: + CVE-2022-39249 Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators + CVE-2022-39250 Matrix SDK bundled with Thunderbird vulnerable to a device verification attack ...

Security fix for the ALT Linux 10 package firefox-esr version 102.3.0-alt1

Oct. 10, 2022 Pavel Vasenkov 102.3.0-alt1 - New ESR version. - Security fixes: + CVE-2022-3266 Out of bounds read when decoding H264 + CVE-2022-40959 Bypassing FeaturePolicy restrictions on transient pages + CVE-2022-40960 Data-race when parsing non-UTF-8 URLs in threads + CVE-2022-40958 Bypassin...

Security fix for the ALT Linux 10 package thunderbird version 102.3.0-alt1

Oct. 9, 2022 Pavel Vasenkov 102.3.0-alt1 - New version. - Security fixes: + CVE-2022-3266 Out of bounds read when decoding H264 + CVE-2022-40959 Bypassing FeaturePolicy restrictions on transient pages + CVE-2022-40960 Data-race when parsing non-UTF-8 URLs in threads + CVE-2022-40958 Bypassing...

Security fix for the ALT Linux 10 package php8.2 version 8.1.11-alt1

Sept. 30, 2022 Anton Farygin 8.1.11-alt1 - 8.1.10 - 8.1.11 fixes: CVE-2022-31628, CVE-2022-31629...

Security fix for the ALT Linux 10 package node version 16.17.1-alt1

Sept. 30, 2022 Vitaly Lipatov 16.17.1-alt1 - new version 16.17.1 with rpmrb script - set npm = 8.15.0 - CVE-2022-32212: DNS rebinding in --inspect on macOS High - CVE-2022-32213: bypass via obs-fold mechanic Medium - CVE-2022-35255: Weak randomness in WebCrypto keygen - CVE-2022-35256: HTTP Reque...

Security fix for the ALT Linux 9 package openvpn version 2.5.6-alt1

2.5.6-alt1 built Sept. 28, 2022 Andrey Cherepanov in task 305924 May 16, 2022 Nikolay A. Fetisov - New version Closes: 42217 - Security fixes: + CVE-2022-0547: possible authentication bypass if multiple authentication plugins tries to do deferred authentication - Fix build with new...

Security fix for the ALT Linux 9 package glpi version 9.5.9-alt1

9.5.9-alt1 built Sept. 23, 2022 Pavel Zilke in task 307140 Sept. 14, 2022 Pavel Zilke - New version 9.5.9 - This release fixes several critical security issues that has been recently discovered. Update is strongly recommended! - Security fixes: + CVE-2022-35945 : XSS through registration API +...

Security fix for the ALT Linux 10 package glpi version 9.5.9-alt1

9.5.9-alt1 built Sept. 16, 2022 Pavel Zilke in task 306811 Sept. 14, 2022 Pavel Zilke - New version 9.5.9 - This release fixes several critical security issues that has been recently discovered. Update is strongly recommended! - Security fixes: + CVE-2022-35945 : XSS through registration API +...

Security fix for the ALT Linux 10 package golang version 1.18.6-alt1

Sept. 14, 2022 Alexey Shabalin 1.18.6-alt1 - New version 1.18.6 Fixes: CVE-2022-27664...

Security fix for the ALT Linux 10 package samba version 4.16.4-alt2

Sept. 8, 2022 Evgeny Sinelnikov 4.16.4-alt2 - Add support Heimdal only of "ignore requester sid" global option for the correct operation of trust relationships with oldest versions of MS AD without KB5008380 Authentication updates CVE-2021-42287...

Security fix for the ALT Linux 9 package postgresql12-1C version 12.11-alt0.M90P.3

12.11-alt0.M90P.3 built Sept. 1, 2022 Alexei Takaseev in task 305052 Aug. 10, 2022 Alexei Takaseev - Fixes CVE-2022-2625...

Security fix for the ALT Linux 9 package postgresql12 version 12.12-alt0.M90P.1

12.12-alt0.M90P.1 built Sept. 1, 2022 Alexei Takaseev in task 305052 Aug. 10, 2022 Alexei Takaseev - 12.12 Fixes CVE-2022-2625...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.15-alt1

3.2.15-alt1 built Aug. 30, 2022 Alexey Shabalin in task 305627 Aug. 22, 2022 Alexey Shabalin - new version 3.2.15 - Fixes for the following security vulnerabilities: + CVE-2022-34265 Potential SQL injection via Trunckind and Extractlookupname arguments. + CVE-2022-36359 Potential reflected file...

Alt-N MDaemon 跨站脚本漏洞

Alt-N MDaemon is a mail service system from Alt-N Corporation that provides complete mail server functionality, protects users from spam, enables web login to send and receive emails, supports remote management, and protects the system against email viruses when used in conjunction with the MDaem...

Alt-N MDaemon 注入漏洞

Alt-N MDaemon is a mail service system from Alt-N Corporation that provides complete mail server functionality, protects users from spam, enables web login to send and receive emails, supports remote management, and protects the system against email viruses when used in conjunction with the MDaem...

Security fix for the ALT Linux 10 package firefox-esr version 102.2.0-alt1

Aug. 25, 2022 Pavel Vasenkov 102.2.0-alt1 - New ESR version. - Security fixes: + CVE-2022-38472 Address bar spoofing via XSLT error handling + CVE-2022-38473 Cross-origin XSLT Documents would have inherited the parent's permissions + CVE-2022-38476 Data race and potential use-after-free in...

Oracle Linux 9 : curl (ELSA-2022-6157)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6157 advisory. - fix unpreserved file permissions CVE-2022-32207 - fix HTTP compression denial of service CVE-2022-32206 Tenable has extracted the preceding descripti...

Security fix for the ALT Linux 10 package thunderbird version 102.2.0-alt1

Aug. 24, 2022 Pavel Vasenkov 102.2.0-alt1 - New version. - Security fixes: + CVE-2022-38472 Address bar spoofing via XSLT error handling + CVE-2022-38473 Cross-origin XSLT Documents would have inherited the parent's permissions + CVE-2022-38476 Data race and potential use-after-free in PK11Change...