3353 matches found
Security fix for the ALT Linux 10 package thunderbird version 102.5.1-alt1
102.5.1-alt1 built Dec. 13, 2022 Pavel Vasenkov in task 311239 Dec. 5, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-45414 Quoting from an HTML email with certain tags will trigger network requests and load remote content, regardless of a configuration...
Security fix for the ALT Linux 10 package libarchive version 3.6.1-alt2
3.6.1-alt2 built Dec. 12, 2022 Alexander Danilov in task 311215 Dec. 5, 2022 Alexander Danilov - security fixes: CVE-2022-36227...
curl: Unpreserved file permissions
A vulnerability was found in curl. This issue occurs because when curl saves cookies, alt-svc, and HSTS data to local files, it makes the operation atomic by finalizing the process with a rename from a temporary name to the final target file name. This flaw leads to unpreserved file permissions,...
curl: Unpreserved file permissions
A vulnerability was found in curl. This issue occurs because when curl saves cookies, alt-svc, and HSTS data to local files, it makes the operation atomic by finalizing the process with a rename from a temporary name to the final target file name. This flaw leads to unpreserved file permissions,...
Security fix for the ALT Linux 10 package helm version 3.10.2-alt1
3.10.2-alt1 built Dec. 8, 2022 Mikhail Gordeev in task 311367 Dec. 3, 2022 Mikhail Gordeev - new version 3.10.2 - Fixes: CVE-2022-36055 CVE-2022-36049 CVE-2021-32690 CVE-2021-21303...
Security fix for the ALT Linux 10 package golang version 1.19.4-alt1
Dec. 7, 2022 Alexey Shabalin 1.19.4-alt1 - New version 1.19.4 Fixes: CVE-2022-41717, CVE-2022-41720...
Security fix for the ALT Linux 9 package freerdp version 2.9.0-alt1
2.9.0-alt1 built Dec. 6, 2022 Andrey Cherepanov in task 310221 Nov. 18, 2022 Andrey Cherepanov - New version. - Fixed multiple client side input validation issues CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319, CVE-2022-39320, CVE-2022-41877, CVE-2022-39347...
Security fix for the ALT Linux 9 package tcpreplay version 4.4.2-alt1
4.4.2-alt1 built Nov. 30, 2022 Anton Farygin in task 310755 Nov. 28, 2022 Anton Farygin - 4.4.2 Fixes: CVE-2022-28487, CVE-2022-27942, CVE-2022-27940, CVE-2022-37047, CVE-2022-37049, CVE-2022-27939, CVE-2022-25484, CVE-2022-27941...
Security fix for the ALT Linux 10 package thunderbird version 102.5.0-alt1
102.5.0-alt1 built Nov. 24, 2022 Pavel Vasenkov in task 310334 Nov. 16, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-45403 Service Workers might have learned size of cross-origin media files + CVE-2022-45404 Fullscreen notification bypass + CVE-2022-45405 Use-after-free in...
Security fix for the ALT Linux 10 package cri-o version 1.24.3-alt1
Nov. 24, 2022 Mikhail Gordeev 1.24.3-alt1 - 1.24.3 - Fixes: CVE-2022-1708...
Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt4
1.17.2-alt4 built Nov. 24, 2022 Ivan A. Melnikov in task 310094 Nov. 16, 2022 Ivan A. Melnikov - Backports from 1.19.4: + fix integer overflows in PAC parsing Fixes: CVE-2022-42898; + fix some memory leaks...
CVE-2022-41928 XWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml
XWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' in AttachmentSelector.xml. The issue can also be reproduced by inserting the dangerous payload in the height or alt macro properties. This has been patched in versions 13.10.7, 14.4.2...
Security fix for the ALT Linux 9 package libexo version 0.12.11-alt3
0.12.11-alt3 built Nov. 18, 2022 Mikhail Efremov in task 310173 Nov. 17, 2022 Mikhail Efremov - exo-helper: Properly quote command parameters fixes: CVE-2022-45062...
Security fix for the ALT Linux 10 package firefox-esr version 102.5.0-alt1
Nov. 16, 2022 Pavel Vasenkov 102.5.0-alt1 - New ESR version. - Security fixes: + CVE-2022-45403 Service Workers might have learned size of cross-origin media files + CVE-2022-45404 Fullscreen notification bypass + CVE-2022-45405 Use-after-free in InputStream implementation + CVE-2022-45406...
Security fix for the ALT Linux 10 package firefox-esr version 102.4.0-alt1
102.4.0-alt1 built Nov. 10, 2022 Andrey Cherepanov in task 309056 Oct. 24, 2022 Pavel Vasenkov - New ESR version. - Security fixes: + CVE-2022-42927 Same-origin policy violation could have leaked cross-origin URLs + CVE-2022-42928 Memory Corruption in JS Engine + CVE-2022-42929 Denial of Service...
alt.juleica.de Cross Site Scripting vulnerability OBB-3040360
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security fix for the ALT Linux 10 package glpi version 9.5.10-alt1
Nov. 4, 2022 Pavel Zilke 9.5.10-alt1 - New version 9.5.10 - This release fixes several security issues that has been recently discovered. Update is recommended! - Security fixes: + CVE-2022-39276 : Blind SSRF in RSS feeds and planning + CVE-2022-39372 : Stored XSS in user information +...
Security fix for the ALT Linux 9 package glpi version 9.5.10-alt1
Nov. 4, 2022 Pavel Zilke 9.5.10-alt1 - New version 9.5.10 - This release fixes several security issues that has been recently discovered. Update is recommended! - Security fixes: + CVE-2022-39276 : Blind SSRF in RSS feeds and planning + CVE-2022-39372 : Stored XSS in user information +...