PT-2022-5939

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.84.0 Description The issue is related to how curl saves cookies, alt-svc, and hsts data to local files. When curl performs this operation, it uses a temporary file that is later renamed to the final target filename...

CVE-2022-32207

When curl 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally widen the permissions for the target file, leaving the...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1p-alt1

1.1.1p-alt1 built June 24, 2022 Gleb Fotengauer-Malinovskiy in task 302511 June 22, 2022 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1p fixes CVE-2022-1292, CVE-2022-2068...

Security fix for the ALT Linux 10 package libexo version 4.16.4-alt1

4.16.4-alt1 built June 24, 2022 Mikhail Efremov in task 302058 --- June 14, 2022 Mikhail Efremov - Updated to 4.16.4 fixes: CVE-2022-32278...

Security fix for the ALT Linux 10 package openscad version 2021.01-alt4

2021.01-alt4 built June 23, 2022 Anton Midyukov in task 302498 --- June 20, 2022 Anton Midyukov - Fixes: + CVE-2022-0496 Out-of-bounds memory access in DXF loader path identification + CVE-2022-0497 Out-of-bounds memory access in comment parser + Fix build issue with overloaded join. - cleanup sp...

Jenkins 跨站脚本漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins suffers from a cross-site scripting vulnerability that stems from the title attribute and alt attribute not being...

Security fix for the ALT Linux 10 package git version 2.33.4-alt1

June 23, 2022 Dmitry V. Levin 2.33.4-alt1 - 2.33.3 - 2.33.4 fixes: CVE-2022-29187...

Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1p-alt1

June 22, 2022 Gleb Fotengauer-Malinovskiy 1.1.1p-alt1 - Updated to 1.1.1p fixes CVE-2022-1292, CVE-2022-2068...

Security fix for the ALT Linux 10 package php8.1 version 8.1.7-alt1

8.1.7-alt1 built June 22, 2022 Anton Farygin in task 302231 June 16, 2022 Anton Farygin - 8.1.6 - 8.1.7 Fixes: CVE-2022-31626, CVE-2022-31625...

Security fix for the ALT Linux 10 package php7 version 7.4.30-alt1

7.4.30-alt1 built June 22, 2022 Anton Farygin in task 302324 --- June 16, 2022 Anton Farygin - 7.4.28 - 7.4.30 Fixes: CVE-2022-31626, CVE-2022-31625...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.54-alt1

1:2.4.54-alt1 built June 21, 2022 Anton Farygin in task 302327 June 19, 2022 Anton Farygin - 2.4.54 Fixes: CVE-2022-31813, CVE-2022-30556, CVE-2022-30522, CVE-2022-29404, CVE-2022-28615, CVE-2022-28614, CVE-2022-28330, CVE-2022-26377...

Security fix for the ALT Linux 10 package php8.0 version 8.0.20-alt1

8.0.20-alt1 built June 21, 2022 Anton Farygin in task 302229 June 16, 2022 Anton Farygin - 8.0.19 - 8.0.20 Fixes: CVE-2022-31626, CVE-2022-31625...

Security fix for the ALT Linux 10 package tor version 0.4.7.8-alt1

0.4.7.8-alt1 built June 20, 2022 Hihin Ruslan in task 302306 --- June 18, 2022 Hihin Ruslan - Update version - CVE-2021-3838...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.54-alt1

June 19, 2022 Anton Farygin 1:2.4.54-alt1 - 2.4.54 Fixes: CVE-2022-31813, CVE-2022-30556, CVE-2022-30522, CVE-2022-29404, CVE-2022-28615, CVE-2022-28614, CVE-2022-28330, CVE-2022-26377...

Security fix for the ALT Linux 10 package php8.2 version 8.1.7-alt1

June 16, 2022 Anton Farygin 8.1.7-alt1 - 8.1.6 - 8.1.7 Fixes: CVE-2022-31626, CVE-2022-31625...

Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.121-alt1

2:5.10.121-alt1 built June 15, 2022 Vitaly Chikunov in task 301677 --- June 10, 2022 Vitaly Chikunov - v5.10.121 2022-06-09. - altha: Restrict setcap binaries in nosuid mode. - v5.10.120 2022-06-06. Fixes: CVE-2022-1852, CVE-2022-1972, CVE-2022-1966. - kernel.perfeventparanoid=4 by default. -...

Security fix for the ALT Linux 10 package golang version 1.17.11-alt1.p10

1.17.11-alt1.p10 built June 14, 2022 Alexey Shabalin in task 301915 --- June 12, 2022 Alexey Shabalin - New version 1.17.11 Fixes: CVE-2022-30580, CVE-2022-30634, CVE-2022-30629, CVE-2022-29804...

NextCellent Gallery <= 1.9.35 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its image settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup Create/edit a gallery with at least one image, pu...

Security fix for the ALT Linux 10 package thunderbird version 91.10.0-alt1

June 3, 2022 Pavel Vasenkov 91.10.0-alt1 - New version. - Security fixes: + CVE-2022-31736 Cross-Origin resource's length leaked + CVE-2022-31737 Heap buffer overflow in WebGL + CVE-2022-31738 Browser window spoof using fullscreen mode + CVE-2022-31739 Attacker-influenced path traversal when savi...

Security fix for the ALT Linux 10 package firefox-esr version 91.10.0-alt1

June 3, 2022 Pavel Vasenkov 91.10.0-alt1 - New ESR version. - Security fixes: + CVE-2022-31736 Cross-Origin resource's length leaked + CVE-2022-31737 Heap buffer overflow in WebGL + CVE-2022-31738 Browser window spoof using fullscreen mode + CVE-2022-31739 Attacker-influenced path traversal when...