Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1p-alt1

June 22, 2022 Gleb Fotengauer-Malinovskiy 1.1.1p-alt1 - Updated to 1.1.1p fixes CVE-2022-1292, CVE-2022-2068...

Security fix for the ALT Linux 10 package php7 version 7.4.30-alt1

7.4.30-alt1 built June 22, 2022 Anton Farygin in task 302324 --- June 16, 2022 Anton Farygin - 7.4.28 - 7.4.30 Fixes: CVE-2022-31626, CVE-2022-31625...

Security fix for the ALT Linux 10 package php8.0 version 8.0.20-alt1

8.0.20-alt1 built June 21, 2022 Anton Farygin in task 302229 June 16, 2022 Anton Farygin - 8.0.19 - 8.0.20 Fixes: CVE-2022-31626, CVE-2022-31625...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.54-alt1

1:2.4.54-alt1 built June 21, 2022 Anton Farygin in task 302327 June 19, 2022 Anton Farygin - 2.4.54 Fixes: CVE-2022-31813, CVE-2022-30556, CVE-2022-30522, CVE-2022-29404, CVE-2022-28615, CVE-2022-28614, CVE-2022-28330, CVE-2022-26377...

Security fix for the ALT Linux 10 package tor version 0.4.7.8-alt1

0.4.7.8-alt1 built June 20, 2022 Hihin Ruslan in task 302306 --- June 18, 2022 Hihin Ruslan - Update version - CVE-2021-3838...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.54-alt1

June 19, 2022 Anton Farygin 1:2.4.54-alt1 - 2.4.54 Fixes: CVE-2022-31813, CVE-2022-30556, CVE-2022-30522, CVE-2022-29404, CVE-2022-28615, CVE-2022-28614, CVE-2022-28330, CVE-2022-26377...

Security fix for the ALT Linux 10 package php8.2 version 8.1.7-alt1

June 16, 2022 Anton Farygin 8.1.7-alt1 - 8.1.6 - 8.1.7 Fixes: CVE-2022-31626, CVE-2022-31625...

Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.121-alt1

2:5.10.121-alt1 built June 15, 2022 Vitaly Chikunov in task 301677 --- June 10, 2022 Vitaly Chikunov - v5.10.121 2022-06-09. - altha: Restrict setcap binaries in nosuid mode. - v5.10.120 2022-06-06. Fixes: CVE-2022-1852, CVE-2022-1972, CVE-2022-1966. - kernel.perfeventparanoid=4 by default. -...

Security fix for the ALT Linux 10 package golang version 1.17.11-alt1.p10

1.17.11-alt1.p10 built June 14, 2022 Alexey Shabalin in task 301915 --- June 12, 2022 Alexey Shabalin - New version 1.17.11 Fixes: CVE-2022-30580, CVE-2022-30634, CVE-2022-30629, CVE-2022-29804...

NextCellent Gallery <= 1.9.35 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its image settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup Create/edit a gallery with at least one image, pu...

Security fix for the ALT Linux 10 package firefox-esr version 91.10.0-alt1

June 3, 2022 Pavel Vasenkov 91.10.0-alt1 - New ESR version. - Security fixes: + CVE-2022-31736 Cross-Origin resource's length leaked + CVE-2022-31737 Heap buffer overflow in WebGL + CVE-2022-31738 Browser window spoof using fullscreen mode + CVE-2022-31739 Attacker-influenced path traversal when...

Security fix for the ALT Linux 10 package thunderbird version 91.10.0-alt1

June 3, 2022 Pavel Vasenkov 91.10.0-alt1 - New version. - Security fixes: + CVE-2022-31736 Cross-Origin resource's length leaked + CVE-2022-31737 Heap buffer overflow in WebGL + CVE-2022-31738 Browser window spoof using fullscreen mode + CVE-2022-31739 Attacker-influenced path traversal when savi...

Security fix for the ALT Linux 9 package vim version 4:8.2.5019-alt1

4:8.2.5019-alt1 built June 2, 2022 Andrey Cherepanov in task 300894 --- May 26, 2022 Alexander Danilov - Updated to 8.2.5019 fixes CVE-2022-1735, CVE-2022-1769, CVE-2022-1733, CVE-2022-1674, CVE-2022-1629, CVE-2022-1621, CVE-2022-1620, CVE-2022-1619, CVE-2022-1616 ALT42859...

Security fix for the ALT Linux 10 package vim version 4:8.2.5019-alt1

4:8.2.5019-alt1 built May 31, 2022 Andrey Cherepanov in task 300891 --- May 26, 2022 Alexander Danilov - Updated to 8.2.5019 fixes CVE-2022-1735, CVE-2022-1769, CVE-2022-1733, CVE-2022-1674, CVE-2022-1629, CVE-2022-1621, CVE-2022-1620, CVE-2022-1619, CVE-2022-1616 ALT42859...

Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.118-alt1

2:5.10.118-alt1 built May 30, 2022 kernelbot in task 300613 --- May 25, 2022 Kernel Bot - v5.10.118 2022-05-25. Fixes: CVE-2022-1729, CVE-2022-0854...

Security fix for the ALT Linux 10 package thunderbird version 91.9.1-alt1

91.9.1-alt1 built May 27, 2022 Pavel Vasenkov in task 300611 May 21, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-1802 Prototype pollution in Top-Level Await implementation + CVE-2022-1529 Untrusted input used in JavaScript object indexing, leading to prototype pollution...

jquery-ui: XSS in the altField option of the datepicker widget

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now...

Security fix for the ALT Linux 8 package clamav version 0.103.6-alt1

0.103.6-alt1 built May 25, 2022 Sergey Y. Afonin in task 300477 May 20, 2022 Sergey Y. Afonin - 0.103.6 + CVE-2022-20770 + CVE-2022-20796 + CVE-2022-20771 + CVE-2022-20785 + CVE-2022-20792...

Security fix for the ALT Linux 10 package openvpn version 2.5.6-alt1

2.5.6-alt1 built May 24, 2022 Andrey Cherepanov in task 300403 --- May 16, 2022 Nikolay A. Fetisov - New version Closes: 42217 - Security fixes: + CVE-2022-0547: possible authentication bypass if multiple authentication plugins tries to do deferred authentication - Fix build with new...

Security fix for the ALT Linux 9 package clamav version 0.103.6-alt1

0.103.6-alt1 built May 24, 2022 Sergey Y. Afonin in task 300475 May 20, 2022 Sergey Y. Afonin - 0.103.6 + CVE-2022-20770 + CVE-2022-20796 + CVE-2022-20771 + CVE-2022-20785 + CVE-2022-20792...