Security fix for the ALT Linux 10 package git version 2.33.2-alt1

2.33.2-alt1 built April 19, 2022 Dmitry V. Levin in task 298588 March 23, 2022 Dmitry V. Levin - 2.33.1 - 2.33.2 fixes: CVE-2022-24765...

Security fix for the ALT Linux 10 package golang version 1.17.9-alt1.p10

1.17.9-alt1.p10 built April 18, 2022 Alexey Shabalin in task 298503 --- April 15, 2022 Alexey Shabalin - New version 1.17.9 Fixes: CVE-2022-24675, CVE-2022-28327, CVE-2022-27536...

alt-kzn.ru Cross Site Scripting vulnerability OBB-2505417

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security fix for the ALT Linux 10 package golang version 1.17.9-alt1

April 13, 2022 Alexey Shabalin 1.17.9-alt1 - New version 1.17.9 Fixes: CVE-2022-24675, CVE-2022-28327, CVE-2022-27536...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.13-alt1

3.2.13-alt1 built April 12, 2022 Anton Farygin in task 298294 April 11, 2022 Anton Farygin - 3.2.12 - 3.2.13 - Fixes: CVE-2022-28346: Potential SQL injection in QuerySet.annotate, aggregate, and extra CVE-2022-28347: Potential SQL injection via QuerySet.explainoptions on PostgreSQL...

Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.110-alt1

2:5.10.110-alt1 built April 12, 2022 kernelbot in task 298105 --- April 8, 2022 Kernel Bot - v5.10.110 Fixes: CVE-2021-4034...

Security fix for the ALT Linux 10 package gzip version 1.12-alt1

1.12-alt1 built April 11, 2022 Dmitry V. Levin in task 298175 --- April 8, 2022 Dmitry V. Levin - gzip: v1.10-31-g34db0a2 - v1.12-3-g83c65d1 fixes: CVE-2022-1271...

Security fix for the ALT Linux 10 package podman version 4.0.3-alt1

April 8, 2022 Alexey Shabalin 4.0.3-alt1 - new version 4.0.3 Fixes: CVE-2022-27649, CVE-2022-1227, CVE-2022-27191, CVE-2022-27649...

Security fix for the ALT Linux 10 package java-1.8.0-openjdk version 0:1.8.0.322.b06-alt2_1jpp8

0:1.8.0.322.b06-alt21jpp8 built April 7, 2022 Andrey Cherepanov in task 295626 --- Feb. 18, 2022 Andrey Cherepanov - New version. - Security fixes: + JDK-8264934, CVE-2022-21248: Enhance cross VM serialization + JDK-8268488: More valuable DerValues + JDK-8268494: Better inlining of inlined...

Security fix for the ALT Linux 10 package thunderbird version 91.8.0-alt1

April 6, 2022 Pavel Vasenkov 91.8.0-alt1 - New version. - Security fixes: + CVE-2022-1097 Use-after-free in NSSToken objects + CVE-2022-28281 Out of bounds write due to unexpected WebAuthN Extensions + CVE-2022-1197 OpenPGP revocation information was ignored + CVE-2022-1196 Use-after-free after V...

Security fix for the ALT Linux 10 package firefox-esr version 91.8.0-alt1

April 6, 2022 Pavel Vasenkov 91.8.0-alt1 - New ESR version. - Security fixes: + CVE-2022-1097 Use-after-free in NSSToken objects + CVE-2022-28281 Out of bounds write due to unexpected WebAuthN Extensions + CVE-2022-1196 Use-after-free after VR Process destruction + CVE-2022-28282 Use-after-free i...

CVE-2022-25356

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection...

CVE-2022-25356

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection...

Design/Logic Flaw

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection...

CVE-2022-25356

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection...

CVE-2022-25356

Summary of CVE-2022-25356 (Alt-n/MDaemon Security Gateway) : Affected product is Alt-n/MDaemon Security Gateway

Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 6.0.3-alt1

April 2, 2022 Vitaly Lipatov 6.0.3-alt1 - new version 6.0.3 with rpmgs script - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 6.0.3-alt1

April 2, 2022 Vitaly Lipatov 6.0.3-alt1 - The .NET 6.0.3 and .NET SDK 6.0.103 releases - CVE-2022-24464: .NET Denial of Service Vulnerability - CVE-2022-24512: .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.23-alt1

April 2, 2022 Vitaly Lipatov 3.1.23-alt1 - .NET Core 3.1.23 - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability - CVE-2020-8927 : .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.15-alt1

April 2, 2022 Vitaly Lipatov 5.0.15-alt1 - The .NET 5.0.15 and .NET 5.0.406 SDK releases - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability - CVE-2020-8927 : .NET Remote Code Execution Vulnerability...