Security fix for the ALT Linux 10 package qemu version 6.1.1-alt1

6.1.1-alt1 built March 1, 2022 Alexey Shabalin in task 295902 --- Feb. 24, 2022 Alexey Shabalin - 6.1.1 - Fixes for the following security vulnerabilities: + CVE-2021-3713 uas: add stream number sanity checks + CVE-2021-3947 hw/nvme: fix buffer overrun in nvmechangednslist + CVE-2021-20196...

Security fix for the ALT Linux 10 package tcpreplay version 4.4.1-alt1

4.4.1-alt1 built March 1, 2022 Anton Farygin in task 295832 --- Feb. 23, 2022 Anton Farygin - 4.4.1 Fixes: CVE-2021-45387, CVE-2021-45386...

WordPress "Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimization (image SEO) + Woocommerce" plugin < 1.4.5.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress "Bulk Auto Image Alt Text Alt tag, Alt attribute optimization image SEO + Woocommerce" plugin versions 1.4.5.0. Solution Update the WordPress "Bulk Auto Image Alt Text Alt tag, Alt attribute optimization image SEO + Woocommerc...

WordPress Alt Manager plugin < 1.5.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Alt Manager plugin versions 1.5.0. Solution Update the WordPress Alt Manager plugin to the latest available version at least 1.5.0...

WordPress Alt Manager plugin < 1.5.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Alt Manager plugin versions 1.5.0. Solution Update the WordPress Alt Manager plugin to the latest available version at least 1.5.0...

Security fix for the ALT Linux 10 package php8.0 version 8.0.16-alt1

8.0.16-alt1 built Feb. 28, 2022 Anton Farygin in task 295671 Feb. 19, 2022 Anton Farygin - 8.0.15 - 8.0.16 Fixes: CVE-2021-21708...

Security fix for the ALT Linux 10 package php8.1 version 8.1.3-alt1

8.1.3-alt1 built Feb. 28, 2022 Anton Farygin in task 295672 Feb. 19, 2022 Anton Farygin - 8.1.3 Fixes: CVE-2021-21708...

Security fix for the ALT Linux 10 package wireshark version 3.6.2-alt1

3.6.2-alt1 built Feb. 28, 2022 Anton Farygin in task 295750 Feb. 21, 2022 Anton Farygin - 3.6.2 Fixes: CVE-2022-0586, CVE-2022-0585, CVE-2022-0583, CVE-2022-0582, CVE-2022-0581...

WordPress plugin Logo Showcase with Slick Slider 访问控制错误漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. An access control error vulnerability exists in the WordPress...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.12-alt1

3.2.12-alt1 built Feb. 25, 2022 Anton Farygin in task 295709 Feb. 20, 2022 Anton Farygin - 3.2.11 - 3.2.12 - Fixes for the following security vulnerabilities: + CVE-2022-22818: Possible XSS via % debug % template tag. + CVE-2022-23833: Denial-of-service possibility in file uploads...

Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.14.1.1-alt1_1jpp11

0:11.0.14.1.1-alt11jpp11 built Feb. 24, 2022 Andrey Cherepanov in task 295621 Feb. 18, 2022 Andrey Cherepanov - New version. - Security fixes + JDK-8217375: jarsigner breaks old signature with long lines in manifest + JDK-8251329: zipfs Files.walkFileTree walks infinitely if zip has dir named "."...

Envoy 信任管理问题漏洞

Envoy is an open source distributed proxy server. Envoy has a trust management issue vulnerability that stems from a type confusion error in the defaultvalidator.cc implementation used to implement the default certificate validation routines when handling subjectAltNames. no details of the...

Security fix for the ALT Linux 10 package dotnet-aspnetcore-3.1 version 3.1.22-alt1

3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET Core 3.1.22 - December 14, 2021 - CVE-2021-43877: ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-34532: ASP.NET Core Information Disclosure Vulnerability...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.22-alt1

3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.22-alt1

3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET Core 3.1.22 - December 14, 2021 - CVE-2021-43877: ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.14-alt1

5.0.14-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET 5.0.14 - February 8, 2022 - CVE-2022-21986 : .NET Denial of Service Vulnerability - CVE-2021-43877 : ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-41355 : .NET Core Information...

Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.14-alt1

5.0.14-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - new version 5.0.14 with rpmgs script - CVE-2022-21986 : .NET Denial of Service Vulnerability - CVE-2021-41355 : .NET Core Information Disclosure Vulnerability - CVE-2021-34485 : .NET Core Information...

Security fix for the ALT Linux 10 package php8.2 version 8.1.3-alt1

Feb. 19, 2022 Anton Farygin 8.1.3-alt1 - 8.1.3 Fixes: CVE-2021-21708...

Security fix for the ALT Linux 10 package thunderbird version 91.6.0-alt1

91.6.0-alt1 built Feb. 17, 2022 Pavel Vasenkov in task 295262 Feb. 12, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-22753 Privilege Escalation to SYSTEM on Windows via Maintenance Service + CVE-2022-22754 Extensions could have bypassed permission confirmation during update +...

Security fix for the ALT Linux 10 package firefox-esr version 91.6.0-alt1

91.6.0-alt1 built Feb. 16, 2022 Pavel Vasenkov in task 295122 Feb. 9, 2022 Pavel Vasenkov - New ESR version. - Security fixes: + CVE-2022-22753 Privilege Escalation to SYSTEM on Windows via Maintenance Service + CVE-2022-22754 Extensions could have bypassed permission confirmation during update +...