Security fix for the ALT Linux 10 package node version 16.13.2-alt1

March 18, 2022 Vitaly Lipatov 16.13.2-alt1 - new version 16.13.2 with rpmrb script - set npm = 8.3.1 - set libuv = 1.43.0 - CVE-2021-44531: Improper handling of URI Subject Alternative Names Medium - CVE-2021-44532: Certificate Verification Bypass via String Injection Medium - CVE-2021-44533:...

Security fix for the ALT Linux 10 package firefox-esr version 91.7.0-alt1

91.7.0-alt1 built March 15, 2022 Pavel Vasenkov in task 296597 March 13, 2022 Pavel Vasenkov - New ESR version. - Security fixes: + CVE-2022-26383 Browser window spoof using fullscreen mode + CVE-2022-26384 iframe allow-scripts sandbox bypass + CVE-2022-26387 Time-of-check time-of-use bug when...

Security fix for the ALT Linux 10 package thunderbird version 91.7.0-alt1

91.7.0-alt1 built March 15, 2022 Pavel Vasenkov in task 296598 March 13, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-26383 Browser window spoof using fullscreen mode + CVE-2022-26384 iframe allow-scripts sandbox bypass + CVE-2022-26387 Time-of-check time-of-use bug when...

Security fix for the ALT Linux 10 package thunderbird version 91.6.2-alt1

91.6.2-alt1 built March 15, 2022 Pavel Vasenkov in task 296375 March 8, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-26485 Use-after-free in XSLT parameter processing + CVE-2022-26486 Use-after-free in WebGPU IPC Framework...

Security fix for the ALT Linux 10 package libldb version 2.3.2-alt2

2.3.2-alt2 built March 15, 2022 Evgeny Sinelnikov in task 293575 --- Dec. 13, 2021 Evgeny Sinelnikov - Update to latest regression fixes for samba-4.14.10: + CVE-2021-3670 ldb: Confirm the request has not yet timed out...

alt-moelln.de Improper Access Control vulnerability OBB-2425563

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security fix for the ALT Linux 10 package firefox-esr version 91.6.1-alt1

91.6.1-alt1 built March 11, 2022 Pavel Vasenkov in task 296362 March 7, 2022 Pavel Vasenkov - New ESR version. - Security fixes: + CVE-2022-26485 Use-after-free in XSLT parameter processing + CVE-2022-26486 Use-after-free in WebGPU IPC Framework...

Security fix for the ALT Linux 9 package tcpreplay version 4.4.1-alt1

4.4.1-alt1 built March 9, 2022 Anton Farygin in task 295834 Feb. 23, 2022 Anton Farygin - 4.4.1 Fixes: CVE-2021-45387, CVE-2021-45386...

Security fix for the ALT Linux 10 package golang version 1.16.15-alt1

1.16.15-alt1 built March 5, 2022 Alexey Shabalin in task 296256 --- March 4, 2022 Alexey Shabalin - New version 1.16.15 Fixes: CVE-2022-24921...

Security fix for the ALT Linux 10 package golang version 1.17.8-alt1

March 4, 2022 Alexey Shabalin 1.17.8-alt1 - New version 1.17.8 Fixes: CVE-2022-24921...

All Vulnerabilities for alt.myrnenska-gromada.gov.ua Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security fix for the ALT Linux 10 package php7 version 7.4.28-alt1

7.4.28-alt1 built March 1, 2022 Anton Farygin in task 295670 --- Feb. 19, 2022 Anton Farygin - 7.4.28 Fixes: CVE-2021-21708...

Security fix for the ALT Linux 10 package qemu version 6.1.1-alt1

6.1.1-alt1 built March 1, 2022 Alexey Shabalin in task 295902 --- Feb. 24, 2022 Alexey Shabalin - 6.1.1 - Fixes for the following security vulnerabilities: + CVE-2021-3713 uas: add stream number sanity checks + CVE-2021-3947 hw/nvme: fix buffer overrun in nvmechangednslist + CVE-2021-20196...

Security fix for the ALT Linux 10 package tcpreplay version 4.4.1-alt1

4.4.1-alt1 built March 1, 2022 Anton Farygin in task 295832 --- Feb. 23, 2022 Anton Farygin - 4.4.1 Fixes: CVE-2021-45387, CVE-2021-45386...

WordPress Alt Manager plugin < 1.5.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Alt Manager plugin versions 1.5.0. Solution Update the WordPress Alt Manager plugin to the latest available version at least 1.5.0...

WordPress Alt Manager plugin < 1.5.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Alt Manager plugin versions 1.5.0. Solution Update the WordPress Alt Manager plugin to the latest available version at least 1.5.0...

WordPress "Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimization (image SEO) + Woocommerce" plugin < 1.4.5.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress "Bulk Auto Image Alt Text Alt tag, Alt attribute optimization image SEO + Woocommerce" plugin versions 1.4.5.0. Solution Update the WordPress "Bulk Auto Image Alt Text Alt tag, Alt attribute optimization image SEO + Woocommerc...

Security fix for the ALT Linux 10 package php8.0 version 8.0.16-alt1

8.0.16-alt1 built Feb. 28, 2022 Anton Farygin in task 295671 Feb. 19, 2022 Anton Farygin - 8.0.15 - 8.0.16 Fixes: CVE-2021-21708...

Security fix for the ALT Linux 10 package php8.1 version 8.1.3-alt1

8.1.3-alt1 built Feb. 28, 2022 Anton Farygin in task 295672 Feb. 19, 2022 Anton Farygin - 8.1.3 Fixes: CVE-2021-21708...

WordPress plugin Logo Showcase with Slick Slider 访问控制错误漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. An access control error vulnerability exists in the WordPress...