Security fix for the ALT Linux 10 package thunderbird version 91.4.1-alt1

91.4.1-alt1 built Dec. 27, 2021 Andrey Cherepanov in task 292439 Dec. 21, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-4126 OpenPGP signature status doesn't consider additional message content + CVE-2021-44538 Matrix chat library libolm bundled with Thunderbird vulnerable to...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.25-alt1

2.2.25-alt1 built Dec. 24, 2021 Alexey Shabalin in task 292358 Dec. 17, 2021 Alexey Shabalin - new version 2.2.25 - Fixes for the following security vulnerabilities: + CVE-2021-44420: Potential bypass of an upstream access control based on URL paths...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.13-alt5

2:1.20.13-alt5 built Dec. 24, 2021 Valery Inozemtsev in task 291987 Dec. 14, 2021 Valery Inozemtsev - cherry pick upstream fixes for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.10-alt1

3.2.10-alt1 built Dec. 24, 2021 Anton Farygin in task 292330 Dec. 17, 2021 Alexey Shabalin - new version 3.2.10 - Fixes for the following security vulnerabilities: + CVE-2021-44420 Fixed potential bypass of an upstream access control based on URL paths...

Security fix for the ALT Linux 10 package node version 14.18.2-alt1

14.18.2-alt1 built Dec. 23, 2021 Vitaly Lipatov in task 292248 Dec. 17, 2021 Vitaly Lipatov - new version 14.18.2 with rpmrb script - CVE-2021-22959: HTTP Request Smuggling due to spaced in headers - CVE-2021-22960: HTTP Request Smuggling when parsing the body - python 3.10 support - set c-ares =...

CVE-2021-21937

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘hostaltfilter’ parameter. This can be done as any authenticated user or through cross-site request forgery...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.24-alt0.M80P.1

9.6.24-alt0.M80P.1 built Dec. 21, 2021 Alexei Takaseev in task 289365 Nov. 11, 2021 Alexei Takaseev - 9.6.24 Fixes CVE-2021-23214, CVE-2021-23222...

Security fix for the ALT Linux 8 package postgresql10 version 10.19-alt0.M80P.1

10.19-alt0.M80P.1 built Dec. 21, 2021 Alexei Takaseev in task 289365 Nov. 11, 2021 Alexei Takaseev - 10.19 Fixes CVE-2021-23214, CVE-2021-23222...

Security fix for the ALT Linux 10 package thunderbird version 91.4.0-alt1

91.4.0-alt1 built Dec. 21, 2021 Andrey Cherepanov in task 291741 Dec. 10, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-43536 URL leakage when navigating while executing asynchronous function + CVE-2021-43537 Heap buffer overflow when using structured clone + CVE-2021-43538...

Security fix for the ALT Linux 8 package postgresql12 version 12.9-alt0.M80P.1

12.9-alt0.M80P.1 built Dec. 21, 2021 Alexei Takaseev in task 289365 Nov. 11, 2021 Alexei Takaseev - 12.9 Fixes CVE-2021-3677, CVE-2021-23214, CVE-2021-23222...

Security fix for the ALT Linux 8 package postgresql11 version 11.14-alt0.M80P.1

11.14-alt0.M80P.1 built Dec. 21, 2021 Alexei Takaseev in task 289365 Nov. 11, 2021 Alexei Takaseev - 11.14 Fixes CVE-2021-3677, CVE-2021-23214, CVE-2021-23222...

Security fix for the ALT Linux 8 package postgresql11-1C version 11.12-alt0.M80P.2

11.12-alt0.M80P.2 built Dec. 21, 2021 Alexei Takaseev in task 289365 Nov. 11, 2021 Alexei Takaseev - Fixes CVE-2021-3677, CVE-2021-23214, CVE-2021-23222...

The vulnerability of the host_alt_filter2 parameter in the device_list.php script of the Advantech R-SeeNet router monitoring software allows a hacker to disclose protected information.

The vulnerability of the hostaltfilter2 parameter in the devicelist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

Security fix for the ALT Linux 10 package runc version 1.0.3-alt1

Dec. 17, 2021 Vladimir Didenko 1.0.3-alt1 - New version Fixes: CVE-2021-43784...

Security fix for the ALT Linux 10 package grafana version 8.1.8-alt1

8.1.8-alt1 built Dec. 16, 2021 Alexey Shabalin in task 291697 Dec. 9, 2021 Alexey Shabalin - 8.1.8 Fixes: CVE-2021-43798, CVE-2021-39226...

Security fix for the ALT Linux 10 package firefox-esr version 91.4.0-alt1

91.4.0-alt1 built Dec. 14, 2021 Andrey Cherepanov in task 291601 Dec. 6, 2021 Andrey Cherepanov - New ESR version. - Security fixes: + CVE-2021-43536 URL leakage when navigating while executing asynchronous function + CVE-2021-43537 Heap buffer overflow when using structured clone + CVE-2021-4353...

Security fix for the ALT Linux 10 package samba version 4.14.10-alt3

Dec. 13, 2021 Evgeny Sinelnikov 4.14.10-alt3 - Update for the latest fixes release of Samba 4.14 + CVE-2020-25727 idmapnss, krb5 and s3-auth regressions + CVE-2021-3670 ldapserver, dsdb/anr and ldb libldb-2.3.2-alt2 regressions + smbd: s3-dsgetdcname: handle numips == 0 + dsdb: Use...

Security fix for the ALT Linux 10 package golang version 1.17.5-alt1

Dec. 9, 2021 Alexey Shabalin 1.17.5-alt1 - New version 1.17.5 Fixes: CVE-2021-44716, CVE-2021-44717...

Security fix for the ALT Linux 10 package podman version 3.4.3-alt1

Dec. 8, 2021 Alexey Shabalin 3.4.3-alt1 - new version 3.4.3 Fixes: CVE-2021-4024, CVE-2021-41190...

The vulnerability of the “health_alt_filter” parameter in the monitoring software for the Advantech R-SeeNet router’s status and functions allows a hacker to disclose protected information.

The vulnerability of the “healthaltfilter” parameter in the Advantech R-SeeNet monitoring software’s devicelist.php file relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...