Security fix for the ALT Linux 9 package polkit version 0.116-alt2.M90P.4

0.116-alt2.M90P.4 built Feb. 1, 2022 Alexander Danilov in task 294286 Jan. 26, 2022 Alexander Danilov - Fixes: CVE-2021-4034...

Security fix for the ALT Linux 9 package expat version 2.4.3-alt1

2.4.3-alt1 built Jan. 31, 2022 Vladimir D. Seleznev in task 293696 Jan. 18, 2022 Vladimir D. Seleznev - Updated to 2.4.3 with multiple security fixes. - Fixes: + CVE-2021-45960 issues with left shift by = 29 places in function storeAtts that can lead to realloc misbehavior; + CVE-2021-46143 Integ...

Security fix for the ALT Linux 9 package grafana version 7.5.13-alt1

7.5.13-alt1 built Jan. 31, 2022 Alexey Shabalin in task 291700 Jan. 26, 2022 Alexey Shabalin - 7.5.13 Fixes: CVE-2021-39226, CVE-2021-43813...

Security fix for the ALT Linux 9 package clamav version 0.103.5-alt1

0.103.5-alt1 built Jan. 25, 2022 Sergey Y. Afonin in task 293907 Jan. 18, 2022 Sergey Y. Afonin - 0.103.5 CVE-2022-20698...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.11-alt1

3.2.11-alt1 built Jan. 24, 2022 Alexey Shabalin in task 293890 Jan. 18, 2022 Alexey Shabalin - new version 3.2.11 - Fixes for the following security vulnerabilities: + CVE-2021-45115 Prevented DoS vector in UserAttributeSimilarityValidator. + CVE-2021-45116 Fixed potential information disclosure ...

Security fix for the ALT Linux 10 package flatpak version 1.12.4-alt1

1.12.4-alt1 built Jan. 24, 2022 Yuri N. Sedunov in task 293755 Jan. 19, 2022 Yuri N. Sedunov - 1.12.4 fixed CVE-2022-21682, CVE-2021-43860...

Security fix for the ALT Linux 10 package clamav version 0.103.5-alt1

0.103.5-alt1 built Jan. 21, 2022 Sergey Y. Afonin in task 293675 Jan. 18, 2022 Sergey Y. Afonin - 0.103.5 CVE-2022-20698...

Security fix for the ALT Linux 10 package wireshark version 3.6.1-alt1

3.6.1-alt1 built Jan. 20, 2022 Anton Farygin in task 293173 Jan. 3, 2022 Anton Farygin - 3.6.1 Fixes: CVE-2021-4185, CVE-2021-4184, CVE-2021-4183, CVE-2021-4182, CVE-2021-4181...

Security fix for the ALT Linux 10 package thunderbird version 91.5.0-alt1

91.5.0-alt1 built Jan. 20, 2022 Andrey Cherepanov in task 293378 Jan. 12, 2022 Andrey Cherepanov - New version. - Security fixes: + CVE-2022-22746 Calling into reportValidity could have lead to fullscreen window spoof + CVE-2022-22743 Browser window spoof using fullscreen mode + CVE-2022-22742...

Security fix for the ALT Linux 10 package firefox-esr version 91.5.0-alt1

91.5.0-alt1 built Jan. 19, 2022 Andrey Cherepanov in task 293339 Jan. 11, 2022 Andrey Cherepanov - New ESR version. - Security fixes: + CVE-2022-22746 Calling into reportValidity could have lead to fullscreen window spoof + CVE-2022-22743 Browser window spoof using fullscreen mode + CVE-2022-2274...

Security fix for the ALT Linux 9 package wireshark version 3.6.1-alt1

Jan. 3, 2022 Anton Farygin 3.6.1-alt1 - 3.6.1 Fixes: CVE-2021-4185, CVE-2021-4184, CVE-2021-4183, CVE-2021-4182, CVE-2021-4181...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.52-alt1

1:2.4.52-alt1 built Dec. 27, 2021 Anton Farygin in task 292417 Dec. 21, 2021 Anton Farygin - 2.4.52 Fixes: CVE-2021-44790, CVE-2021-44224...

Security fix for the ALT Linux 10 package thunderbird version 91.4.1-alt1

91.4.1-alt1 built Dec. 27, 2021 Andrey Cherepanov in task 292439 Dec. 21, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-4126 OpenPGP signature status doesn't consider additional message content + CVE-2021-44538 Matrix chat library libolm bundled with Thunderbird vulnerable to...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.25-alt1

2.2.25-alt1 built Dec. 24, 2021 Alexey Shabalin in task 292358 Dec. 17, 2021 Alexey Shabalin - new version 2.2.25 - Fixes for the following security vulnerabilities: + CVE-2021-44420: Potential bypass of an upstream access control based on URL paths...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.13-alt5

2:1.20.13-alt5 built Dec. 24, 2021 Valery Inozemtsev in task 291987 Dec. 14, 2021 Valery Inozemtsev - cherry pick upstream fixes for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.10-alt1

3.2.10-alt1 built Dec. 24, 2021 Anton Farygin in task 292330 Dec. 17, 2021 Alexey Shabalin - new version 3.2.10 - Fixes for the following security vulnerabilities: + CVE-2021-44420 Fixed potential bypass of an upstream access control based on URL paths...

Security fix for the ALT Linux 10 package node version 14.18.2-alt1

14.18.2-alt1 built Dec. 23, 2021 Vitaly Lipatov in task 292248 Dec. 17, 2021 Vitaly Lipatov - new version 14.18.2 with rpmrb script - CVE-2021-22959: HTTP Request Smuggling due to spaced in headers - CVE-2021-22960: HTTP Request Smuggling when parsing the body - python 3.10 support - set c-ares =...

CVE-2021-21937

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘hostaltfilter’ parameter. This can be done as any authenticated user or through cross-site request forgery...

CVE-2021-21937

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘hostaltfilter’ parameter. This can be done as any authenticated user or through cross-site request forgery...

Security fix for the ALT Linux 10 package thunderbird version 91.4.0-alt1

91.4.0-alt1 built Dec. 21, 2021 Andrey Cherepanov in task 291741 Dec. 10, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-43536 URL leakage when navigating while executing asynchronous function + CVE-2021-43537 Heap buffer overflow when using structured clone + CVE-2021-43538...