Security fix for the ALT Linux 10 package python3-module-django version 3.2.16-alt1

3.2.16-alt1 built Oct. 13, 2022 Alexey Shabalin in task 308240 Oct. 11, 2022 Alexey Shabalin - new version 3.2.16 - Fixes for the following security vulnerabilities: + CVE-2022-41323 Potential denial-of-service vulnerability in internationalized URLs...

Security fix for the ALT Linux 10 package php8.1 version 8.1.11-alt1

8.1.11-alt1 built Oct. 11, 2022 Anton Farygin in task 307734 Sept. 30, 2022 Anton Farygin - 8.1.10 - 8.1.11 fixes: CVE-2022-31628, CVE-2022-31629...

Security fix for the ALT Linux 10 package firefox-esr version 102.3.0-alt1

Oct. 10, 2022 Pavel Vasenkov 102.3.0-alt1 - New ESR version. - Security fixes: + CVE-2022-3266 Out of bounds read when decoding H264 + CVE-2022-40959 Bypassing FeaturePolicy restrictions on transient pages + CVE-2022-40960 Data-race when parsing non-UTF-8 URLs in threads + CVE-2022-40958 Bypassin...

Security fix for the ALT Linux 10 package thunderbird version 102.3.1-alt1

Oct. 10, 2022 Pavel Vasenkov 102.3.1-alt1 - New version. - Security fixes: + CVE-2022-39249 Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators + CVE-2022-39250 Matrix SDK bundled with Thunderbird vulnerable to a device verification attack ...

Security fix for the ALT Linux 10 package thunderbird version 102.3.0-alt1

Oct. 9, 2022 Pavel Vasenkov 102.3.0-alt1 - New version. - Security fixes: + CVE-2022-3266 Out of bounds read when decoding H264 + CVE-2022-40959 Bypassing FeaturePolicy restrictions on transient pages + CVE-2022-40960 Data-race when parsing non-UTF-8 URLs in threads + CVE-2022-40958 Bypassing...

Security fix for the ALT Linux 10 package php8.2 version 8.1.11-alt1

Sept. 30, 2022 Anton Farygin 8.1.11-alt1 - 8.1.10 - 8.1.11 fixes: CVE-2022-31628, CVE-2022-31629...

Security fix for the ALT Linux 10 package node version 16.17.1-alt1

Sept. 30, 2022 Vitaly Lipatov 16.17.1-alt1 - new version 16.17.1 with rpmrb script - set npm = 8.15.0 - CVE-2022-32212: DNS rebinding in --inspect on macOS High - CVE-2022-32213: bypass via obs-fold mechanic Medium - CVE-2022-35255: Weak randomness in WebCrypto keygen - CVE-2022-35256: HTTP Reque...

Security fix for the ALT Linux 10 package glpi version 9.5.9-alt1

9.5.9-alt1 built Sept. 16, 2022 Pavel Zilke in task 306811 Sept. 14, 2022 Pavel Zilke - New version 9.5.9 - This release fixes several critical security issues that has been recently discovered. Update is strongly recommended! - Security fixes: + CVE-2022-35945 : XSS through registration API +...

Security fix for the ALT Linux 10 package golang version 1.18.6-alt1

Sept. 14, 2022 Alexey Shabalin 1.18.6-alt1 - New version 1.18.6 Fixes: CVE-2022-27664...

Security fix for the ALT Linux 10 package samba version 4.16.4-alt2

Sept. 8, 2022 Evgeny Sinelnikov 4.16.4-alt2 - Add support Heimdal only of "ignore requester sid" global option for the correct operation of trust relationships with oldest versions of MS AD without KB5008380 Authentication updates CVE-2021-42287...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.15-alt1

3.2.15-alt1 built Aug. 30, 2022 Alexey Shabalin in task 305627 Aug. 22, 2022 Alexey Shabalin - new version 3.2.15 - Fixes for the following security vulnerabilities: + CVE-2022-34265 Potential SQL injection via Trunckind and Extractlookupname arguments. + CVE-2022-36359 Potential reflected file...

Security fix for the ALT Linux 10 package firefox-esr version 102.2.0-alt1

Aug. 25, 2022 Pavel Vasenkov 102.2.0-alt1 - New ESR version. - Security fixes: + CVE-2022-38472 Address bar spoofing via XSLT error handling + CVE-2022-38473 Cross-origin XSLT Documents would have inherited the parent's permissions + CVE-2022-38476 Data race and potential use-after-free in...

Security fix for the ALT Linux 10 package thunderbird version 102.2.0-alt1

Aug. 24, 2022 Pavel Vasenkov 102.2.0-alt1 - New version. - Security fixes: + CVE-2022-38472 Address bar spoofing via XSLT error handling + CVE-2022-38473 Cross-origin XSLT Documents would have inherited the parent's permissions + CVE-2022-38476 Data race and potential use-after-free in PK11Change...

Security fix for the ALT Linux 10 package postgresql12 version 12.12-alt1

12.12-alt1 built Aug. 18, 2022 Alexei Takaseev in task 305054 Aug. 10, 2022 Alexei Takaseev - 12.12 Fixes CVE-2022-2625...

Security fix for the ALT Linux 10 package samba version 4.15.9-alt1

4.15.9-alt1 built Aug. 15, 2022 Evgeny Sinelnikov in task 302667 July 31, 2022 Evgeny Sinelnikov - Update to security release of Samba 4.15 - Security fixes: + CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords Samba15047. + CVE-2022-32744: Samba AD...

Security fix for the ALT Linux 10 package postgresql15 version 14.5-alt1

Aug. 10, 2022 Alexei Takaseev 14.5-alt1 - 14.5 Fixes CVE-2022-2625...

Security fix for the ALT Linux 10 package gnutls30 version 3.6.16-alt2

3.6.16-alt2 built Aug. 5, 2022 Mikhail Efremov in task 304672 Aug. 2, 2022 Mikhail Efremov - Fix double free during gnutlspkcs7verify fixes: CVE-2022-2509...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 6.0.7-alt1

Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - The .NET 6.0.7 and .NET SDK 6.0.107 releases - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service...

Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 6.0.7-alt1

Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - .NET 6.0.7 - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 6.0.7-alt1

Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - The .NET 6.0.7 and .NET SDK 6.0.107 releases - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service...