Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.11-alt1

Jan. 28, 2021 Vitaly Lipatov 3.1.11-alt1 - new version 3.1.11 with rpmgs script - .NET Core 3.1.11 - January 12, 2021 - CVE-2021-1723: ASP.NET Core Denial of Service Vulnerability - CVE-2020-1045: Microsoft ASP.NET Core Security Feature Bypass Vulnerability - CVE-2020-1597: NET Core Remote Code...

Security fix for the ALT Linux 10 package firefox-esr version 78.7.0-alt1

Jan. 26, 2021 Andrey Cherepanov 78.7.0-alt1 - New version 78.7.0. - Security fixes: + CVE-2021-23953 Cross-origin information leakage via redirected PDF requests + CVE-2021-23954 Type confusion when using logical assignment operators in JavaScript switch statements + CVE-2020-26976 HTTPS pages...

Security fix for the ALT Linux 10 package dnsmasq version 2.83-alt1

Jan. 22, 2021 Mikhail Efremov 2.83-alt1 - Use useradd -N instead of -n. - Updated to 2.83 fixes: CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687...

Security fix for the ALT Linux 10 package golang version 1.15.7-alt1

Jan. 20, 2021 Alexey Shabalin 1.15.7-alt1 - New version 1.15.7. - Fixes: + CVE-2021-3114 + CVE-2021-3115...

Security fix for the ALT Linux 10 package edk2 version 20201127-alt1

Jan. 17, 2021 Alexey Shabalin 20201127-alt1 - edk2-stable202011 Fixes: CVE-2019-14584, CVE-2019-11098...

Security fix for the ALT Linux 10 package thunderbird version 78.6.1-alt1

Jan. 12, 2021 Andrey Cherepanov 78.6.1-alt1 - New version 78.6.1. - Security fixes: + CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...

Security fix for the ALT Linux 10 package firefox-esr version 78.6.1-alt1

Jan. 6, 2021 Andrey Cherepanov 78.6.1-alt1 - New version 78.6.1. - Security fixes: + CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...

Security fix for the ALT Linux 10 package libtiff version 4.2.0-alt1

Dec. 25, 2020 Vladimir D. Seleznev 4.2.0-alt1 - Updated to v4.2.0 fixed CVE-2020-35521, CVE-2020-35522, CVE-2020-35523 and CVE-2020-35524...

Security fix for the ALT Linux 10 package firefox-esr version 78.6.0-alt1

Dec. 14, 2020 Andrey Cherepanov 78.6.0-alt1 - New version 78.6.0. - Fixes: + CVE-2020-16042 Operations on a BigInt could have caused uninitialized memory to be exposed + CVE-2020-26971 Heap buffer overflow in WebGL + CVE-2020-26973 CSS Sanitizer performed incorrect sanitization + CVE-2020-26974...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1i-alt1

Dec. 8, 2020 Gleb Fotengauer-Malinovskiy 1.1.1i-alt1 - Updated to 1.1.1i fixes CVE-2020-1971...

Security fix for the ALT Linux 10 package thunderbird version 78.5.1-alt1

Dec. 2, 2020 Andrey Cherepanov 78.5.1-alt1 - New version 78.5.1. - Security fixes: + CVE-2020-26970 Stack overflow due to incorrect parsing of SMTP server response codes...

Security fix for the ALT Linux 10 package thunderbird version 78.5.0-alt1

Nov. 19, 2020 Andrey Cherepanov 78.5.0-alt1 - New version 78.5.0. - Fixes: + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls + CVE-2020-26953 Fullscreen...

Security fix for the ALT Linux 10 package firefox-esr version 78.5.0-alt1

Nov. 16, 2020 Andrey Cherepanov 78.5.0-alt1 - New version 78.5.0. - Fixes: + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls + CVE-2020-26953 Fullscreen...

Security fix for the ALT Linux 10 package node version 14.15.1-alt1

Nov. 16, 2020 Vitaly Lipatov 14.15.1-alt1 - new version 14.15.1 with rpmrb script - set c-ares = 1.16.1-alt2 - CVE-2020-8277: Denial of Service through DNS request High...

Security fix for the ALT Linux 10 package postgresql14 version 13.1-alt1

Nov. 16, 2020 Alexei Takaseev 13.1-alt1 - 13.1 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 10 package postgresql12 version 12.5-alt1

Nov. 16, 2020 Alexei Takaseev 12.5-alt1 - 12.5 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 10 package golang version 1.15.5-alt1

Nov. 14, 2020 Alexey Shabalin 1.15.5-alt1 - New version 1.15.5. - Fixes: + CVE-2020-28362 + CVE-2020-28366 + CVE-2020-28367...

Security fix for the ALT Linux 10 package firefox-esr version 78.4.1-alt1

Nov. 10, 2020 Andrey Cherepanov 78.4.1-alt1 - New version 78.4.1. - Fixes: + CVE-2020-26950 Write side effects in MCallGetProperty opcode not accounted for...

Security fix for the ALT Linux 10 package libxml2 version 1:2.9.10-alt4

Nov. 6, 2020 Aleksei Nikiforov 1:2.9.10-alt4 - Applied security fixes from upstream Fixes: CVE-2019-20388, CVE-2020-7595, CVE-2020-24977...

Security fix for the ALT Linux 10 package samba version 4.12.9-alt1

Oct. 29, 2020 Evgeny Sinelnikov 4.12.9-alt1 - Update to latest stable security release of the Samba 4.12 - Security fixes: + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify + CVE-2020-14323: Unprivileged user can crash winbind + CVE-2020-14383: An authenticated user can...