Security fix for the ALT Linux 10 package glpi version 9.5.2-alt1

Oct. 26, 2020 Pavel Zilke 9.5.2-alt1 - New version 9.5.2 - Security fixes: + CVE-2020-15176 : SQL injection with a query parameter of user form + CVE-2020-15175 : Removal of .htaccess file in the files folder via a plugin endpoint + CVE-2020-15217 : Leakage issue with knowledge base +...

Security fix for the ALT Linux 10 package thunderbird version 78.4.0-alt1

Oct. 22, 2020 Andrey Cherepanov 78.4.0-alt1 - New version 78.4.0. - Fixes: + CVE-2020-15969 Use-after-free in usersctp + CVE-2020-15683 Memory safety bugs fixed in Thunderbird 78.4...

Security fix for the ALT Linux 10 package firefox-esr version 78.4.0-alt1

Oct. 20, 2020 Andrey Cherepanov 78.4.0-alt1 - New version 78.4.0. - Fixes: + CVE-2020-15969 Use-after-free in usersctp + CVE-2020-15683 Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4...

Security fix for the ALT Linux 10 package wireshark version 3.2.7-alt1

Sept. 30, 2020 Anton Farygin 3.2.7-alt1 - 3.2.7 - fixes: BLIP dissector crash. CVE-2020-25866 TCP dissector crash. CVE-2020-25862 MIME Multipart dissector crash. CVE-2020-25863...

Security fix for the ALT Linux 10 package thunderbird version 78.3.0-alt1

Sept. 25, 2020 Andrey Cherepanov 78.3.0-alt1 - New version 78.3.0. - Fixes: + CVE-2020-15677 Download origin spoofing via redirect + CVE-2020-15676 XSS when pasting attacker-controlled data into a contenteditable element + CVE-2020-15678 When recursing through layers while scrolling, an iterator...

Security fix for the ALT Linux 10 package firefox-esr version 78.3.0-alt1

Sept. 23, 2020 Andrey Cherepanov 78.3.0-alt1 - New release 78.3.0. - Fixes: + CVE-2020-15677 Download origin spoofing via redirect + CVE-2020-15676 XSS when pasting attacker-controlled data into a contenteditable element + CVE-2020-15678 When recursing through layers while scrolling, an iterator...

Security fix for the ALT Linux 10 package samba version 4.11.13-alt1

Sept. 19, 2020 Evgeny Sinelnikov 4.11.13-alt1 - Update to latest stable security release of the Samba 4.11 - Security fixes: + CVE-2020-1472: Unauthenticated domain takeover via netlogon "ZeroLogon" https://www.samba.org/samba/security/CVE-2020-1472.html...

Security fix for the ALT Linux 10 package node version 14.11.0-alt1

Sept. 16, 2020 Vitaly Lipatov 14.11.0-alt1 - new version 14.11.0 with rpmrb script - CVE-2020-8251: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests Critical - CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion High...

Security fix for the ALT Linux 10 package golang version 1.15.2-alt1

Sept. 11, 2020 Alexey Shabalin 1.15.2-alt1 - New version 1.15.2. Fixes: CVE-2020-24553...

Security fix for the ALT Linux 10 package gnutls30 version 3.6.15-alt1

Sept. 9, 2020 Mikhail Efremov 3.6.15-alt1 - Updated Url tag. - Updated to 3.6.15 fixes: CVE-2020-24659...

Security fix for the ALT Linux 10 package etcd version 3.4.13-alt1

Sept. 5, 2020 Alexey Shabalin 3.4.13-alt1 - 3.4.13 Fixes: CVE-2020-15106, CVE-2020-15112, CVE-2020-15113, CVE-2020-15114, CVE-2020-15115, CVE-2020-15136...

Security fix for the ALT Linux 10 package thunderbird version 78.2.1-alt1

Sept. 2, 2020 Andrey Cherepanov 78.2.1-alt1 - New version 78.2.1. - Fixes: + CVE-2020-15663 Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege + CVE-2020-15664 Attacker-induced prompt for extension installation + CVE-2020-15670 Memory safety bugs...

Security fix for the ALT Linux 10 package firefox-esr version 78.2.0-alt1

Aug. 25, 2020 Andrey Cherepanov 78.2.0-alt1 - New release 78.2.0. - Fixes: + CVE-2020-15663 Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege + CVE-2020-15664 Attacker-induced prompt for extension installation + CVE-2020-15670 Memory safety bugs...

Security fix for the ALT Linux 10 package bind version 9.11.22-alt1

Aug. 21, 2020 Stanislav Levin 9.11.22-alt1 - 9.11.20 - 9.11.22 fixes: CVE-2020-8622, CVE-2020-8623, CVE-2020-8624...

Security fix for the ALT Linux 10 package firejail version 0.9.62.4-alt1

Aug. 19, 2020 Aleksei Nikiforov 0.9.62.4-alt1 - Updated to upstream version 0.9.62.4 Fixes: CVE-2020-17367, CVE-2020-17368...

Security fix for the ALT Linux 10 package postgresql15 version 12.4-alt1

Aug. 12, 2020 Alexei Takaseev 12.4-alt1 - 12.4 Fixes CVE-2020-14349, CVE-2020-14350...

Security fix for the ALT Linux 10 package golang version 1.14.7-alt1

Aug. 10, 2020 Alexey Shabalin 1.14.7-alt1 - New version 1.14.7. Fixes: CVE-2020-16845...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.6-alt1

Aug. 3, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...