Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 2.0.5-alt1

Feb. 22, 2018 Vitaly Lipatov 2.0.5-alt1 - new version 2.0.5 with rpmgs script - CVE-2018-0764, CVE-2018-0786 - backport patch: Add support for building under glibc 2.26...

Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 2.0.5-alt1

Feb. 5, 2018 Vitaly Lipatov 2.0.5-alt1 - new version 2.0.5 with rpmgs script - CVE-2018-0764, CVE-2018-0786...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 2.0.5-alt1

Feb. 5, 2018 Vitaly Lipatov 2.0.5-alt1 - new version 2.0.5 with rpmgs script - CVE-2018-0764, CVE-2018-0786...

Security fix for the ALT Linux 10 package clamav version 0.99.3-alt1

Jan. 28, 2018 Sergey Y. Afonin 0.99.3-alt1 - 0.99.3 multiple CVE's, look to README - removed cve-2017-6418.patch and cve-2017-6420.patch in upstream now...

Security fix for the ALT Linux 10 package firefox-esr version 52.6.0-alt1

Jan. 22, 2018 Andrey Cherepanov 52.6.0-alt1 - New ESR version 52.6.0 - Fixes: + CVE-2018-5095 Integer overflow in Skia library during edge builder allocation + CVE-2018-5096 Use-after-free while editing form elements + CVE-2018-5097 Use-after-free when source document is manipulated during XSLT +...

Security fix for the ALT Linux 10 package firefox-esr version 52.5.2-alt1

Dec. 10, 2017 Andrey Cherepanov 52.5.2-alt1 - New ESR version 52.5.2 - Fixes: + CVE-2017-7843 Web worker in Private Browsing mode can write IndexedDB data - Build with DBUS support ALT 34302...

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2n-alt1

Dec. 7, 2017 Gleb Fotengauer-Malinovskiy 1.0.2n-alt1 - Updated to v1.0.2n fixes CVE-2017-3737, CVE-2017-3738. - Added --disable tsget knob. - Added support of s390x and mips architectures...

Security fix for the ALT Linux 10 package samba version 4.6.11-alt1.S1

Nov. 21, 2017 Evgeny Sinelnikov 4.6.11-alt1.S1 - Second autumn security release Fixes: CVE-2017-14746, CVE-2017-15275...

Security fix for the ALT Linux 10 package firefox-esr version 52.5.0-alt1

Nov. 15, 2017 Andrey Cherepanov 52.5.0-alt1 - New ESR version 52.5.0 - Fixes: + CVE-2017-7828 Use-after-free of PressShell while restyling layout + CVE-2017-7830 Cross-origin URL information leak through Resource + CVE-2017-7826 Memory safety bugs fixed in Firefox 57 and Firefox ESR...

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2m-alt1

Nov. 4, 2017 Gleb Fotengauer-Malinovskiy 1.0.2m-alt1 - Updated to v1.0.2m fixes CVE-2017-3735, CVE-2017-3736...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.28-alt1

Oct. 10, 2017 Anton Farygin 1:2.4.28-alt1 - new version 2.4.28 - disabled NameVirtualHost directive in portsall.conf closes: 32269 - increased timeout for restarting httpd on SysVinit sytems closes: 31062 - increased LOOPSSTART and TimeoutStartSec closes: 33978 - fixes: CVE-2017-9798 Corrupted or...

Security fix for the ALT Linux 10 package dnsmasq version 2.78-alt1

Oct. 6, 2017 Mikhail Efremov 2.78-alt1 - Updated to 2.78 fixes: CVE-2017-13704, CVE-2017-14491, CVE-2017-14492, CVE-2017-14493, CVE-2017-14494, CVE-2017-14495, CVE-2017-14496...

Security fix for the ALT Linux 10 package firefox-esr version 52.4.0-alt1

Sept. 29, 2017 Andrey Cherepanov 52.4.0-alt1 - New ESR version 52.4.0 - Fixes: + CVE-2017-7793 Use-after-free with Fetch API + CVE-2017-7818 Use-after-free during ARIA array manipulation + CVE-2017-7819 Use-after-free while resizing images in design mode + CVE-2017-7824 Buffer overflow when drawi...

Security fix for the ALT Linux 10 package clamav version 0.99.2-alt3

Sept. 25, 2017 Anton V. Boyarshinov 0.99.2-alt3 - Fixes: + CVE-2017-6418 remote attackers can cause a denial of service out-of-bounds read via a crafted e-mail message + CVE-2017-6420 remote attackers can cause a denial of service use-after-free via a crafted PE file with WWPack compression...

Security fix for the ALT Linux 10 package samba version 4.6.8-alt1.S1

Sept. 20, 2017 Evgeny Sinelnikov 4.6.8-alt1.S1 - Update for autumn security release: + CVE-2017-12150 SMB1/2/3 connections may not require signing where they should + CVE-2017-12151 SMB3 connections don't keep encryption across DFS redirects + CVE-2017-12163 Server memory information leak over SM...

Security fix for the ALT Linux 10 package firefox-esr version 52.3.0-alt1

Aug. 8, 2017 Andrey Cherepanov 52.3.0-alt1 - New ESR version 52.3.0 - Security fixes: + CVE-2017-7798: XUL injection in the style editor in devtools + CVE-2017-7800: Use-after-free in WebSockets during disconnection + CVE-2017-7801: Use-after-free with marquee during window resizing +...

Security fix for the ALT Linux 10 package samba version 4.6.6-alt1.S1

July 12, 2017 Evgeny Sinelnikov 4.6.6-alt1.S1 - Update to summer security release - Security fixes: + CVE-2017-11103 Orpheus' Lyre KDC-REP service name validation...

Security fix for the ALT Linux 10 package thunderbird version 52.2.0-alt1

June 22, 2017 Andrey Cherepanov 52.2.0-alt1 - New version 52.2.0 - Security fixes: + CVE-2017-5472: Use-after-free using destroyed node when regenerating trees + CVE-2017-7749: Use-after-free during docshell reloading + CVE-2017-7750: Use-after-free with track elements + CVE-2017-7751:...

Security fix for the ALT Linux 10 package firefox-esr version 52.2.0-alt1

June 21, 2017 Andrey Cherepanov 52.2.0-alt1 - New ESR version 52.2.0 - Security fixes: + CVE-2017-5472: Use-after-free using destroyed node when regenerating trees + CVE-2017-7749: Use-after-free during docshell reloading + CVE-2017-7750: Use-after-free with track elements + CVE-2017-7751:...

Security fix for the ALT Linux 10 package firefox-esr version 52.0-alt1

May 8, 2017 Andrey Cherepanov 52.0-alt1 - New release 52.0 based on legion@ build. - Built with internal icu. - Fixed: + CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP + CVE-2017-5401: Memory Corruption when handling ErrorResult + CVE-2017-5402: Use-after-free working with events in...