Security fix for the ALT Linux 9 package libssh version 0.9.3-alt1

0.9.3-alt1 built Dec. 14, 2019 Sergey V Turchin in task 242718 Dec. 11, 2019 Sergey V Turchin - new version - security Fixes: CVE-2019-14889...

Security fix for the ALT Linux 10 package git version 2.24.1-alt1

Dec. 8, 2019 Dmitry V. Levin 2.24.1-alt1 - 2.24.0 - 2.24.1 fixes: CVE-2019-1348, CVE-2019-1387, CVE-2019-19604; this update also addresses a few Windows and/or NTFS issues fixes: CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354...

Security fix for the ALT Linux 9 package wireshark version 3.0.3-alt1

July 22, 2019 Anton Farygin 3.0.3-alt1 - 3.0.3 - fixes: ASN.1 BER and related dissectors crash. CVE-2019-13619...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.3-alt1

July 15, 2019 Alexey Shabalin 2.2.3-alt1 - 2.2.3 - build python3 only - rename package to python3-module-django2.2 - Fixes for the following security vulnerabilities: + CVE-2019-12781 Incorrect HTTP detection with reverse-proxy connecting via HTTPS + CVE-2019-12308 AdminURLFieldWidget XSS +...

Security fix for the ALT Linux 10 package firefox-esr version 60.8.0-alt1

July 9, 2019 Andrey Cherepanov 60.8.0-alt1 - New ESR version 60.8.0. - Fixed: + CVE-2019-9811 Sandbox escape via installation of malicious language pack + CVE-2019-11711 Script injection within domain through inner window reuse + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2q-alt1

Dec. 19, 2018 Dmitry V. Levin 1.0.2q-alt1 - 1.0.2p - 1.0.2q fixes CVE-2018-5407 and CVE-2018-0734. - Disabled krb5 support...

Security fix for the ALT Linux 9 package wireshark version 2.6.5-alt1

Dec. 3, 2018 Anton Farygin 2.6.5-alt1 - 2.6.5 - added devel package closes: 29869 - fixes: The Wireshark dissection engine could crash. CVE-2018-19625 The DCOM dissector could crash. CVE-2018-19626 The LBMPDM dissector could crash. CVE-2018-19623 The MMSE dissector could go into an infinite loop...

Security fix for the ALT Linux 8 package samba-DC version 4.7.9-alt1

Aug. 15, 2018 Evgeny Sinelnikov 4.7.9-alt1 - Update to summer security release - Security fixes: + CVE-2018-1139 Weak authentication protocol allowed + CVE-2018-10858 Insufficient input validation on client directory listing in libsmbclient + CVE-2018-10918 Denial of Service Attack on AD DC DRSUA...

Security fix for the ALT Linux 8 package samba-DC version 4.6.14-alt1

March 12, 2018 Evgeny Sinelnikov 4.6.14-alt1 - Update to spring security release - Security fixes: + CVE-2018-1050 Codenomicon crashes in spoolss server code + CVE-2018-1057 Unprivileged user can change any user and admin password...

Security fix for the ALT Linux 9 package postgresql9.6 version 9.6.8-alt1

March 2, 2018 Alexei Takaseev 9.6.8-alt1 - 9.6.8 - Fixes CVE-2018-1058...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2n-alt1

Dec. 7, 2017 Gleb Fotengauer-Malinovskiy 1.0.2n-alt1 - Updated to v1.0.2n fixes CVE-2017-3737, CVE-2017-3738. - Added --disable tsget knob. - Added support of s390x and mips architectures...

Security fix for the ALT Linux 8 package ocaml version 4.04.2-alt1.M80P.1

4.04.2-alt1.M80P.1 built July 12, 2017 Anton Farygin in task 185295 --- July 4, 2017 Anton Farygin - new version with security fixes: + CVE-2017-9772 Local privilege escalation issue with ocaml binaries...

Security fix for the ALT Linux 10 package firefox-esr version 52.0-alt1

May 8, 2017 Andrey Cherepanov 52.0-alt1 - New release 52.0 based on legion@ build. - Built with internal icu. - Fixed: + CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP + CVE-2017-5401: Memory Corruption when handling ErrorResult + CVE-2017-5402: Use-after-free working with events in...

Security fix for the ALT Linux 9 package bind version 9.10.4.P8-alt1

April 12, 2017 Dmitry V. Levin 9.10.4.P8-alt1 - 9.10.4-P6 - 9.10.4-P8 fixes: CVE-2017-3136, CVE-2017-3137, CVE-2017-3138. - bind.service: pass $CHROOT to named-checkconf closes: 33239. - bind.init: check named configuration on startup...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:25-alt0.M70P.1

3:25-alt0.M70P.1 built March 20, 2017 Sergey V Turchin in task 180552 March 20, 2017 Sergey V Turchin - new version - security fixes: CVE-2017-2997, CVE-2017-2998, CVE-2017-2999, CVE-2017-3000, CVE-2017-3001, CVE-2017-3002, CVE-2017-3003...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2k-alt0.M80P.1

1.0.2k-alt0.M80P.1 built Jan. 27, 2017 Gleb Fotengauer-Malinovskiy in task 177185 Jan. 26, 2017 Gleb Fotengauer-Malinovskiy - Backported to p8 branch fixes CVE-2016-7055, CVE-2017-3731, CVE-2017-3732...

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2h-alt2

June 8, 2016 Gleb Fotengauer-Malinovskiy 1.0.2h-alt2 - Backported upstream fix for CVE-2016-2178...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2h-alt1

May 3, 2016 Gleb Fotengauer-Malinovskiy 1.0.2h-alt1 - Updated to 1.0.2h fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...

Security fix for the ALT Linux 8 package samba version 4.4.2-alt2

4.4.2-alt2 built April 29, 2016 Andrey Cherepanov in task 164084 April 28, 2016 Andrey Cherepanov - Fix CVE-2016-2110/NTLMSSP regression https://bugzilla.samba.org/showbug.cgi?id=11849...

Security fix for the ALT Linux 10 package samba version 4.4.2-alt1

April 12, 2016 Andrey Cherepanov 4.4.2-alt1 - New version - Security fixes: - CVE-2015-5370 Multiple errors in DCE-RPC code - CVE-2016-2110 Man in the middle attacks possible with NTLMSSP - CVE-2016-2111 NETLOGON Spoofing Vulnerability - CVE-2016-2112 LDAP client and server don't enforce integrit...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1r-alt0.M70P.1

1.0.1r-alt0.M70P.1 built Jan. 28, 2016 Gleb Fotengauer-Malinovskiy in task 156755 Jan. 28, 2016 Gleb Fotengauer-Malinovskiy - Updated to v1.0.1r CVE-2015-3197 CVE-2016-0701...

Security fix for the ALT Linux 7 package kernel-image-std-def version 1:3.14.58-alt0.M70P.2

Jan. 19, 2016 Anton V. Boyarshinov 1:3.14.58-alt0.M70P.2 - CVE-2016-0728 fixed...

Security fix for the ALT Linux 6 package openssh version 6.7p1-alt1.M60P.1

6.7p1-alt1.M60P.1 built Jan. 18, 2016 Gleb Fotengauer-Malinovskiy in task 155940 Jan. 14, 2016 Gleb Fotengauer-Malinovskiy - openssh-clients: disabled UseRoaming fixes CVE-2016-0777 and CVE-2016-0778. - Backported to p6 branch...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt58

3:11-alt58 built Dec. 29, 2015 Sergey V Turchin in task 155486 Dec. 29, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643,...

Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.3

6:2.11.3-alt8.M60P.3 built Dec. 23, 2015 Dmitry V. Levin in task 155253 Dec. 23, 2015 Dmitry V. Levin - Backported upstream fixes for sw15330/CVE-2013-1914, sw14699/CVE-2013-4237, sw1585567/CVE-2013-4332, sw14134/CVE-2012-6656, sw17325/CVE-2014-6040, sw14547/CVE-2012-4412,4424...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt50

3:11-alt50 built July 15, 2015 Sergey V Turchin in task 146353 July 14, 2015 Sergey V Turchin - fix changelog - security NOT fixed: CVE-2015-5122, CVE-2015-5123...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt41

3:11-alt41 built Feb. 6, 2015 Sergey V Turchin in task 139918 Feb. 6, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0313, CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323,...

Security fix for the ALT Linux 6 package libpng version 1.2.47-alt1

Feb. 20, 2012 Dmitry V. Levin 1.2.47-alt1 - Updated to 1.2.47 fixes CVE-2011-3026...

Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt5

June 21, 2011 Dmitry V. Levin 6:2.11.3-alt5 - Updated to glibc-2.11.3-61-g78856c5 with some broken commits reverted. - Updated cryptblowfish to 1.1 fixes CVE-2011-2483...

Security fix for the ALT Linux 5 package openldap2.4 version 2.4.23-alt0.M50P.1

July 1, 2010 Andrey Cherepanov 2.4.23-alt0.M50P.1 - backport to p5 branch security fixes: CVE-2010-0212 and CVE-2010-0211...

Security fix for the ALT Linux 8 package qt4 version 4.5.2-alt6

Sept. 11, 2009 Sergey V Turchin 4.5.2-alt6 - add patch to fix CVE-2009-2700 - patch from kde-qt to add support for isOpen in mysql driver plugin - add patch from MDV to fix qmake wformat patch...

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8k-alt2

May 21, 2009 Evgeny Sinelnikov 0.9.8k-alt2 - Added extra symlinks for backwards compatibility with Fedora's libssl8. - Backported security updates from 0.9.8l: CVE-2009-1377, CVE-2009-1378, CVE-2009-1379...

Security fix for the ALT Linux 10 package clamav version 0.93-alt1

April 15, 2008 Victor Forsyuk 0.93-alt1 - 0.93 contains security fixes: CVE-2008-1100, CVE-2008-1387...

Security fix for the ALT Linux 5 package bzip2 version 1:1.0.5-alt1

March 18, 2008 Dmitry V. Levin 1:1.0.5-alt1 - Updated to 1.0.5 fixes CERT-FI 20469 as it applies to bzip2, CVE-2008-1372. - Removed explicit pathname provides and %post script requirements...

Security fix for the ALT Linux 9 package openssl10 version 0.9.8d-alt4

Oct. 10, 2007 Dmitry V. Levin 0.9.8d-alt4 - Backported upstream fix for off-by-one bug in the SSLgetsharedciphers function CVE-2007-5135...

Security fix for the ALT Linux 5 package libpng version 1.2.13-alt3

May 16, 2007 Dmitry V. Levin 1.2.13-alt3 - Imported upstream fix for pnghandletRNS bug CVE-2007-2445: a grayscale PNG image with a malformed tRNS chunk may crash some libpng applications...

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt5

Sept. 27, 2006 Dmitry V. Levin 0.9.7g-alt5 - Applied upstream fixes for DoS bugs in ASN1 parser CVE-2006-2937, CVE-2006-2940. - Applied fix for buffer overflow in SSLgetsharedciphers, discovery and patch from Tavis Ormandy and Will Drewry of the Google Security Team CVE-2006-3738. - Applied fix f...

Security fix for the ALT Linux 8 package openssl10 version 0.9.6l-alt2

March 17, 2004 Dmitry V. Levin 0.9.6l-alt2 - Fixed null-pointer assignment during SSL handshake CAN-2004-0079...

Security fix for the ALT Linux 10 package kubernetes version 1.26.3-alt1

1.26.3-alt1 built March 29, 2023 Alexander Stepchenko in task 317575 March 24, 2023 Alexander Stepchenko - 1.26.3 Fixes: CVE-2022-3172, CVE-2022-3162, CVE-2022-3294...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 6.0.7-alt1

Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - The .NET 6.0.7 and .NET SDK 6.0.107 releases - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service...

Security fix for the ALT Linux 10 package wireshark version 3.4.10-alt1

Nov. 24, 2021 Anton Farygin 3.4.10-alt1 - 3.4.10 Fixes: CVE-2021-39929, CVE-2021-39926, CVE-2021-39925, CVE-2021-39924, CVE-2021-39922, CVE-2021-39928, CVE-2021-39921, CVE-2021-39920...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.12-alt1

Feb. 17, 2021 Vitaly Lipatov 3.1.12-alt1 - new version 3.1.12 with rpmgs script - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-aspnetcore-3.1 version 3.1.12-alt1

Feb. 17, 2021 Vitaly Lipatov 3.1.12-alt1 - ASP.NET Core 3.1.12 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package mariadb version 10.4.13-alt1

10.4.13-alt1 built July 2, 2020 Alexey Shabalin in task 254197 June 28, 2020 Alexey Shabalin - 10.4.13 - Fixes for the following security vulnerabilities: + CVE-2020-2752 + CVE-2020-2812 + CVE-2020-2814 + CVE-2020-2760 + CVE-2020-13249...

Security fix for the ALT Linux 10 package clamav version 0.101.2-alt1

March 28, 2019 Sergey Y. Afonin 0.101.2-alt1 - 0.101.2 + CVE-2019-1787, CVE-2019-1789, CVE-2019-1788 - 0.101.1 and prior + CVE-2019-1786, CVE-2019-1785, CVE-2019-1798 - 0.101.1 and 0.101.0 only - switched to libpcre2...

Security fix for the ALT Linux 9 package wireshark version 2.6.3-alt1

Sept. 3, 2018 Anton Farygin 2.6.3-alt1 - 2.6.3 fixes: CVE-2018-16056, CVE-2018-16057, CVE-2018-16058...

Security fix for the ALT Linux 8 package postgresql10 version 10.5-alt0.M80P.1

10.5-alt0.M80P.1 built Aug. 15, 2018 Alexei Takaseev in task 211293 Aug. 11, 2018 Alexei Takaseev - 10.5 - Fixes CVE-2018-10915, CVE-2018-10925...

Security fix for the ALT Linux 9 package dotnet-coreclr-3.1 version 2.0.5-alt1

Feb. 22, 2018 Vitaly Lipatov 2.0.5-alt1 - new version 2.0.5 with rpmgs script - CVE-2018-0764, CVE-2018-0786 - backport patch: Add support for building under glibc 2.26...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 2.0.5-alt1

Feb. 22, 2018 Vitaly Lipatov 2.0.5-alt1 - new version 2.0.5 with rpmgs script - CVE-2018-0764, CVE-2018-0786 - backport patch: Add support for building under glibc 2.26...