Security fix for the ALT Linux 10 package thunderbird version 91.6.0-alt1

91.6.0-alt1 built Feb. 17, 2022 Pavel Vasenkov in task 295262 Feb. 12, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-22753 Privilege Escalation to SYSTEM on Windows via Maintenance Service + CVE-2022-22754 Extensions could have bypassed permission confirmation during update +...

Security fix for the ALT Linux 10 package grafana version 8.1.8-alt1

8.1.8-alt1 built Dec. 16, 2021 Alexey Shabalin in task 291697 Dec. 9, 2021 Alexey Shabalin - 8.1.8 Fixes: CVE-2021-43798, CVE-2021-39226...

Security fix for the ALT Linux 9 package php7 version 7.3.33-alt1

7.3.33-alt1 built Nov. 29, 2021 Anton Farygin in task 289998 Nov. 18, 2021 Anton Farygin - 7.3.33 Fixes: CVE-2021-21707...

Security fix for the ALT Linux 9 package freerdp version 2.4.1-alt1

2.4.1-alt1 built Nov. 1, 2021 Andrey Cherepanov in task 287815 Oct. 21, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-41159 Improper client input validation for gateway connections allows to overwrite memory + CVE-2021-41160 Improper region checks in all clients allow out of...

Security fix for the ALT Linux 10 package postgresql15 version 13.4-alt1

Aug. 11, 2021 Alexei Takaseev 13.4-alt1 - 13.4 Fixes CVE-2021-3677...

Security fix for the ALT Linux 9 package dotnet-coreclr-3.1 version 3.1.16-alt1

June 30, 2021 Vitaly Lipatov 3.1.16-alt1 - new version 3.1.16 with rpmrb script - .NET Core 3.1.16 - CVE-2021-31204: .NET Core Elevation of Privilege Vulnerability...

Security fix for the ALT Linux 9 package polkit version 0.116-alt2.M90P.2

0.116-alt2.M90P.2 built June 15, 2021 Denis Medvedev in task 274034 June 8, 2021 Denis Medvedev - Fixes: CVE-2021-3560...

Security fix for the ALT Linux 9 package dnsmasq version 2.85-alt1

2.85-alt1 built April 12, 2021 Mikhail Efremov in task 269274 --- April 9, 2021 Mikhail Efremov - Dropped obsoleted patch. - Updated to 2.83 fixes: CVE-2021-3448...

Security fix for the ALT Linux 10 package gnutls30 version 3.6.15-alt2

March 22, 2021 Mikhail Efremov 3.6.15-alt2 - Fixed gnulib tests. - Fixed CVE-2021-20231, CVE-2021-20232 fixes: CVE-2021-20231, CVE-2021-20232. - Fixed testpkcs11. - Dropped self-provide from devel subpackage...

Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.12-alt1

3.1.12-alt1 built March 1, 2021 Vitaly Lipatov in task 266709 Feb. 17, 2021 Vitaly Lipatov - new version 3.1.12 with rpmgs script - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 6.0.0.preview.1-alt1

Feb. 23, 2021 Vitaly Lipatov 6.0.0.preview.1-alt1 Wed Feb 17 2021 Vitaly Lipatov &[email protected] 5.0.3-alt1 - .NET 5.0.3 and .NET SDK 5.0.103 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.3-alt1

Feb. 17, 2021 Vitaly Lipatov 5.0.3-alt1 - new version 5.0.3 with rpmgs script - .NET 5.0.3 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package glpi version 9.5.3-alt1

9.5.3-alt1 built Dec. 26, 2020 Pavel Zilke in task 263876 Dec. 5, 2020 Pavel Zilke - New version 9.5.3 - This is a security release, upgrading is recommended - Security fixes: + CVE-2020-27662 : Insecure Direct Object Reference on ajax/comments.php + CVE-2020-27663 : Insecure Direct Object...

Security fix for the ALT Linux 10 package thunderbird version 78.6.0-alt1

Dec. 15, 2020 Andrey Cherepanov 78.6.0-alt1 - New version 78.6.0. - Security fixes: + CVE-2020-16042 Operations on a BigInt could have caused uninitialized memory to be exposed + CVE-2020-26971 Heap buffer overflow in WebGL + CVE-2020-26973 CSS Sanitizer performed incorrect sanitization +...

Security fix for the ALT Linux 8 package postgresql10 version 10.15-alt0.M80P.1

Nov. 17, 2020 Alexei Takaseev 10.15-alt0.M80P.1 - 10.15 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 10 package postgresql15-1C version 12.5-alt1

Nov. 16, 2020 Alexei Takaseev 12.5-alt1 - 12.5 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696 - Re-applay patch from 1C...

Security fix for the ALT Linux 8 package postgresql12 version 12.4-alt0.M80P.1

12.4-alt0.M80P.1 built Aug. 20, 2020 Alexei Takaseev in task 256188 Aug. 12, 2020 Alexei Takaseev - 12.4 Fixes CVE-2020-14349, CVE-2020-14350...

Security fix for the ALT Linux 10 package firefox-esr version 78.0.1-alt1

July 4, 2020 Alexey Gladkov 78.0.1-alt1 - New release 78.0.1. - Fixes: + CVE-2020-12415: AppCache manifest poisoning due to url encoded character processing + CVE-2020-12416: Use-after-free in WebRTC VideoBroadcaster + CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags ...

Security fix for the ALT Linux 10 package php8.0 version 7.3.18-alt1

June 1, 2020 Anton Farygin 7.3.18-alt1 - 7.3.18 Fixes: CVE-2019-11048...

Security fix for the ALT Linux 9 package php7 version 7.3.17-alt1

7.3.17-alt1 built April 24, 2020 Anton Farygin in task 250362 April 21, 2020 Anton Farygin - 7.3.17 Fixes: CVE-2020-7067...

Security fix for the ALT Linux 10 package php8.1 version 7.3.17-alt1

April 21, 2020 Anton Farygin 7.3.17-alt1 - 7.3.17 Fixes: CVE-2020-7067...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.43-alt1

1:2.4.43-alt1 built April 8, 2020 Anton Farygin in task 249454 April 6, 2020 Anton Farygin - 2.4.43 Fixes: CVE-2020-1927, CVE-2020-1934...

Security fix for the ALT Linux 10 package node version 13.8.0-alt1

Feb. 11, 2020 Vitaly Lipatov 13.8.0-alt1 - new version 13.8.0 with rpmrb script - CVE-2019-15606, CVE-2019-15605, CVE-2019-15604...

Security fix for the ALT Linux 10 package bind version 9.11.13-alt1

Nov. 21, 2019 Stanislav Levin 9.11.13-alt1 - 9.11.12 - 9.11.13 fixes: CVE-2019-6477...

Security fix for the ALT Linux 10 package golang version 1.12.11-alt1

Nov. 6, 2019 Alexey Shabalin 1.12.11-alt1 - New version 1.12.11. Fixes: CVE-2019-17596...

Security fix for the ALT Linux 8 package libvirt version 3.10.0-alt3

3.10.0-alt3 built Aug. 29, 2019 Grigory Ustinov in task 236664 Aug. 27, 2019 Grigory Ustinov - Fix CVE Fixes: CVE-2019-3840...

Security fix for the ALT Linux 9 package php7 version 7.2.21-alt1

Aug. 3, 2019 Anton Farygin 7.2.21-alt1 - 7.2.21 Fixes: CVE-2019-11042, CVE-2019-11041...

Security fix for the ALT Linux 10 package golang version 1.11.5-alt1

Jan. 24, 2019 Alexey Shabalin 1.11.5-alt1 - 1.11.5 - fixed CPU DoS vulnerability affecting P-521 and P-384 Fixes: CVE-2019-6486 - add ppc64le to goarches...

Security fix for the ALT Linux 9 package wireshark version 2.6.4-alt1

Oct. 13, 2018 Anton Farygin 2.6.4-alt1 - 2.6.4 fixes: CVE-2018-18227, CVE-2018-18225, CVE-2018-18225, CVE-2018-12086 - disabled build gtk+ UI...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.159-alt0.M80P.1

1:4.4.159-alt0.M80P.1 built Oct. 9, 2018 kernelbot in task 213838 Oct. 1, 2018 Kernel Bot - v4.4.159 Fixes: CVE-2018-14633...

Security fix for the ALT Linux 9 package krb5 version 1.16.1-alt1.S1

Aug. 27, 2018 Ivan A. Melnikov 1.16.1-alt1.S1 - 1.16.1 CVE-2018-5729, CVE-2018-5730...

Security fix for the ALT Linux 10 package samba version 4.8.4-alt1.S1

Aug. 14, 2018 Evgeny Sinelnikov 4.8.4-alt1.S1 - Update to summer security release - Security fixes: + CVE-2018-1139 Weak authentication protocol allowed + CVE-2018-1140 Denial of Service Attack on DNS and LDAP server + CVE-2018-10858 Insufficient input validation on client directory listing in...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.138-alt0.M80P.1

June 19, 2018 Kernel Bot 1:4.4.138-alt0.M80P.1 - v4.4.138 Fixes: CVE-2018-10853...

Security fix for the ALT Linux 10 package thunderbird version 52.8.0-alt1

May 19, 2018 Andrey Cherepanov 52.8.0-alt1 - New version 52.8.0. - Enigmail 2.0.4. - Fixes: + CVE-2018-5183 Backport critical security fixes in Skia + CVE-2018-5184 Full plaintext recovery in S/MIME via chosen-ciphertext attack + CVE-2018-5154 Use-after-free with SVG animations and clip paths +...

Security fix for the ALT Linux 10 package firefox-esr version 52.7.0-alt1

March 10, 2018 Andrey Cherepanov 52.7.0-alt1 - New ESR version 52.7.0. - Fixes: + CVE-2018-5127 Buffer overflow manipulating SVG animatedPathSegList + CVE-2018-5129 Out-of-bounds write with malformed IPC messages + CVE-2018-5130 Mismatched RTP payload type can trigger memory corruption +...

Security fix for the ALT Linux 8 package memcached version 1.5.6-alt1.M80P.1

1.5.6-alt1.M80P.1 built March 6, 2018 Alexey Shabalin in task 201376 March 4, 2018 Alexey Shabalin - 1.5.6 - disable UDP port by default fixed CVE-2018-1000115 - drop scripts package - add tool package - add [email protected] for allow start "instanced" version, like 'memcached@11211'...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.8-alt0.M80P.1

9.6.8-alt0.M80P.1 built March 2, 2018 Alexei Takaseev in task 201180 March 2, 2018 Alexei Takaseev - 9.6.8 - Fixes CVE-2018-1058...

Security fix for the ALT Linux 8 package mariadb version 10.1.30-alt1

Jan. 9, 2018 Alexey Shabalin 10.1.30-alt1 - 10.1.30 - Fixes for the following security vulnerabilities: + CVE-2017-15365...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2n-alt1

Dec. 7, 2017 Gleb Fotengauer-Malinovskiy 1.0.2n-alt1 - Updated to v1.0.2n fixes CVE-2017-3737, CVE-2017-3738. - Added --disable tsget knob. - Added support of s390x and mips architectures...

Security fix for the ALT Linux 10 package php8.0 version 7.1.11-alt1

Nov. 3, 2017 Anton Farygin 7.1.11-alt1 - 7.1.11 Fixes: CVE-2016-1283...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.45-alt0.M70P.1.1

1:4.1.45-alt0.M70P.1.1 built Oct. 19, 2017 kernelbot in task 191162 Oct. 18, 2017 Kernel Bot - v4.1.45 Fixes: CVE-2017-11600...

Security fix for the ALT Linux 10 package clamav version 0.99.2-alt3

Sept. 25, 2017 Anton V. Boyarshinov 0.99.2-alt3 - Fixes: + CVE-2017-6418 remote attackers can cause a denial of service out-of-bounds read via a crafted e-mail message + CVE-2017-6420 remote attackers can cause a denial of service use-after-free via a crafted PE file with WWPack compression...

Security fix for the ALT Linux 10 package thunderbird version 52.2.0-alt1

June 22, 2017 Andrey Cherepanov 52.2.0-alt1 - New version 52.2.0 - Security fixes: + CVE-2017-5472: Use-after-free using destroyed node when regenerating trees + CVE-2017-7749: Use-after-free during docshell reloading + CVE-2017-7750: Use-after-free with track elements + CVE-2017-7751:...

Security fix for the ALT Linux 9 package openvpn version June

June 21, 2017 Nikolay A. Fetisov 2.4.3-alt1 - New version - Security fixes: + CVE-2017-7522 Post-authentication --x509-track remote DoS + CVE-2017-7521 Post-authentication remote-triggerable memory leaks + CVE-2017-7521 Potential post-authentication remote code execution on servers that use the...

Security fix for the ALT Linux 8 package samba version 4.6.4-alt1

May 24, 2017 Evgeny Sinelnikov 4.6.4-alt1 - Update to second spring security release - Fix longtime initialization bug in ldb proxy - Security fixes: + CVE-2017-7494 Remote code execution from a writable share...

Security fix for the ALT Linux 10 package firefox-esr version 45.9.0-alt1

April 20, 2017 Andrey Cherepanov 45.9.0-alt1 - New ESR version - Security fixes: + CVE-2017-5429: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, + CVE-2017-5462: DRBG flaw in NSS + CVE-2017-5445: Uninitialized values used while parsing + CVE-2017-5469: Potential Buffer overflow in...

Security fix for the ALT Linux 9 package mailman version 5:2.1.23-alt0.1.20160915

Sept. 24, 2016 Konstantin Lepikhov 5:2.1.23-alt0.1.20160915 - LP shapshot 20160916. - Security fixes: + CVE-2016-6893: Extend CSRF protection to user options page...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt63

3:11-alt63 built June 27, 2016 Sergey V Turchin in task 166414 June 27, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132, CVE-2016-4133,...

Security fix for the ALT Linux 7 package ImageMagick version 6.8.4.10-alt3.M70P.2

6.8.4.10-alt3.M70P.2 built June 6, 2016 Andrey Cherepanov in task 165565 June 6, 2016 Andrey Cherepanov - Apply security patch from Debian: Disable support for reading input from a shell command, or writing output to a shell command. This was done by the pipe | prefix. It was possible to perform ...

Security fix for the ALT Linux 8 package squid version 3.5.19-alt1

3.5.19-alt1 built May 10, 2016 Gleb Fotengauer-Malinovskiy in task 164463 May 9, 2016 Gleb Fotengauer-Malinovskiy - Updated to 3.5.19 inludes fixes for CVE-2016-4553, CVE-2016-4554, CVE-2016-4555, CVE-2016-4556...