Security fix for the ALT Linux 9 package postgresql12 version 12.9-alt0.M90P.1

12.9-alt0.M90P.1 built Dec. 3, 2021 Alexei Takaseev in task 289302 Nov. 10, 2021 Alexei Takaseev - 12.9 Fixes CVE-2021-23214, CVE-2021-23222...

Security fix for the ALT Linux 9 package mailman version 5:2.1.36-alt1

Nov. 13, 2021 Konstantin Lepikhov 5:2.1.36-alt1 - Updated to 2.1.36. - Security fixes: + CVE-2021-43331: A potential XSS attack via the user options. + CVE-2021-43332: A potential for for a list moderator to carry out an off-line brute force attack to obtain the list admin password...

Security fix for the ALT Linux 10 package php8.1 version 8.0.11-alt1

Sept. 23, 2021 Anton Farygin 8.0.11-alt1 - 8.0.11 Fixes: CVE-2021-21706...

Security fix for the ALT Linux 9 package ntfs-3g version 2:2021.8.22-alt1

2:2021.8.22-alt1 built Sept. 10, 2021 Valery Inozemtsev in task 284295 Aug. 31, 2021 Valery Inozemtsev - 2021.8.22 Fixes: CVE-2021-33285, CVE-2021-35269, CVE-2021-35268, CVE-2021-33289, CVE-2021-33286, CVE-2021-35266, CVE-2021-33287, CVE-2021-35267, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253,...

Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.12.7-alt1_0jpp10

Aug. 25, 2021 Andrey Cherepanov 0:11.0.12.7-alt10jpp10 - new version - security fixes: + CVE-2021-2341: Improve file transfers + CVE-2021-2369: Better jar file validation + CVE-2021-2388: Enhance compiler validation + CVE-2021-2161: Less ambiguous processing + CVE-2021-2163: Enhance opening JARs ...

Security fix for the ALT Linux 10 package postgresql12 version 12.8-alt1

12.8-alt1 built Aug. 16, 2021 Alexei Takaseev in task 282403 Aug. 11, 2021 Alexei Takaseev - 12.8 Fixes CVE-2021-3677...

Security fix for the ALT Linux 10 package node version 14.17.4-alt1

14.17.4-alt1 built Aug. 2, 2021 Vitaly Lipatov in task 281579 July 30, 2021 Vitaly Lipatov - new version 14.17.4 with rpmrb script - CVE-2021-22930: Use after free on close http2 on stream canceling High - set npm = 6.14.14 - restore minimum ICU version to 65...

Security fix for the ALT Linux 10 package runc version 1.0.0-alt17.rc95

June 18, 2021 Vladimir Didenko 1.0.0-alt17.rc95 - New version Fixes: CVE-2021-30465...

Security fix for the ALT Linux 9 package tcpreplay version 4.3.4-alt1

May 11, 2021 Anton Farygin 4.3.4-alt1 - 4.3.4 Fixes: CVE-2020-24266, CVE-2020-24265...

Security fix for the ALT Linux 9 package wireshark version 3.4.3-alt1

3.4.3-alt1 built March 1, 2021 Anton Farygin in task 266949 Feb. 24, 2021 Anton Farygin - 3.4.3 Fixes: CVE-2021-22173, CVE-2021-22174...

Security fix for the ALT Linux 10 package bind version 9.11.28-alt1

Feb. 18, 2021 Stanislav Levin 9.11.28-alt1 - 9.11.25 - 9.11.28 fixes: CVE-2020-8625...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.3-alt1

5.0.3-alt1 built Feb. 18, 2021 Vitaly Lipatov in task 266508 Feb. 17, 2021 Vitaly Lipatov - .NET 5.0.3 and .NET SDK 5.0.103 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.12-alt1

Feb. 17, 2021 Vitaly Lipatov 3.1.12-alt1 - .NET Core 3.1.12 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.10-alt1

Dec. 2, 2020 Valery Inozemtsev 2:1.20.10-alt1 - 1.20.10 fixes: CVE-2020-25712, CVE-2020-14360...

Security fix for the ALT Linux 10 package samba version 4.12.9-alt1

Oct. 29, 2020 Evgeny Sinelnikov 4.12.9-alt1 - Update to latest stable security release of the Samba 4.12 - Security fixes: + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify + CVE-2020-14323: Unprivileged user can crash winbind + CVE-2020-14383: An authenticated user can...

Security fix for the ALT Linux 10 package thunderbird version 78.3.0-alt1

Sept. 25, 2020 Andrey Cherepanov 78.3.0-alt1 - New version 78.3.0. - Fixes: + CVE-2020-15677 Download origin spoofing via redirect + CVE-2020-15676 XSS when pasting attacker-controlled data into a contenteditable element + CVE-2020-15678 When recursing through layers while scrolling, an iterator...

Security fix for the ALT Linux 9 package gnutls30 version 3.6.15-alt1

3.6.15-alt1 built Sept. 15, 2020 Mikhail Efremov in task 257743 Sept. 9, 2020 Mikhail Efremov - Updated Url tag. - Updated to 3.6.15 fixes: CVE-2020-24659...

Security fix for the ALT Linux 10 package firefox-esr version 78.2.0-alt1

Aug. 25, 2020 Andrey Cherepanov 78.2.0-alt1 - New release 78.2.0. - Fixes: + CVE-2020-15663 Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege + CVE-2020-15664 Attacker-induced prompt for extension installation + CVE-2020-15670 Memory safety bugs...

Security fix for the ALT Linux 8 package clamav version 0.102.4-alt1

0.102.4-alt1 built July 30, 2020 Sergey Y. Afonin in task 255498 July 28, 2020 Sergey Y. Afonin - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...

Security fix for the ALT Linux 10 package kubernetes version 1.18.6-alt1

July 24, 2020 Mikhail Gordeev 1.18.6-alt1 - 1.18.6 - Fixes: CVE-2020-8559...

Security fix for the ALT Linux 10 package samba version 4.11.11-alt1

July 7, 2020 Evgeny Sinelnikov 4.11.11-alt1 - Update to latest stable security release of the Samba 4.11 - Security fixes: + CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and pagedresults + CVE-2020-10745: Parsing and packing of NBT and DNS...

Security fix for the ALT Linux 9 package wireshark version 3.2.5-alt1

July 3, 2020 Anton Farygin 3.2.5-alt1 - 3.2.5 - fixes: GVCP dissector infinite loop. CVE-2020-15466...

Security fix for the ALT Linux 10 package kubernetes version 1.18.5-alt1

July 2, 2020 Mikhail Gordeev 1.18.5-alt1 - 1.18.5 - Fixes: CVE-2020-8558...

Security fix for the ALT Linux 9 package libjpeg8 version 2.0.5-alt1

2.0.5-alt1 built June 30, 2020 Leontiy Volodin in task 253974 --- June 25, 2020 Leontiy Volodin - New version 2.0.5 with rpmgs script. - Updated license tag. - Fixes: + CVE-2020-13790...

Security fix for the ALT Linux 10 package firefox-esr version 68.9.0-alt1

June 3, 2020 Andrey Cherepanov 68.9.0-alt1 - New ESR version 68.9.0. - Fixes: + CVE-2020-12399 Timing attack on DSA signatures in NSS library + CVE-2020-12405 Use-after-free in SharedWorkerService + CVE-2020-12406 JavaScript Type confusion with NativeTypes + CVE-2020-12410 Memory safety bugs fixe...

Security fix for the ALT Linux 10 package samba version 4.11.8-alt1

April 28, 2020 Evgeny Sinelnikov 4.11.8-alt1 - Update to latest stable security release of the Samba 4.11 - Security fixes: + CVE-2020-10700: Fix use-after-free in AD DC LDAP server when ASQ and pagedresults combined + CVE-2020-10704: Fix LDAP Denial of Service stack overflow in Samba AD DC...

Security fix for the ALT Linux 9 package freerdp version 2.0.0-alt5

2.0.0-alt5 built April 15, 2020 Andrey Cherepanov in task 249869 April 10, 2020 Andrey Cherepanov - New version 2.0.0 Fixes: CVE-2020-11521, CVE-2020-11522, CVE-2020-11523, CVE-2020-11524, CVE-2020-11525, CVE-2020-11526...

Security fix for the ALT Linux 10 package golang version 1.12.10-alt1

Oct. 10, 2019 Alexey Shabalin 1.12.10-alt1 - New version 1.12.10. Fixes: CVE-2019-16276...

Security fix for the ALT Linux 8 package proftpd version 1.3.6-alt0.1.ga73dbfe3b

1.3.6-alt0.1.ga73dbfe3b built Sept. 9, 2019 Sergey Y. Afonin in task 237142 July 23, 2019 Konstantin Lepikhov - Updated to 1.3.6-ga73dbfe3b. - Fix modcopy bug 4372 Ensure that modcopy checks for &LTLimits for its SITE CPFR CVE-2019-12815 closes 37056. - Updated modsqlpostgres patch. - Updated -pc...

Security fix for the ALT Linux 8 package postgresql11-1C version 10.10-alt0.M80P.1

Aug. 7, 2019 Alexei Takaseev 10.10-alt0.M80P.1 - 10.10 Fixes CVE-2019-10208...

Security fix for the ALT Linux 10 package python3-module-django version 2.2.4-alt1

Aug. 5, 2019 Alexey Shabalin 2.2.4-alt1 - 2.2.4 - Fixes for the following security vulnerabilities: + CVE-2019-14232 Adjusted regex to avoid backtracking issues when truncating HTML + CVE-2019-14233 Prevented excessive HTMLParser recursion in striptags when handling incomplete HTML entities +...

Security fix for the ALT Linux 8 package postgresql10 version 10.9-alt0.M80P.1

10.9-alt0.M80P.1 built July 1, 2019 Alexei Takaseev in task 232693 June 20, 2019 Alexei Takaseev - 10.9 Fixes CVE-2019-10164...

Security fix for the ALT Linux 9 package clamav version 0.101.2-alt1

March 28, 2019 Sergey Y. Afonin 0.101.2-alt1 - 0.101.2 + CVE-2019-1787, CVE-2019-1789, CVE-2019-1788 - 0.101.1 and prior + CVE-2019-1786, CVE-2019-1785, CVE-2019-1798 - 0.101.1 and 0.101.0 only - switched to libpcre2...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 2.1.9-alt1

March 13, 2019 Vitaly Lipatov 2.1.9-alt1 - new version 2.1.9 with rpmrb script - includes .NET Core 2.1.9, ASP.NET Core 2.1.9 and .NET Core SDK 2.1.505 - CVE-2019-0657: .NET Core NuGet Tampering Vulnerability...

Security fix for the ALT Linux 8 package clamav version 0.100.2-alt1

Oct. 17, 2018 Sergey Y. Afonin 0.100.2-alt1 - 0.100.2 CVE-2018-15378, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682...

Security fix for the ALT Linux 10 package node version 8.11.3-alt1

June 30, 2018 Vitaly Lipatov 8.11.3-alt1 - new version 8.11.3 with rpmgs script - 2018-06-12, Version 8.11.3 'Carbon' LTS, @evanlucas - CVE-2018-7167, CVE-2018-7161, CVE-2018-1000168...

Security fix for the ALT Linux 7 package postgresql9.4 version 9.4.18-alt0.M70P.1

9.4.18-alt0.M70P.1 built May 22, 2018 Alexei Takaseev in task 205931 May 9, 2018 Alexei Takaseev - 9.4.18 - Fix CVE-2018-1115...

Security fix for the ALT Linux 8 package curl version 7.59.0-alt1

March 31, 2018 Anton Farygin 7.59.0-alt1 - new version - fixes: CVE-2018-1000120 FTP path trickery leads to NIL byte out of bounds write CVE-2018-1000121 LDAP NULL pointer dereference CVE-2018-1000122 RTSP RTP buffer over-read...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 2.0.5-alt1

Feb. 5, 2018 Vitaly Lipatov 2.0.5-alt1 - new version 2.0.5 with rpmgs script - CVE-2018-0764, CVE-2018-0786...

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2n-alt1

Dec. 7, 2017 Gleb Fotengauer-Malinovskiy 1.0.2n-alt1 - Updated to v1.0.2n fixes CVE-2017-3737, CVE-2017-3738. - Added --disable tsget knob. - Added support of s390x and mips architectures...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2m-alt1

Nov. 4, 2017 Gleb Fotengauer-Malinovskiy 1.0.2m-alt1 - Updated to v1.0.2m fixes CVE-2017-3735, CVE-2017-3736...

Security fix for the ALT Linux 8 package curl version 7.56.0-alt1

Oct. 4, 2017 Anton Farygin 7.56.0-alt1 - new version - fixes: CVE-2017-1000254 libcurl may read outside of a heap allocated buffer when doing FTP...

Security fix for the ALT Linux 8 package jq version 1.5-alt1.M80P.1

1.5-alt1.M80P.1 built May 11, 2017 Anton Farygin in task 182774 May 10, 2017 Anton Farygin - new version with security fixes CVE-2015-8863...

Security fix for the ALT Linux 10 package firefox-esr version 52.1.1-alt1

May 8, 2017 Andrey Cherepanov 52.1.1-alt1 - New ESR version 52.1.1 - Set plugin.loadflashonly setting to false to allow use all NPAPI plugins - Security fixes since 52.0: + CVE-2016-10196: Vulnerabilities in Libevent library + CVE-2017-5031: Use after free in ANGLE + CVE-2017-5428: integer overfl...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:24-alt0.M70P.2

3:24-alt0.M70P.2 built Jan. 12, 2017 Sergey V Turchin in task 176069 Jan. 11, 2017 Sergey V Turchin - new version - security fixes: CVE-2017-2925, CVE-2017-2926, CVE-2017-2927, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931, CVE-2017-2932, CVE-2017-2933, CVE-2017-2934, CVE-2017-2935, CVE-2017-2936,...

Security fix for the ALT Linux 8 package curl version 7.52.0-alt1

Dec. 21, 2016 Anton Farygin 7.52.0-alt1 - new version with security fixes: CVE-2016-9586: printf floating point buffer overflow...

Security fix for the ALT Linux 8 package samba-DC version 4.4.5-alt1

4.4.5-alt1 built July 9, 2016 Andrey Cherepanov in task 166817 July 8, 2016 Evgeny Sinelnikov - Update for security release with CVE-2016-2119...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt63

3:11-alt63 built June 27, 2016 Sergey V Turchin in task 166413 June 27, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132, CVE-2016-4133,...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2h-alt2

June 8, 2016 Gleb Fotengauer-Malinovskiy 1.0.2h-alt2 - Backported upstream fix for CVE-2016-2178...

Security fix for the ALT Linux 9 package krb5 version 1.14.2-alt1

April 25, 2016 Alexey Shabalin 1.14.2-alt1 - 1.14.2 - fixed CVE-2015-2695,CVE-2015-2696,CVE-2015-2697,CVE-2015-2698,CVE-2015-8629,CVE-2015-8630,CVE-2015-8631,CVE-2016-3119 - allow verification of attributes on krb5.conf...