Security fix for the ALT Linux 9 package systemd version 1:239-alt3

Oct. 29, 2018 Alexey Shabalin 1:239-alt3 - merge with v239-stable - Fixes for the following security vulnerabilities: + CVE-2018-15688 dhcp6: make sure we have enough space for the DHCP6 option header + CVE-2018-15687 chown-recursive: rework the recursive logic to use OPATH...

Security fix for the ALT Linux 9 package libssh version 0.8.4-alt2

Oct. 17, 2018 Sergey V Turchin 0.8.4-alt2 - fix changelog - security fixes: CVE-2018-10933...

Security fix for the ALT Linux 8 package curl version 7.61.1-alt1

Sept. 9, 2018 Anton Farygin 7.61.1-alt1 - 7.61.1 fixes: CVE-2018-14618...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2p-alt1

Aug. 16, 2018 Gleb Fotengauer-Malinovskiy 1.0.2p-alt1 - Updated to 1.0.2p fixes CVE-2018-0732 and CVE-2018-0737...

Security fix for the ALT Linux 10 package firefox-esr version 52.2.0-alt1

June 21, 2017 Andrey Cherepanov 52.2.0-alt1 - New ESR version 52.2.0 - Security fixes: + CVE-2017-5472: Use-after-free using destroyed node when regenerating trees + CVE-2017-7749: Use-after-free during docshell reloading + CVE-2017-7750: Use-after-free with track elements + CVE-2017-7751:...

Security fix for the ALT Linux 10 package samba version 4.6.4-alt1.S1

May 24, 2017 Evgeny Sinelnikov 4.6.4-alt1.S1 - Update to second spring security release - Fix longtime initialization bug in ldb proxy - Security fixes: + CVE-2017-7494 Remote code execution from a writable share...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:24-alt0.M70P.1

3:24-alt0.M70P.1 built Dec. 16, 2016 Sergey V Turchin in task 174388 Dec. 15, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-7867, CVE-2016-7868, CVE-2016-7869, CVE-2016-7870, CVE-2016-7871, CVE-2016-7872, CVE-2016-7873, CVE-2016-7874, CVE-2016-7875, CVE-2016-7876, CVE-2016-7877,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt53

3:11-alt53 built Sept. 25, 2015 Sergey V Turchin in task 150379 Sept. 25, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-5567, CVE-2015-5568, CVE-2015-5570, CVE-2015-5571, CVE-2015-5572, CVE-2015-5573, CVE-2015-5574, CVE-2015-5575, CVE-2015-5576, CVE-2015-5577, CVE-2015-5578,...

Security fix for the ALT Linux 8 package samba version 4.1.17-alt1

Feb. 23, 2015 Anton V. Boyarshinov 4.1.17-alt1 - 4.1.17 - CVE-2015-0240 fixed...

Security fix for the ALT Linux 8 package krb5 version 1.13-alt3

Feb. 8, 2015 Ivan A. Melnikov 1.13-alt3 - fix for MITKRB5-SA-2015-001 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423...

Security fix for the ALT Linux 5 package glibc version 6:2.11.2-alt1.M51.2

6:2.11.2-alt1.M51.2 built Jan. 28, 2015 Gleb Fotengauer-Malinovskiy in task 139340 Jan. 28, 2015 Gleb Fotengauer-Malinovskiy - Backported upstream fix for Sourceware15014 CVE-2015-0235...

Security fix for the ALT Linux 7 package openssl10 version 1.0.0j-alt1

May 12, 2012 Dmitry V. Levin 1.0.0j-alt1 - Updated to 1.0.0j fixes CVE-2012-2333...

Security fix for the ALT Linux 8 package openssl10 version 1.0.0j-alt1

May 12, 2012 Dmitry V. Levin 1.0.0j-alt1 - Updated to 1.0.0j fixes CVE-2012-2333...

Security fix for the ALT Linux 5 package fetchmail version 6.3.20-alt1

June 7, 2011 Michael Shigorin 6.3.20-alt1 - 6.3.20 + fixes CVE-2011-1947: STARTTLS denial of service vulnerability thanks ldv@ for heads-up...

Security fix for the ALT Linux 5 package asterisk1.6.2 version 1.6.2.17-alt0.rc1

Jan. 21, 2011 Denis Smirnov 1.6.2.17-alt0.rc1 - 1.6.2.17-rc1 - CVE-2011-0495...

Security fix for the ALT Linux 5 package qt4 version 4.5.3-alt3.M50P.1

May 19, 2010 Sergey V Turchin 4.5.3-alt3.M50P.1 - add fixes for CVE-2010-0046 CVE-2010-0049 CVE-2010-0050 CVE-2010-0052 CVE-2010-0047 CVE-2010-0054 CVE-2010-0656...

Security fix for the ALT Linux 10 package libinput version 1.19.4-alt1

1.19.4-alt1 built April 21, 2022 Yuri N. Sedunov in task 298748 --- April 20, 2022 Yuri N. Sedunov - 1.19.4 fixed CVE-2022-1215...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.24-alt0.M80P.1

9.6.24-alt0.M80P.1 built Dec. 21, 2021 Alexei Takaseev in task 289365 Nov. 11, 2021 Alexei Takaseev - 9.6.24 Fixes CVE-2021-23214, CVE-2021-23222...

Security fix for the ALT Linux 9 package wpa_supplicant version 2.9-alt4

2.9-alt4 built March 4, 2021 Andrey Cherepanov in task 267306 --- March 1, 2021 Sergey Bolshakov - P2P: Fix a corner case in peer addition based on PD Request Fixes: CVE-2021-27803...

Security fix for the ALT Linux 10 package wireshark version 3.2.5-alt1

July 3, 2020 Anton Farygin 3.2.5-alt1 - 3.2.5 - fixes: GVCP dissector infinite loop. CVE-2020-15466...

Security fix for the ALT Linux 10 package runc version 1.0.0-alt10.rc9

Oct. 10, 2019 Vladimir Didenko 1.0.0-alt10.rc9 - New version - fixes: CVE-2019-16884...

Security fix for the ALT Linux 9 package postgresql9.6 version 9.6.9-alt1

May 9, 2018 Alexei Takaseev 9.6.9-alt1 - 9.6.9 - Fixes CVE-2018-1115...

Security fix for the ALT Linux 7 package glibc version 6:2.17-alt8.M70P.2

6:2.17-alt8.M70P.2 built Oct. 27, 2017 Gleb Fotengauer-Malinovskiy in task 191927 Oct. 23, 2017 Gleb Fotengauer-Malinovskiy - Backported upstream secutiry patches fixes CVE-2017-15670 CVE-2017-15804...

Security fix for the ALT Linux 8 package clamav version 0.99.2-alt3

Sept. 25, 2017 Anton V. Boyarshinov 0.99.2-alt3 - Fixes: + CVE-2017-6418 remote attackers can cause a denial of service out-of-bounds read via a crafted e-mail message + CVE-2017-6420 remote attackers can cause a denial of service use-after-free via a crafted PE file with WWPack compression...

Security fix for the ALT Linux 10 package gnutls30 version 3.4.13-alt1

June 7, 2016 Mikhail Efremov 3.4.13-alt1 - Updated BR for tests. - Updated to 3.4.13 CVE-2016-4456...

Security fix for the ALT Linux 8 package samba version 4.4.2-alt1

April 12, 2016 Andrey Cherepanov 4.4.2-alt1 - New version - Security fixes: - CVE-2015-5370 Multiple errors in DCE-RPC code - CVE-2016-2110 Man in the middle attacks possible with NTLMSSP - CVE-2016-2111 NETLOGON Spoofing Vulnerability - CVE-2016-2112 LDAP client and server don't enforce integrit...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt0.M70P.1

1.0.1k-alt0.M70P.1 built Jan. 12, 2015 Gleb Fotengauer-Malinovskiy in task 138377 Jan. 12, 2015 Gleb Fotengauer-Malinovskiy - Backported to p7 branch security: CVE-2014-3571, CVE-2015-0206, CVE-2014-3569, CVE-2014-3572, CVE-2015-0204, CVE-2015-0205, CVE-2014-8275, CVE-2014-3570...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1f-alt1

Jan. 6, 2014 Dmitry V. Levin 1.0.1f-alt1 - Updated to 1.0.1f fixes CVE-2013-4353, CVE-2013-6449, and CVE-2013-6450...

Security fix for the ALT Linux 8 package krb5 version 1.11.1-alt1

March 30, 2013 Ivan A. Melnikov 1.11.1-alt1 - 1.11.1 + fix a null pointer dereference in the KDC PKINIT code CVE-2013-1415; - drop obsolete patch 21; - add patch 22 from upstream git to fix a memory leak in krb5getinitcredskeytab upstream ticket 7586...

Security fix for the ALT Linux 7 package exim version 4.76-alt3

March 19, 2013 Michael Shigorin 4.76-alt3 - NMU: + applied CVE-2012-5671.patch + dropped mailq symlink duplicating sendmail-common's one ALT28006...

Security fix for the ALT Linux 8 package openssl10 version 1.0.0h-alt1

March 23, 2012 Dmitry V. Levin 1.0.0h-alt1 - Updated to 1.0.0h fixes CVE-2012-0050, CVE-2012-0884 and other bugs...

Security fix for the ALT Linux 6 package openssl10 version 0.9.8o-alt1

Sept. 29, 2010 Dmitry V. Levin 0.9.8o-alt1 - Updated to 0.9.8o fixes CVE-2010-0742. - Fixed ssl/dtls1.h ABI breakage introduced in 0.9.8m. - Fixed 0.9.8m build regression on architectures where %lib != lib...

Security fix for the ALT Linux 5 package libtiff version 3.8.2-alt5

July 15, 2009 Dmitry V. Levin 3.8.2-alt5 - tiff2rgba, rgb2ycbcr: Fixed potential integer overflows in buffer size calculations CVE-2009-2347; closes: 20774...

Security fix for the ALT Linux 10 package libtiff version 3.8.2-alt2

Aug. 31, 2008 Dmitry V. Levin 3.8.2-alt2 - Applied patches from Drew Yao of Apple Product Security to fix potential buffer underflow in the LZW decoder CVE-2008-2327...

Security fix for the ALT Linux 5 package openldap2.4 version 2.3.41-alt1

Feb. 25, 2008 Dmitry Lebkov 2.3.41-alt1 - 2.3.41 + fix for CVE-2008-0658 14431...

Security fix for the ALT Linux 9 package openssl10 version 0.9.8d-alt4

Oct. 10, 2007 Dmitry V. Levin 0.9.8d-alt4 - Backported upstream fix for off-by-one bug in the SSLgetsharedciphers function CVE-2007-5135...

Security fix for the ALT Linux 9 package bind version 9.3.4-alt4

July 24, 2007 Dmitry V. Levin 9.3.4-alt4 - Updated to 9.3.4-P1 release fixes CVE-2007-2926...

Security fix for the ALT Linux 5 package libpng version 1.2.13-alt3

May 16, 2007 Dmitry V. Levin 1.2.13-alt3 - Imported upstream fix for pnghandletRNS bug CVE-2007-2445: a grayscale PNG image with a malformed tRNS chunk may crash some libpng applications...

Security fix for the ALT Linux 10 package samba version 4.16.4-alt2

Sept. 8, 2022 Evgeny Sinelnikov 4.16.4-alt2 - Add support Heimdal only of "ignore requester sid" global option for the correct operation of trust relationships with oldest versions of MS AD without KB5008380 Authentication updates CVE-2021-42287...

Security fix for the ALT Linux 10 package postgresql15 version 14.3-alt1

May 11, 2022 Alexei Takaseev 14.3-alt1 - 14.3 Fixes CVE-2022-1552...

Security fix for the ALT Linux 10 package node version 16.13.2-alt1

March 18, 2022 Vitaly Lipatov 16.13.2-alt1 - new version 16.13.2 with rpmrb script - set npm = 8.3.1 - set libuv = 1.43.0 - CVE-2021-44531: Improper handling of URI Subject Alternative Names Medium - CVE-2021-44532: Certificate Verification Bypass via String Injection Medium - CVE-2021-44533:...

Security fix for the ALT Linux 10 package flatpak version 1.12.4-alt1

1.12.4-alt1 built Jan. 24, 2022 Yuri N. Sedunov in task 293755 Jan. 19, 2022 Yuri N. Sedunov - 1.12.4 fixed CVE-2022-21682, CVE-2021-43860...

Security fix for the ALT Linux 9 package wireshark version 3.4.4-alt1

3.4.4-alt1 built April 12, 2021 Anton Farygin in task 269126 March 17, 2021 Anton Farygin - 3.4.4 Fixes: CVE-2021-22191...

Security fix for the ALT Linux 9 package clamav version 0.103.2-alt1

0.103.2-alt1 built April 12, 2021 Sergey Y. Afonin in task 268496 April 10, 2021 Sergey Y. Afonin - 0.103.2 + CVE-2021-1252, CVE-2021-1405 - 0.103.0 and 0.103.1 only. + CVE-2021-1404 - 0.103.1 and prior...

Security fix for the ALT Linux 8 package sudo version 1:1.9.5p2-alt0.M80P.1

1:1.9.5p2-alt0.M80P.1 built Feb. 6, 2021 Evgeny Sinelnikov in task 265379 Jan. 27, 2021 Evgeny Sinelnikov - Backport latest security release fixed CVE-2021-3156 to p8/c8/c8.1 branches without sudo python plugin due it not compatible with python3.5...

Security fix for the ALT Linux 9 package node version 14.11.0-alt1

Sept. 16, 2020 Vitaly Lipatov 14.11.0-alt1 - new version 14.11.0 with rpmrb script - CVE-2020-8251: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests Critical - CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion High...

Security fix for the ALT Linux 9 package wireshark version 2.6.6-alt1

Jan. 13, 2019 Anton Farygin 2.6.6-alt1 - 2.6.6 - fixes: The 6LoWPAN dissector could crash. CVE-2019-5716 The PMUL dissector could crash. CVE-2019-5717 The RTSE dissector and other dissectors could crash. CVE-2019-5718 The ISAKMP dissector could crash. CVE-2019-5719...

Security fix for the ALT Linux 8 package kde5-smb4k version 2.0.1-alt1.M80P.1

2.0.1-alt1.M80P.1 built May 19, 2017 Sergey V Turchin in task 183142 --- May 19, 2017 Sergey V Turchin - security fixes: CVE-2017-8849...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt67

Oct. 27, 2016 Sergey V Turchin 3:11-alt67 - new version - security fixes: CVE-2016-7855...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt1

Jan. 12, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt1 - Updated to 1.0.1k fixes CVE-2014-3571, CVE-2015-0206, CVE-2014-3569, CVE-2014-3572, CVE-2015-0204, CVE-2015-0205, CVE-2014-8275, CVE-2014-3570 closes: 30644...