Security fix for the ALT Linux 10 package kubernetes version 1.18.6-alt1

July 24, 2020 Mikhail Gordeev 1.18.6-alt1 - 1.18.6 - Fixes: CVE-2020-8559...

Security fix for the ALT Linux 9 package node version 14.4.0-alt1

June 19, 2020 Vitaly Lipatov 14.4.0-alt1 - new version 14.4.0 with rpmrb script - set libicu = 6.5 - set libnghttp2 = 1.41.0 - CVE-2020-8172, CVE-2020-11080, CVE-2020-8174...

Security fix for the ALT Linux 8 package postgresql12 version 12.2-alt0.M80P.1

12.2-alt0.M80P.1 built Feb. 25, 2020 Alexei Takaseev in task 245913 Feb. 12, 2020 Alexei Takaseev - 12.2 Fixes CVE-2020-1720...

Security fix for the ALT Linux 10 package bind version 9.11.13-alt1

Nov. 21, 2019 Stanislav Levin 9.11.13-alt1 - 9.11.12 - 9.11.13 fixes: CVE-2019-6477...

Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2.M80P.1

Aug. 24, 2018 Andrey Cherepanov 7.2p2-alt2.M80P.1 - Security fix for user enumeration vulnerability Fixes: CVE-2018-15473...

Security fix for the ALT Linux 10 package samba version 4.8.4-alt1.S1

Aug. 14, 2018 Evgeny Sinelnikov 4.8.4-alt1.S1 - Update to summer security release - Security fixes: + CVE-2018-1139 Weak authentication protocol allowed + CVE-2018-1140 Denial of Service Attack on DNS and LDAP server + CVE-2018-10858 Insufficient input validation on client directory listing in...

Security fix for the ALT Linux 8 package memcached version 1.5.6-alt1.M80P.1

1.5.6-alt1.M80P.1 built March 6, 2018 Alexey Shabalin in task 201376 March 4, 2018 Alexey Shabalin - 1.5.6 - disable UDP port by default fixed CVE-2018-1000115 - drop scripts package - add tool package - add [email protected] for allow start "instanced" version, like 'memcached@11211'...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2m-alt0.M80P.1

1.0.2m-alt0.M80P.1 built Nov. 7, 2017 Gleb Fotengauer-Malinovskiy in task 193204 Nov. 4, 2017 Gleb Fotengauer-Malinovskiy - Backported to p8 branch fixes CVE-2017-3735, CVE-2017-3736...

Security fix for the ALT Linux 10 package php8.0 version 7.1.11-alt1

Nov. 3, 2017 Anton Farygin 7.1.11-alt1 - 7.1.11 Fixes: CVE-2016-1283...

Security fix for the ALT Linux 10 package clamav version 0.99.2-alt3

Sept. 25, 2017 Anton V. Boyarshinov 0.99.2-alt3 - Fixes: + CVE-2017-6418 remote attackers can cause a denial of service out-of-bounds read via a crafted e-mail message + CVE-2017-6420 remote attackers can cause a denial of service use-after-free via a crafted PE file with WWPack compression...

Security fix for the ALT Linux 10 package samba version 4.6.6-alt1.S1

July 12, 2017 Evgeny Sinelnikov 4.6.6-alt1.S1 - Update to summer security release - Security fixes: + CVE-2017-11103 Orpheus' Lyre KDC-REP service name validation...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2j-alt1

Sept. 26, 2016 Gleb Fotengauer-Malinovskiy 1.0.2j-alt1 - Updated to v1.0.2j fixes CVE-2016-6309...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt64

3:11-alt64 built July 20, 2016 Sergey V Turchin in task 167192 July 20, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182,...

Security fix for the ALT Linux 9 package nginx version 1.10.1-alt1

June 1, 2016 Denis Smirnov 1.10.1-alt1 - 1.10.1 - CVE-2016-4450...

Security fix for the ALT Linux 8 package krb5 version 1.13-alt1

Oct. 31, 2014 Alexey Shabalin 1.13-alt1 - 1.13 - fixed CVE-2014-5351 - move header from /usr/include/krb5 to /usr/include - drop kdcrotate service - update krb5.conf: + add logging example + add realms example + add domainrealm example + define defaultccachename as KEYRING:persistent:%uid...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt31

3:11-alt31 built July 16, 2014 Sergey V Turchin in task 125148 --- July 16, 2014 Sergey V Turchin - new version ALT30190 - security fixes: CVE-2014-0537, CVE-2014-0539, CVE-2014-4671...

Security fix for the ALT Linux 9 package openssl10 version 1.0.1f-alt1

Jan. 6, 2014 Dmitry V. Levin 1.0.1f-alt1 - Updated to 1.0.1f fixes CVE-2013-4353, CVE-2013-6449, and CVE-2013-6450...

Security fix for the ALT Linux 7 package kernel-src-kvm version 3.10.21-alt1

3.10.21-alt1 built Dec. 20, 2013 Led in task 110736 Dec. 19, 2013 Led - 3.10.21 - updates from linux-3.10.25: + CVE-2013-4587 + CVE-2013-6367 + CVE-2013-6368 + CVE-2013-6376...

Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt11

2.6.32-alt11 built Aug. 30, 2013 Led in task 103311 Aug. 28, 2013 Led - 2.6.32-358.18.1.el6: + CVE-2012-6544 + CVE-2013-2146 + CVE-2013-2206 + CVE-2013-2224 + CVE-2013-2237...

Security fix for the ALT Linux 7 package bind version 9.9.2-alt3

Dec. 11, 2012 George V. Kouryachy 9.9.2-alt3 - Update to 9.9.2-P1 CVE-2012-5688 and bugfixes - Add systemd service file from FC...

Security fix for the ALT Linux 6 package libpng version 1.2.49-alt1

April 5, 2012 Dmitry V. Levin 1.2.49-alt1 - Updated to 1.2.49 fixes CVE-2011-3048...

Security fix for the ALT Linux 5 package libxml2 version 1:2.7.8-alt3

Dec. 27, 2010 Dmitry V. Levin 1:2.7.8-alt3 - Updated to v2.7.8-7-gfec31bc fixes CVE-2010-4494...

Security fix for the ALT Linux 5 package postfix version 1:2.4.8-alt1

Aug. 5, 2008 Dmitry V. Levin 1:2.4.8-alt1 - Updated to 2.4.8 fixes CVE-2008-2936...

Security fix for the ALT Linux 9 package bind version 9.3.5-alt2

June 6, 2008 Dmitry V. Levin 9.3.5-alt2 - Updated to 9.3.5-P1 release fixes VU800113/CVE-2008-1447...

Security fix for the ALT Linux 8 package clamav version 0.93-alt1

April 15, 2008 Victor Forsyuk 0.93-alt1 - 0.93 contains security fixes: CVE-2008-1100, CVE-2008-1387...

Security fix for the ALT Linux 8 package sudo version 1:1.6.7p5-alt5

June 21, 2005 Dmitry V. Levin 1:1.6.7p5-alt5 - Backported upstream fix so a sudoers entry with sudo ALL no longer overwrites the value of safecmnd CAN-2005-1993...

Security fix for the ALT Linux 10 package dotnet-aspnetcore-3.1 version 3.1.32-alt1

3.1.32-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - ASP.NET Core 3.1.32 - CVE-2022-38013: .NET Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package libbpf version 0.8.1-alt2

0.8.1-alt2 built Feb. 21, 2023 Vitaly Chikunov in task 315256 Feb. 15, 2023 Vitaly Chikunov - Fixes: CVE-2022-3534, CVE-2022-3606...

Security fix for the ALT Linux 10 package libarchive version 3.6.1-alt2

3.6.1-alt2 built Dec. 12, 2022 Alexander Danilov in task 311215 Dec. 5, 2022 Alexander Danilov - security fixes: CVE-2022-36227...

Security fix for the ALT Linux 9 package wireshark version 3.6.1-alt1

Jan. 3, 2022 Anton Farygin 3.6.1-alt1 - 3.6.1 Fixes: CVE-2021-4185, CVE-2021-4184, CVE-2021-4183, CVE-2021-4182, CVE-2021-4181...

Security fix for the ALT Linux 9 package postgresql9.6 version 9.6.24-alt0.M90P.1

9.6.24-alt0.M90P.1 built Dec. 3, 2021 Alexei Takaseev in task 289302 Nov. 10, 2021 Alexei Takaseev - 9.6.24 Fixes CVE-2021-23214, CVE-2021-23222...

Security fix for the ALT Linux 9 package freerdp version 2.4.1-alt1

2.4.1-alt1 built Nov. 1, 2021 Andrey Cherepanov in task 287815 Oct. 21, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-41159 Improper client input validation for gateway connections allows to overwrite memory + CVE-2021-41160 Improper region checks in all clients allow out of...

Security fix for the ALT Linux 10 package thunderbird version 91.0.2-alt1

Aug. 23, 2021 Andrey Cherepanov 91.0.2-alt1 - New version. - Build using LLVM 12.0. - Do not build for armh. - Security fixes in 91.0.1: + CVE-2021-29991 Header Splitting possible with HTTP/3 Responses...

Security fix for the ALT Linux 9 package node version 14.17.2-alt1

14.17.2-alt1 built Aug. 3, 2021 Vitaly Lipatov in task 279921 July 1, 2021 Vitaly Lipatov - new version 14.17.2 with rpmrb script - CVE-2021-22918: Out of bounds read set libuv = 1.41.0-alt3...

Security fix for the ALT Linux 10 package thunderbird version 78.10.0-alt1

April 26, 2021 Andrey Cherepanov 78.10.0-alt1 - New version 78.10.0. - Security fixes: + CVE-2021-23994 Out of bound write due to lazy initialization + CVE-2021-23995 Use-after-free in Responsive Design Mode + CVE-2021-23998 Secure Lock icon could have been spoofed + CVE-2021-23961 More internal...

Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt1

1.17.2-alt1 built Nov. 24, 2020 Ivan A. Melnikov in task 262110 Nov. 19, 2020 Ivan A. Melnikov - 1.17.2 Fixes: CVE-2020-28196...

Security fix for the ALT Linux 9 package golang version 1.15.5-alt1

Nov. 14, 2020 Alexey Shabalin 1.15.5-alt1 - New version 1.15.5. - Fixes: + CVE-2020-28362 + CVE-2020-28366 + CVE-2020-28367...

Security fix for the ALT Linux 10 package firefox-esr version 78.4.1-alt1

Nov. 10, 2020 Andrey Cherepanov 78.4.1-alt1 - New version 78.4.1. - Fixes: + CVE-2020-26950 Write side effects in MCallGetProperty opcode not accounted for...

Security fix for the ALT Linux 10 package thunderbird version 78.2.1-alt1

Sept. 2, 2020 Andrey Cherepanov 78.2.1-alt1 - New version 78.2.1. - Fixes: + CVE-2020-15663 Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege + CVE-2020-15664 Attacker-induced prompt for extension installation + CVE-2020-15670 Memory safety bugs...

Security fix for the ALT Linux 10 package firefox-esr version 78.0.1-alt1

July 4, 2020 Alexey Gladkov 78.0.1-alt1 - New release 78.0.1. - Fixes: + CVE-2020-12415: AppCache manifest poisoning due to url encoded character processing + CVE-2020-12416: Use-after-free in WebRTC VideoBroadcaster + CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags ...

Security fix for the ALT Linux 10 package kubernetes version 1.18.5-alt1

July 2, 2020 Mikhail Gordeev 1.18.5-alt1 - 1.18.5 - Fixes: CVE-2020-8558...

Security fix for the ALT Linux 9 package libjpeg8 version 2.0.5-alt1

2.0.5-alt1 built June 30, 2020 Leontiy Volodin in task 253974 --- June 25, 2020 Leontiy Volodin - New version 2.0.5 with rpmgs script. - Updated license tag. - Fixes: + CVE-2020-13790...

Security fix for the ALT Linux 10 package grafana version 7.0.3-alt1

June 4, 2020 Alexey Shabalin 7.0.3-alt1 - 7.0.3 Fixes: CVE-2020-13379...

Security fix for the ALT Linux 10 package thunderbird version 68.0-alt1

Aug. 29, 2019 Andrey Cherepanov 68.0-alt1 - New version 68.0. - Fixed: + CVE-2019-9811 Sandbox escape via installation of malicious language pack + CVE-2019-11711 Script injection within domain through inner window reuse + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI plugins b...

Security fix for the ALT Linux 10 package firefox-esr version 60.6.1-alt1

March 23, 2019 Andrey Cherepanov 60.6.1-alt1 - New ESR version 60.6.1. - Fixed: + CVE-2019-9810 IonMonkey MArraySlice has incorrect alias information + CVE-2019-9813 Ionmonkey type confusion with proto mutations...

Security fix for the ALT Linux 10 package thunderbird version 60.5.1-alt1

Feb. 15, 2019 Andrey Cherepanov 60.5.1-alt1 - New version 60.5.1. - Fixes: + CVE-2018-18356 Use-after-free in Skia + CVE-2019-5785 Integer overflow in Skia + CVE-2018-18335 Buffer overflow in Skia with accelerated Canvas 2D + CVE-2018-18509 S/MIME signature spoofing...

Security fix for the ALT Linux 9 package NetworkManager version 1.14.5-alt1.gitba83251bba87

Nov. 1, 2018 Mikhail Efremov 1.14.5-alt1.gitba83251bba87 - Upstream git snapshot nm-1-14 branch fixes: CVE-2018-15688...

Security fix for the ALT Linux 10 package node version 8.11.4-alt1

Aug. 29, 2018 Vitaly Lipatov 8.11.4-alt1 - new version 8.11.4 with rpmrb script - 2018-08-15, Version 8.11.4 'Carbon' LTS, @rvagg - CVE-2018-0732, CVE-2018-12115 - build with external libnghttp2 - fix build with ICU = 61 add -DUUSINGICUNAMESPACE=1...

Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2.M80P.2

7.2p2-alt2.M80P.2 built Aug. 27, 2018 Denis Medvedev in task 211899 Aug. 24, 2018 Denis Medvedev - Correction of fix of user enumeration vulnerability Fixes: CVE-2018-15473...

Security fix for the ALT Linux 10 package firefox-esr version 52.7.0-alt1

March 10, 2018 Andrey Cherepanov 52.7.0-alt1 - New ESR version 52.7.0. - Fixes: + CVE-2018-5127 Buffer overflow manipulating SVG animatedPathSegList + CVE-2018-5129 Out-of-bounds write with malformed IPC messages + CVE-2018-5130 Mismatched RTP payload type can trigger memory corruption +...