Security fix for the ALT Linux 10 package samba version 4.14.2-alt1

March 25, 2021 Evgeny Sinelnikov 4.14.2-alt1 - Update to latest stable security release of the Samba 4.14 - Security fixes: + CVE-2020-27840: Heap corruption via crafted DN strings + CVE-2021-20277: Out of bounds read in AD DC LDAP server...

Security fix for the ALT Linux 9 package postgresql9.6 version 9.6.15-alt1

9.6.15-alt1 built Aug. 9, 2019 Alexei Takaseev in task 235661 Aug. 7, 2019 Alexei Takaseev - 9.6.15 Fixes CVE-2019-10208...

Security fix for the ALT Linux 9 package wireshark version 2.4.5-alt1

Feb. 26, 2018 Anton Farygin 2.4.5-alt1 - 2.4.5 - fixes: wnpa-sec-2018-05 The IEEE 802.11 dissector could crash. CVE-2018-7335 wnpa-sec-2018-06 Multiple dissectors could go into large infinite loops. All ASN.1 BER dissectors, along with the DICOM, DMP, LLTD, OpenFlow, RELOAD, RPCoRDMA, RPKI-Router...

Security fix for the ALT Linux 10 package firefox-esr version 52.1.1-alt1

May 8, 2017 Andrey Cherepanov 52.1.1-alt1 - New ESR version 52.1.1 - Set plugin.loadflashonly setting to false to allow use all NPAPI plugins - Security fixes since 52.0: + CVE-2016-10196: Vulnerabilities in Libevent library + CVE-2017-5031: Use after free in ANGLE + CVE-2017-5428: integer overfl...

Security fix for the ALT Linux 10 package poppler115 version 21.11.0-alt1.p10.1

21.11.0-alt1.p10.1 built Jan. 20, 2023 Andrey Cherepanov in task 313730 Jan. 19, 2023 Andrey Cherepanov - JBIG2Stream: Fix crash on broken file CVE-2021-30860, CVE-2022-27337, CVE-2022-38784...

Security fix for the ALT Linux 10 package thunderbird version 102.5.0-alt1

102.5.0-alt1 built Nov. 24, 2022 Pavel Vasenkov in task 310334 Nov. 16, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-45403 Service Workers might have learned size of cross-origin media files + CVE-2022-45404 Fullscreen notification bypass + CVE-2022-45405 Use-after-free in...

Security fix for the ALT Linux 10 package firefox-esr version 91.10.0-alt1

June 3, 2022 Pavel Vasenkov 91.10.0-alt1 - New ESR version. - Security fixes: + CVE-2022-31736 Cross-Origin resource's length leaked + CVE-2022-31737 Heap buffer overflow in WebGL + CVE-2022-31738 Browser window spoof using fullscreen mode + CVE-2022-31739 Attacker-influenced path traversal when...

Security fix for the ALT Linux 10 package golang version 1.17.9-alt1.p10

1.17.9-alt1.p10 built April 18, 2022 Alexey Shabalin in task 298503 --- April 15, 2022 Alexey Shabalin - New version 1.17.9 Fixes: CVE-2022-24675, CVE-2022-28327, CVE-2022-27536...

Security fix for the ALT Linux 10 package postgresql15-1C version 12.5-alt1

Nov. 16, 2020 Alexei Takaseev 12.5-alt1 - 12.5 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696 - Re-applay patch from 1C...

Security fix for the ALT Linux 10 package thunderbird version 78.2.1-alt1

Sept. 2, 2020 Andrey Cherepanov 78.2.1-alt1 - New version 78.2.1. - Fixes: + CVE-2020-15663 Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege + CVE-2020-15664 Attacker-induced prompt for extension installation + CVE-2020-15670 Memory safety bugs...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2k-alt1

Jan. 26, 2017 Gleb Fotengauer-Malinovskiy 1.0.2k-alt1 - Updated to v1.0.2k fixes CVE-2016-7055, CVE-2017-3731, CVE-2017-3732...

Security fix for the ALT Linux 10 package podman version 4.0.3-alt1

April 8, 2022 Alexey Shabalin 4.0.3-alt1 - new version 4.0.3 Fixes: CVE-2022-27649, CVE-2022-1227, CVE-2022-27191, CVE-2022-27649...

Security fix for the ALT Linux 9 package mariadb version 10.4.20-alt1

10.4.20-alt1 built July 14, 2021 Alexey Shabalin in task 278143 July 11, 2021 Alexey Shabalin - 10.4.20 ALT 40403 - Fixes for the following security vulnerabilities: + CVE-2021-27928 + CVE-2021-2166 + CVE-2021-2154...

Security fix for the ALT Linux 10 package libtiff version 4.2.0-alt1

Dec. 25, 2020 Vladimir D. Seleznev 4.2.0-alt1 - Updated to v4.2.0 fixed CVE-2020-35521, CVE-2020-35522, CVE-2020-35523 and CVE-2020-35524...

Security fix for the ALT Linux 9 package postgresql12 version 12.5-alt1

Nov. 16, 2020 Alexei Takaseev 12.5-alt1 - 12.5 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 8 package postgresql10 version 10.14-alt0.M80P.1

10.14-alt0.M80P.1 built Aug. 20, 2020 Alexei Takaseev in task 256188 Aug. 12, 2020 Alexei Takaseev - 10.14 Fixes CVE-2020-14349, CVE-2020-14350...

Security fix for the ALT Linux 9 package bind version 9.11.19-alt1

9.11.19-alt1 built May 20, 2020 Stanislav Levin in task 251954 May 19, 2020 Stanislav Levin - 9.11.18 - 9.11.19 fixes: CVE-2020-8616, CVE-2020-8617...

Security fix for the ALT Linux 10 package clamav version 0.99.4-alt1

March 4, 2018 Sergey Y. Afonin 0.99.4-alt1 - 0.99.4 CVE-2012-6706, CVE-2017-6419, CVE-2017-11423, CVE-2018-0202, and CVE-2018-1000085...

Security fix for the ALT Linux 10 package apache2 version 2.2.4-alt31

July 5, 2007 Aleksey Avdeev 2.2.4-alt31 - Using Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.14-alt1

5.0.14-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET 5.0.14 - February 8, 2022 - CVE-2022-21986 : .NET Denial of Service Vulnerability - CVE-2021-43877 : ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-41355 : .NET Core Information...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.19-alt0.M80P.1

9.6.19-alt0.M80P.1 built Aug. 20, 2020 Alexei Takaseev in task 256188 Aug. 12, 2020 Alexei Takaseev - 9.6.19 Fixes CVE-2020-14350...

Security fix for the ALT Linux 10 package firefox-esr version 68.5.0-alt1

Feb. 12, 2020 Andrey Cherepanov 68.5.0-alt1 - New ESR version 68.5.0. - Fixed: + CVE-2020-6796 Missing bounds check on shared memory read in the parent process + CVE-2020-6797 Extensions granted downloads.open permission could open arbitrary applications on Mac OSX + CVE-2020-6798 Incorrect parsi...

Security fix for the ALT Linux 9 package mariadb version 10.4.9-alt1

Dec. 6, 2019 Alexey Shabalin 10.4.9-alt1 - 10.4.9 - Fixes for the following security vulnerabilities: + CVE-2019-2974 + CVE-2019-2938...

Security fix for the ALT Linux 9 package clamav version 0.99.4-alt1

March 4, 2018 Sergey Y. Afonin 0.99.4-alt1 - 0.99.4 CVE-2012-6706, CVE-2017-6419, CVE-2017-11423, CVE-2018-0202, and CVE-2018-1000085...

Security fix for the ALT Linux 5 package libtiff version 3.9.5-alt1.M50P.1

Sept. 29, 2011 Gleb Fotengauer-Malinovskiy 3.9.5-alt1.M50P.1 - Backport to p5 branch CVE-2010-3087 CVE-2010-2595 CVE-2011-0192 CVE-2011-1167 - no libtiffxx subpackage...

Security fix for the ALT Linux 10 package libtiff version 4.4.0-alt2

4.4.0-alt2 built Dec. 27, 2022 Alexander Danilov in task 311968 Dec. 18, 2022 Vladimir D. Seleznev - Applied SUSE patches fixed tiff-CVE-2022-2056, CVE-2022-2057, CVE-2022-2058, CVE-2022-2519, CVE-2022-2520, CVE-2022-2521, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626, CVE-2022-3627,...

Security fix for the ALT Linux 10 package thunderbird version 60.8.0-alt1

July 10, 2019 Andrey Cherepanov 60.8.0-alt1 - New version 60.8.0. - Fixed: + CVE-2019-9811 Sandbox escape via installation of malicious language pack + CVE-2019-11711 Script injection within domain through inner window reuse + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI plugi...

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8k-alt1

March 25, 2009 Evgeny Sinelnikov 0.9.8k-alt1 - Updated to new 0.9.8k includes security fixes and improvements - Includes CVE-2009-0789, CVE-2009-0591, CVE-2009-0590...

Security fix for the ALT Linux 10 package thunderbird version 102.8.0-alt1

102.8.0-alt1 built March 10, 2023 Pavel Vasenkov in task 316084 Feb. 28, 2023 Pavel Vasenkov - New version. - Security fixes: + CVE-2023-0616 User Interface lockup with messages combining S/MIME and OpenPGP + CVE-2023-25728 Content security policy leak in violation reports using iframes +...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt5

Dec. 14, 2022 Valery Inozemtsev 2:1.20.14-alt5 - cherry pick upstream fixes for CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-46283...

Security fix for the ALT Linux 10 package helm version 3.10.2-alt1

3.10.2-alt1 built Dec. 8, 2022 Mikhail Gordeev in task 311367 Dec. 3, 2022 Mikhail Gordeev - new version 3.10.2 - Fixes: CVE-2022-36055 CVE-2022-36049 CVE-2021-32690 CVE-2021-21303...

Security fix for the ALT Linux 10 package openssh version 7.9p1-alt4.p10.1

7.9p1-alt4.p10.1 built March 23, 2022 Gleb Fotengauer-Malinovskiy in task 297014 --- March 22, 2022 Gleb Fotengauer-Malinovskiy - Backported upstream security fixes fixes CVE-2019-6111, CVE-2019-6109...

Security fix for the ALT Linux 10 package firefox-esr version 91.4.0-alt1

91.4.0-alt1 built Dec. 14, 2021 Andrey Cherepanov in task 291601 Dec. 6, 2021 Andrey Cherepanov - New ESR version. - Security fixes: + CVE-2021-43536 URL leakage when navigating while executing asynchronous function + CVE-2021-43537 Heap buffer overflow when using structured clone + CVE-2021-4353...

Security fix for the ALT Linux 10 package thunderbird version 68.2.2-alt1

Nov. 9, 2019 Andrey Cherepanov 68.2.2-alt1 - New version 68.2.2. - Fixed: + CVE-2019-15903 Heap overflow in expat library in XMLGetCurrentLineNumber + CVE-2019-11757 Use-after-free when creating index updates in IndexedDB + CVE-2019-11758 Potentially exploitable crash due to 360 Total Security +...

Security fix for the ALT Linux 9 package apache2 version 2.2.24-alt1

April 14, 2013 Aleksey Avdeev 2.2.24-alt1 - 2.2.24 - Security fixes CVE-2012-3499, CVE-2012-4558, CVE-2012-0883, CVE-2012-2687...

Security fix for the ALT Linux 10 package git version 2.33.7-alt1

2.33.7-alt1 built Feb. 20, 2023 Dmitry V. Levin in task 315248 Feb. 6, 2023 Dmitry V. Levin - 2.33.6 - 2.33.7 fixes: CVE-2023-22490, CVE-2023-23946...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.26-alt1

3.1.26-alt1 built Feb. 20, 2023 Vitaly Lipatov in task 315307 Oct. 13, 2022 Vitaly Lipatov - .NET Core 3.1.26 - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267:...

Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.22-alt1

3.1.22-alt1 built March 22, 2022 Vitaly Lipatov in task 295274 Feb. 12, 2022 Vitaly Lipatov - .NET Core 3.1.22 - December 14, 2021 - CVE-2021-43877: ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denia...

Security fix for the ALT Linux 9 package php7 version 7.3.16-alt1

7.3.16-alt1 built March 26, 2020 Anton Farygin in task 248404 March 24, 2020 Anton Farygin - 7.3.16 Fixes: CVE-2020-7064, CVE-2020-7065, CVE-2020-7066...

Security fix for the ALT Linux 10 package php8.0 version 7.2.21-alt1

Aug. 3, 2019 Anton Farygin 7.2.21-alt1 - 7.2.21 Fixes: CVE-2019-11042, CVE-2019-11041...

Security fix for the ALT Linux 7 package samba-DC version 4.5.3-alt1.M70P.1

Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1.M70P.1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt64

3:11-alt64 built July 20, 2016 Sergey V Turchin in task 167193 July 20, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182,...

Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt24

June 20, 2014 Led 2.6.32-alt24 - futex: Add another early deadlock detection check - futex: Prevent attaching to kernel threads - futex: Validate atomic acquisition in futexlockpiatomic - futex: Always cleanup owner tid in unlockpi - futex: Make lookuppistate more robust - auditsc: auditkrule mas...

Security fix for the ALT Linux 9 package openssl10 version 1.0.1f-alt1

Jan. 6, 2014 Dmitry V. Levin 1.0.1f-alt1 - Updated to 1.0.1f fixes CVE-2013-4353, CVE-2013-6449, and CVE-2013-6450...

Security fix for the ALT Linux 5 package kdegraphics version 3.5.10-alt1.1

April 20, 2009 Vladimir Lettiev 3.5.10-alt1.1 - Security fixes: - CVE-2009-0146 - CVE-2009-0147 - CVE-2009-0166 - CVE-2009-0799 - CVE-2009-0800 - CVE-2009-1179 - CVE-2009-1180 - CVE-2009-1181 - CVE-2009-1182 - CVE-2009-1183...

Security fix for the ALT Linux 10 package postgresql12 version 12.4-alt1

Aug. 12, 2020 Alexei Takaseev 12.4-alt1 - 12.4 Fixes CVE-2020-14349, CVE-2020-14350...

Security fix for the ALT Linux 9 package git version 2.25.3-alt1

2.25.3-alt1 built April 15, 2020 Dmitry V. Levin in task 249983 --- March 18, 2020 Dmitry V. Levin - 2.25.2 - 2.25.3 fixes: CVE-2020-5260...

Security fix for the ALT Linux 10 package firefox-esr version 68.0.1-alt1

July 19, 2019 Andrey Cherepanov 68.0.1-alt1 - New ESR version 68.0.1. - Fixed: + CVE-2019-9811 Sandbox escape via installation of malicious language pack + CVE-2019-11711 Script injection within domain through inner window reuse + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.38-alt1

Jan. 25, 2019 Anton Farygin 1:2.4.38-alt1 - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow request bodies. CVE-2018-17189...

Security fix for the ALT Linux 8 package samba-DC version 4.7.9-alt1

Aug. 15, 2018 Evgeny Sinelnikov 4.7.9-alt1 - Update to summer security release - Security fixes: + CVE-2018-1139 Weak authentication protocol allowed + CVE-2018-10858 Insufficient input validation on client directory listing in libsmbclient + CVE-2018-10918 Denial of Service Attack on AD DC DRSUA...