Security fix for the ALT Linux 9 package postgresql9.6 version 9.6.22-alt0.M90P.1

9.6.22-alt0.M90P.1 built May 24, 2021 Alexei Takaseev in task 272061 May 18, 2021 Alexei Takaseev - 9.6.22 Fixes CVE-2021-32027, CVE-2021-32028...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.12-alt1

April 12, 2020 Alexey Shabalin 2.2.12-alt1 - 2.2.12 - Fixes for the following security vulnerabilities: + CVE-2019-19118 Privilege escalation in the Django admin. + CVE-2019-19844 Potential account hijack via password reset form + CVE-2020-7471 Potential SQL injection via StringAggdelimiter +...

Security fix for the ALT Linux 10 package thunderbird version 60.7.2-alt1

June 22, 2019 Andrey Cherepanov 60.7.2-alt1 - New version 60.7.2. - Fixed: + CVE-2019-11707 Type confusion in Array.pop + CVE-2019-11708 sandbox escape using Prompt:Open...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.38-alt1

Jan. 25, 2019 Anton Farygin 1:2.4.38-alt1 - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow request bodies. CVE-2018-17189...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt65

3:11-alt65 built Sept. 22, 2016 Michael Shigorin in task 169622 Sept. 19, 2016 Sergey V Turchin - new version CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283,...

Security fix for the ALT Linux 7 package kernel-image-std-def version 1:3.14.58-alt0.M70P.2

Jan. 19, 2016 Anton V. Boyarshinov 1:3.14.58-alt0.M70P.2 - CVE-2016-0728 fixed...

Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1

91.3.0-alt1 built Nov. 9, 2021 Andrey Cherepanov in task 288753 Nov. 2, 2021 Andrey Cherepanov - New ESR version. - Security fixes: + CVE-2021-38503 iframe sandbox rules did not apply to XSLT stylesheets + CVE-2021-38504 Use-after-free in file picker dialog + CVE-2021-38505 Windows 10 Cloud...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.24-alt1

July 13, 2021 Alexey Shabalin 2.2.24-alt1 - new version 2.2.24 - Fixes for the following security vulnerabilities: + CVE-2021-28658 Potential directory-traversal via uploaded files + CVE-2021-31542 Potential directory-traversal via uploaded files + CVE-2021-32052 Header injection possibility sinc...

Security fix for the ALT Linux 10 package postgresql14 version 12.2-alt1

Feb. 12, 2020 Alexei Takaseev 12.2-alt1 - 12.2 Fixes CVE-2020-1720...

Security fix for the ALT Linux 8 package samba-DC version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group...

Security fix for the ALT Linux 9 package postgresql12 version 9.0.5-alt1

Oct. 11, 2011 Vladimir V Kamarzin 9.0.5-alt1 - 9.0.5 Fixes CVE-2011-2483. - Disable devel subpackage...

Security fix for the ALT Linux 5 package bzip2 version 1:1.0.6-alt1

Sept. 20, 2010 Dmitry V. Levin 1:1.0.6-alt1 - Updated to 1.0.6 fixes CVE-2010-0405...

Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.17-alt1

5.0.17-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - new version 5.0.17 with rpmgs script - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package firefox-esr version 102.3.0-alt1

Oct. 10, 2022 Pavel Vasenkov 102.3.0-alt1 - New ESR version. - Security fixes: + CVE-2022-3266 Out of bounds read when decoding H264 + CVE-2022-40959 Bypassing FeaturePolicy restrictions on transient pages + CVE-2022-40960 Data-race when parsing non-UTF-8 URLs in threads + CVE-2022-40958 Bypassin...

Security fix for the ALT Linux 10 package php8.0 version 8.0.20-alt1

8.0.20-alt1 built June 21, 2022 Anton Farygin in task 302229 June 16, 2022 Anton Farygin - 8.0.19 - 8.0.20 Fixes: CVE-2022-31626, CVE-2022-31625...

Security fix for the ALT Linux 9 package systemd version 1:246.14-alt1

1:246.14-alt1 built July 23, 2021 Alexey Shabalin in task 279856 July 20, 2021 Alexey Shabalin - 246.14 - Fixes CVE-2021-33910...

Security fix for the ALT Linux 8 package postgresql11 version 11.10-alt0.M80P.1

Nov. 17, 2020 Alexei Takaseev 11.10-alt0.M80P.1 - 11.10 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 10 package php8.0 version 7.3.16-alt1

March 24, 2020 Anton Farygin 7.3.16-alt1 - 7.3.16 Fixes: CVE-2020-7064, CVE-2020-7065, CVE-2020-7066...

Security fix for the ALT Linux 10 package firefox-esr version 52.5.0-alt1

Nov. 15, 2017 Andrey Cherepanov 52.5.0-alt1 - New ESR version 52.5.0 - Fixes: + CVE-2017-7828 Use-after-free of PressShell while restyling layout + CVE-2017-7830 Cross-origin URL information leak through Resource + CVE-2017-7826 Memory safety bugs fixed in Firefox 57 and Firefox ESR...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1u-alt0.M70P.1

1.0.1u-alt0.M70P.1 built Sept. 23, 2016 Gleb Fotengauer-Malinovskiy in task 169809 Sept. 22, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.1u fixes CVE-2016-2177, CVE-2016-2178, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt65

3:11-alt65 built Sept. 20, 2016 Sergey V Turchin in task 169477 Sept. 19, 2016 Sergey V Turchin - new version CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283,...

Security fix for the ALT Linux 5 package poppler5 version 0.10.6-alt1

April 20, 2009 Vladimir Lettiev 0.10.6-alt1 - new version - security fixes: - CVE-2009-0799 xpdf OOB Read - CVE-2009-0800 xpdf Multiple Input Validation Flaws - CVE-2009-1179 xpdf Integer Overflow - CVE-2009-1180 xpdf Invalid free - CVE-2009-1181 xpdf NULL dereference DoS - CVE-2009-1182 xpdf MMR...

Security fix for the ALT Linux 10 package curl version 7.83.1-alt1

7.83.1-alt1 built May 19, 2022 Anton Farygin in task 299735 --- May 11, 2022 Anton Farygin - 7.83.1 - Fixes: CVE-2022-30115: HSTS bypass via trailing dot CVE-2022-27782: TLS and SSH connection too eager reuse CVE-2022-27781: CERTINFO never-ending busy-loop CVE-2022-27780: percent-encoded path...

Security fix for the ALT Linux 10 package thunderbird version 91.8.0-alt1

April 6, 2022 Pavel Vasenkov 91.8.0-alt1 - New version. - Security fixes: + CVE-2022-1097 Use-after-free in NSSToken objects + CVE-2022-28281 Out of bounds write due to unexpected WebAuthN Extensions + CVE-2022-1197 OpenPGP revocation information was ignored + CVE-2022-1196 Use-after-free after V...

Security fix for the ALT Linux 9 package mariadb version 10.4.13-alt1

10.4.13-alt1 built July 2, 2020 Alexey Shabalin in task 254197 June 28, 2020 Alexey Shabalin - 10.4.13 - Fixes for the following security vulnerabilities: + CVE-2020-2752 + CVE-2020-2812 + CVE-2020-2814 + CVE-2020-2760 + CVE-2020-13249...

Security fix for the ALT Linux 9 package clamav version 0.100.2-alt1

Oct. 17, 2018 Sergey Y. Afonin 0.100.2-alt1 - 0.100.2 CVE-2018-15378, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682...

Security fix for the ALT Linux 9 package apache2 version 2.2.4-alt31

July 5, 2007 Aleksey Avdeev 2.2.4-alt31 - Using Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch...

Security fix for the ALT Linux 10 package libcairo version 1:1.16.0-alt2

1:1.16.0-alt2 built Jan. 6, 2023 Valery Inozemtsev in task 312192 Dec. 22, 2022 Valery Inozemtsev - cherry pick upstream fixes for CVE-2018-19876, CVE-2020-35492...

Security fix for the ALT Linux 10 package thunderbird version 78.5.0-alt1

Nov. 19, 2020 Andrey Cherepanov 78.5.0-alt1 - New version 78.5.0. - Fixes: + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls + CVE-2020-26953 Fullscreen...

Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 8 package samba-DC version 4.9.13-alt1

4.9.13-alt1 built Sept. 27, 2019 Evgeny Sinelnikov in task 237896 Sept. 20, 2019 Evgeny Sinelnikov - Update to first security autumn release for domain controller release - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.38-alt1

Jan. 25, 2019 Anton Farygin 1:2.4.38-alt1 - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow request bodies. CVE-2018-17189...

Security fix for the ALT Linux 9 package wireshark version 2.2.7-alt1

June 4, 2017 Anton Farygin 2.2.7-alt1 - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read overflow CVE-2017-9351 wnpa-sec-2017-25 SoulSeek dissector...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.25-alt1

May 18, 2017 Anton Farygin 1:2.4.25-alt1 - updated to 2.4.25 witch security fixes: + CVE-2016-8740 modhttp2: Mitigate DoS memory exhaustion via endless CONTINUATION frames. + CVE-2016-5387 core: Mitigate fcgi "httpoxy" issues + CVE-2016-2161 modauthdigest: Prevent segfaults during client entry...

Security fix for the ALT Linux 10 package apache2 version 2.2.20-alt1

Aug. 31, 2011 Aleksey Avdeev 2.2.20-alt1 - 2.2.20 - Security fixes CVE-2011-3192 - Update patchset itk for apache2.2-mpm-itk-2.2.17-01...

Security fix for the ALT Linux 9 package bind version 9.3.5-alt2

June 6, 2008 Dmitry V. Levin 9.3.5-alt2 - Updated to 9.3.5-P1 release fixes VU800113/CVE-2008-1447...

Security fix for the ALT Linux 9 package dotnet-hostfxr-3.1 version 3.1.22-alt1

3.1.22-alt1 built March 22, 2022 Vitaly Lipatov in task 295274 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package thunderbird version 78.4.0-alt1

Oct. 22, 2020 Andrey Cherepanov 78.4.0-alt1 - New version 78.4.0. - Fixes: + CVE-2020-15969 Use-after-free in usersctp + CVE-2020-15683 Memory safety bugs fixed in Thunderbird 78.4...

Security fix for the ALT Linux 9 package postgresql9.6 version 9.6.19-alt1

9.6.19-alt1 built Aug. 18, 2020 Alexei Takaseev in task 256187 Aug. 12, 2020 Alexei Takaseev - 9.6.19 Fixes CVE-2020-14350...

Security fix for the ALT Linux 10 package firefox-esr version 68.8.0-alt1

May 5, 2020 Andrey Cherepanov 68.8.0-alt1 - New ESR version 68.8.0. - Fixes: + CVE-2020-12387 Use-after-free during worker shutdown + CVE-2020-12388 Sandbox escape with improperly guarded Access Tokens + CVE-2020-12389 Sandbox escape with improperly separated process types + CVE-2020-6831 Buffer...

Security fix for the ALT Linux 10 package git version 2.24.1-alt1

Dec. 8, 2019 Dmitry V. Levin 2.24.1-alt1 - 2.24.0 - 2.24.1 fixes: CVE-2019-1348, CVE-2019-1387, CVE-2019-19604; this update also addresses a few Windows and/or NTFS issues fixes: CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354...

Security fix for the ALT Linux 8 package postgresql11 version 10.5-alt1

Aug. 11, 2018 Alexei Takaseev 10.5-alt1 - 10.5 - Fix CVE-2018-10915, CVE-2018-10925...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt66

Oct. 12, 2016 Sergey V Turchin 3:11-alt66 - new version - security fixes: CVE-2016-4273, CVE-2016-4286, CVE-2016-6981, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6987, CVE-2016-6989, CVE-2016-6990, CVE-2016-6992...

Security fix for the ALT Linux 7 package bind version 9.9.7-alt1

July 28, 2015 George V. Kouryachy 9.9.7-alt1 - Update to ftp://ftp.isc.org/isc/bind9/9.9.7-P1/bind-9.9.7-P1.tar.gz - CVE-2015-5477 fix...

Security fix for the ALT Linux 5 package poppler5 version 0.12.4-alt0.M50P.3

Nov. 12, 2010 Andrey Cherepanov 0.12.4-alt0.M50P.3 - backport to p5 branch fixed CVE-2010-3703, CVE-2010-3702, CVE-2010-3704...

Security fix for the ALT Linux 10 package xorg-server version 2:1.4.0.90-alt6

Jan. 18, 2008 Valery Inozemtsev 2:1.4.0.90-alt6 - CVE-2007-6429: Don't spuriously reject &LT8bpp shm pixmaps...

Security fix for the ALT Linux 9 package vim version 4:8.2.5019-alt1

4:8.2.5019-alt1 built June 2, 2022 Andrey Cherepanov in task 300894 --- May 26, 2022 Alexander Danilov - Updated to 8.2.5019 fixes CVE-2022-1735, CVE-2022-1769, CVE-2022-1733, CVE-2022-1674, CVE-2022-1629, CVE-2022-1621, CVE-2022-1620, CVE-2022-1619, CVE-2022-1616 ALT42859...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.12-alt1

3.2.12-alt1 built Feb. 25, 2022 Anton Farygin in task 295709 Feb. 20, 2022 Anton Farygin - 3.2.11 - 3.2.12 - Fixes for the following security vulnerabilities: + CVE-2022-22818: Possible XSS via % debug % template tag. + CVE-2022-23833: Denial-of-service possibility in file uploads...

Security fix for the ALT Linux 10 package python3-module-django version 2.2.24-alt1

July 13, 2021 Alexey Shabalin 2.2.24-alt1 - new version 2.2.24 - Fixes for the following security vulnerabilities: + CVE-2021-28658 Potential directory-traversal via uploaded files + CVE-2021-31542 Potential directory-traversal via uploaded files + CVE-2021-32052 Header injection possibility sinc...