Security fix for the ALT Linux 8 package apache2 version 1:2.4.34-alt1

July 31, 2018 Anton Farygin 1:2.4.34-alt1 - 2.4.34 - fixes: CVE-2018-1333 DoS for HTTP/2 connections by crafted requests CVE-2018-8011 modmd, DoS via Coredumps on specially crafted requests...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1u-alt0.M70P.1

1.0.1u-alt0.M70P.1 built Sept. 23, 2016 Gleb Fotengauer-Malinovskiy in task 169809 Sept. 22, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.1u fixes CVE-2016-2177, CVE-2016-2178, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303,...

Security fix for the ALT Linux 9 package postgresql12 version 9.0.5-alt1

Oct. 11, 2011 Vladimir V Kamarzin 9.0.5-alt1 - 9.0.5 Fixes CVE-2011-2483. - Disable devel subpackage...

Security fix for the ALT Linux 10 package php8.0 version 8.0.20-alt1

8.0.20-alt1 built June 21, 2022 Anton Farygin in task 302229 June 16, 2022 Anton Farygin - 8.0.19 - 8.0.20 Fixes: CVE-2022-31626, CVE-2022-31625...

Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1

91.3.0-alt1 built Nov. 9, 2021 Andrey Cherepanov in task 288753 Nov. 2, 2021 Andrey Cherepanov - New ESR version. - Security fixes: + CVE-2021-38503 iframe sandbox rules did not apply to XSLT stylesheets + CVE-2021-38504 Use-after-free in file picker dialog + CVE-2021-38505 Windows 10 Cloud...

Security fix for the ALT Linux 9 package systemd version 1:246.14-alt1

1:246.14-alt1 built July 23, 2021 Alexey Shabalin in task 279856 July 20, 2021 Alexey Shabalin - 246.14 - Fixes CVE-2021-33910...

Security fix for the ALT Linux 9 package postgresql11 version 11.12-alt0.M90P.1

11.12-alt0.M90P.1 built May 24, 2021 Alexei Takaseev in task 272061 --- May 18, 2021 Alexei Takaseev - 11.12 Fixes CVE-2021-32027, CVE-2021-32028, CVE-2021-32029...

Security fix for the ALT Linux 9 package postgresql12-1C version 12.5-alt4

Feb. 11, 2021 Alexei Takaseev 12.5-alt4 - Fix permission checks on constraint violation errors on partitions. Fixes CVE-2021-3393 - Re-applay patch from 1C...

Security fix for the ALT Linux 9 package bind version 9.10.5.P3-alt1

July 11, 2017 Dmitry V. Levin 9.10.5.P3-alt1 - 9.10.4-P8 - 9.10.5-P3 fixes: CVE-2017-3140, CVE-2017-3141, CVE-2017-3142, CVE-2017-3143...

Security fix for the ALT Linux 10 package curl version 7.83.1-alt1

7.83.1-alt1 built May 19, 2022 Anton Farygin in task 299735 --- May 11, 2022 Anton Farygin - 7.83.1 - Fixes: CVE-2022-30115: HSTS bypass via trailing dot CVE-2022-27782: TLS and SSH connection too eager reuse CVE-2022-27781: CERTINFO never-ending busy-loop CVE-2022-27780: percent-encoded path...

Security fix for the ALT Linux 10 package firefox-esr version 52.5.0-alt1

Nov. 15, 2017 Andrey Cherepanov 52.5.0-alt1 - New ESR version 52.5.0 - Fixes: + CVE-2017-7828 Use-after-free of PressShell while restyling layout + CVE-2017-7830 Cross-origin URL information leak through Resource + CVE-2017-7826 Memory safety bugs fixed in Firefox 57 and Firefox ESR...

Security fix for the ALT Linux 9 package wireshark version 2.2.7-alt1

June 4, 2017 Anton Farygin 2.2.7-alt1 - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read overflow CVE-2017-9351 wnpa-sec-2017-25 SoulSeek dissector...

Security fix for the ALT Linux 10 package apache2 version 2.2.20-alt1

Aug. 31, 2011 Aleksey Avdeev 2.2.20-alt1 - 2.2.20 - Security fixes CVE-2011-3192 - Update patchset itk for apache2.2-mpm-itk-2.2.17-01...

Security fix for the ALT Linux 5 package xpdf version 3.02-alt2

Aug. 8, 2007 Victor Forsyuk 3.02-alt2 - Security fix, see CVE-2007-3387...

Security fix for the ALT Linux 9 package apache2 version 2.2.4-alt31

July 5, 2007 Aleksey Avdeev 2.2.4-alt31 - Using Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch...

Security fix for the ALT Linux 9 package vim version 4:8.2.5019-alt1

4:8.2.5019-alt1 built June 2, 2022 Andrey Cherepanov in task 300894 --- May 26, 2022 Alexander Danilov - Updated to 8.2.5019 fixes CVE-2022-1735, CVE-2022-1769, CVE-2022-1733, CVE-2022-1674, CVE-2022-1629, CVE-2022-1621, CVE-2022-1620, CVE-2022-1619, CVE-2022-1616 ALT42859...

Security fix for the ALT Linux 10 package thunderbird version 91.8.0-alt1

April 6, 2022 Pavel Vasenkov 91.8.0-alt1 - New version. - Security fixes: + CVE-2022-1097 Use-after-free in NSSToken objects + CVE-2022-28281 Out of bounds write due to unexpected WebAuthN Extensions + CVE-2022-1197 OpenPGP revocation information was ignored + CVE-2022-1196 Use-after-free after V...

Security fix for the ALT Linux 9 package mediawiki version 1.36.1-alt1

1.36.1-alt1 built June 30, 2021 Vitaly Lipatov in task 274917 June 27, 2021 Vitaly Lipatov - new version 1.36.1 with rpmrb script - T280226, CVE-2021-35197: Prevent blocked users from purging pages...

Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package firefox-esr version 68.8.0-alt1

May 5, 2020 Andrey Cherepanov 68.8.0-alt1 - New ESR version 68.8.0. - Fixes: + CVE-2020-12387 Use-after-free during worker shutdown + CVE-2020-12388 Sandbox escape with improperly guarded Access Tokens + CVE-2020-12389 Sandbox escape with improperly separated process types + CVE-2020-6831 Buffer...

Security fix for the ALT Linux 10 package git version 2.25.3-alt1

March 18, 2020 Dmitry V. Levin 2.25.3-alt1 - 2.25.2 - 2.25.3 fixes: CVE-2020-5260...

Security fix for the ALT Linux 7 package samba-DC version 4.4.2-alt1

April 12, 2016 Andrey Cherepanov 4.4.2-alt1 - New version - Security fixes: - CVE-2015-5370 Multiple errors in DCE-RPC code - CVE-2016-2110 Man in the middle attacks possible with NTLMSSP - CVE-2016-2111 NETLOGON Spoofing Vulnerability - CVE-2016-2112 LDAP client and server don't enforce integrit...

Security fix for the ALT Linux 5 package poppler5 version 0.12.4-alt0.M50P.3

Nov. 12, 2010 Andrey Cherepanov 0.12.4-alt0.M50P.3 - backport to p5 branch fixed CVE-2010-3703, CVE-2010-3702, CVE-2010-3704...

Security fix for the ALT Linux 10 package firefox-esr version 102.6.0-alt1

102.6.0-alt1 built Dec. 22, 2022 Pavel Vasenkov in task 311776 Dec. 14, 2022 Pavel Vasenkov - New ESR version. - Security fixes + CVE-2022-46880 Use-after-free in WebGL + CVE-2022-46872 Arbitrary file read from a compromised content process + CVE-2022-46881 Memory corruption in WebGL +...

Security fix for the ALT Linux 9 package dotnet-hostfxr-3.1 version 3.1.22-alt1

3.1.22-alt1 built March 22, 2022 Vitaly Lipatov in task 295274 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package python3-module-django version 2.2.24-alt1

July 13, 2021 Alexey Shabalin 2.2.24-alt1 - new version 2.2.24 - Fixes for the following security vulnerabilities: + CVE-2021-28658 Potential directory-traversal via uploaded files + CVE-2021-31542 Potential directory-traversal via uploaded files + CVE-2021-32052 Header injection possibility sinc...

Security fix for the ALT Linux 10 package thunderbird version 78.5.0-alt1

Nov. 19, 2020 Andrey Cherepanov 78.5.0-alt1 - New version 78.5.0. - Fixes: + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls + CVE-2020-26953 Fullscreen...

Security fix for the ALT Linux 10 package thunderbird version 78.4.0-alt1

Oct. 22, 2020 Andrey Cherepanov 78.4.0-alt1 - New version 78.4.0. - Fixes: + CVE-2020-15969 Use-after-free in usersctp + CVE-2020-15683 Memory safety bugs fixed in Thunderbird 78.4...

Security fix for the ALT Linux 10 package git version 2.24.1-alt1

Dec. 8, 2019 Dmitry V. Levin 2.24.1-alt1 - 2.24.0 - 2.24.1 fixes: CVE-2019-1348, CVE-2019-1387, CVE-2019-19604; this update also addresses a few Windows and/or NTFS issues fixes: CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.25-alt1

May 18, 2017 Anton Farygin 1:2.4.25-alt1 - updated to 2.4.25 witch security fixes: + CVE-2016-8740 modhttp2: Mitigate DoS memory exhaustion via endless CONTINUATION frames. + CVE-2016-5387 core: Mitigate fcgi "httpoxy" issues + CVE-2016-2161 modauthdigest: Prevent segfaults during client entry...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt54

3:11-alt54 built Oct. 14, 2015 Sergey V Turchin in task 151390 Oct. 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-5569, CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7628, CVE-2015-7629, CVE-2015-7630, CVE-2015-7631, CVE-2015-7632, CVE-2015-7633, CVE-2015-7634,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47

3:11-alt47 built July 8, 2015 Sergey V Turchin in task 146142 July 8, 2015 Sergey V Turchin - new version - security fixes: CVE-2014-0578, CVE-2015-3097, CVE-2015-3114, CVE-2015-3115, CVE-2015-3116, CVE-2015-3117, CVE-2015-3118, CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122,...

Security fix for the ALT Linux 8 package openssl10 version 0.9.8m-alt1

Feb. 26, 2010 Evgeny Sinelnikov 0.9.8m-alt1 - Updated to 0.9.8m with security fixes and improvements, including: + CVE-2009-3245, CVE-2008-1678 + CVE-2009-1377, CVE-2009-1378, CVE-2009-1379 + CVE-2009-1387 closes: 20280 + CVE-2009-4355 closes: 22817, 23037 + patch for Cisco VPN client DTLS...

Security fix for the ALT Linux 10 package xorg-server version 2:1.4.0.90-alt6

Jan. 18, 2008 Valery Inozemtsev 2:1.4.0.90-alt6 - CVE-2007-6429: Don't spuriously reject &LT8bpp shm pixmaps...

Security fix for the ALT Linux 10 package firefox-esr version 102.5.0-alt1

Nov. 16, 2022 Pavel Vasenkov 102.5.0-alt1 - New ESR version. - Security fixes: + CVE-2022-45403 Service Workers might have learned size of cross-origin media files + CVE-2022-45404 Fullscreen notification bypass + CVE-2022-45405 Use-after-free in InputStream implementation + CVE-2022-45406...

Security fix for the ALT Linux 10 package firefox-esr version 102.2.0-alt1

Aug. 25, 2022 Pavel Vasenkov 102.2.0-alt1 - New ESR version. - Security fixes: + CVE-2022-38472 Address bar spoofing via XSLT error handling + CVE-2022-38473 Cross-origin XSLT Documents would have inherited the parent's permissions + CVE-2022-38476 Data race and potential use-after-free in...

Security fix for the ALT Linux 9 package clamav version 0.103.6-alt1

0.103.6-alt1 built May 24, 2022 Sergey Y. Afonin in task 300475 May 20, 2022 Sergey Y. Afonin - 0.103.6 + CVE-2022-20770 + CVE-2022-20796 + CVE-2022-20771 + CVE-2022-20785 + CVE-2022-20792...

Security fix for the ALT Linux 9 package gnutls30 version 3.6.15-alt2

3.6.15-alt2 built March 24, 2021 Mikhail Efremov in task 268190 March 22, 2021 Mikhail Efremov - Fixed gnulib tests. - Fixed CVE-2021-20231, CVE-2021-20232 fixes: CVE-2021-20231, CVE-2021-20232. - Fixed testpkcs11. - Dropped self-provide from devel subpackage...

Security fix for the ALT Linux 9 package clamav version 0.102.4-alt1

0.102.4-alt1 built July 29, 2020 Sergey Y. Afonin in task 255486 July 28, 2020 Sergey Y. Afonin - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...

Security fix for the ALT Linux 8 package apache2 version 1:2.4.38-alt1

1:2.4.38-alt1 built Jan. 28, 2019 Anton Farygin in task 219984 Jan. 25, 2019 Anton Farygin - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow...

Security fix for the ALT Linux 10 package thunderbird version 60.3.0-alt1

Nov. 2, 2018 Andrey Cherepanov 60.3.0-alt1 - New version 60.3.0. - Fixes: + CVE-2018-12391 HTTP Live Stream audio data is accessible cross-origin + CVE-2018-12392 Crash with nested event loops + CVE-2018-12393 Integer overflow during Unicode conversion while loading JavaScript + CVE-2018-12389...

Security fix for the ALT Linux 10 package thunderbird version 52.8.0-alt1

May 19, 2018 Andrey Cherepanov 52.8.0-alt1 - New version 52.8.0. - Enigmail 2.0.4. - Fixes: + CVE-2018-5183 Backport critical security fixes in Skia + CVE-2018-5184 Full plaintext recovery in S/MIME via chosen-ciphertext attack + CVE-2018-5154 Use-after-free with SVG animations and clip paths +...

Security fix for the ALT Linux 8 package samba-DC version 4.6.1-alt1

March 23, 2017 Evgeny Sinelnikov 4.6.1-alt1 - Update to spring security release - Fixed build --without docs closes: 33118 - Security fixes: + CVE-2017-2619 Symlink race allows access outside share definition...

Security fix for the ALT Linux 9 package phpipam version 1.26.050-alt1

Dec. 26, 2016 Alexey Shabalin 1.26.050-alt1 - git snapshot of master branch b99412648829471f3a336036f5cd138b8f131721 - install PHPMailer from upstream fixed CVE-2015-8476,CVE-2016-10033,CVE-2016-10045...

Security fix for the ALT Linux 8 package postgresql12 version 9.0.5-alt1

Oct. 11, 2011 Vladimir V Kamarzin 9.0.5-alt1 - 9.0.5 fixes CVE-2011-2483. - Disable devel subpackage...

Security fix for the ALT Linux 5 package pidgin-mini version 2.9.0-alt2.M50P.1

Aug. 23, 2011 Gleb Fotengauer-Malinovskiy 2.9.0-alt2.M50P.1 - backport to p5 branch CVE-2011-2485...

Security fix for the ALT Linux 7 package glibc version 6:2.11.3-alt5

June 21, 2011 Dmitry V. Levin 6:2.11.3-alt5 - Updated to glibc-2.11.3-61-g78856c5 with some broken commits reverted. - Updated cryptblowfish to 1.1 fixes CVE-2011-2483...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.22-alt1

3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package wireshark version 3.4.6-alt1

June 11, 2021 Anton Farygin 3.4.6-alt1 - 3.4.6 Fixes: CVE-2021-22222...

Security fix for the ALT Linux 10 package firefox-esr version 78.6.0-alt1

Dec. 14, 2020 Andrey Cherepanov 78.6.0-alt1 - New version 78.6.0. - Fixes: + CVE-2020-16042 Operations on a BigInt could have caused uninitialized memory to be exposed + CVE-2020-26971 Heap buffer overflow in WebGL + CVE-2020-26973 CSS Sanitizer performed incorrect sanitization + CVE-2020-26974...