2275 matches found
Security fix for the ALT Linux 10 package curl version 7.83.1-alt1
7.83.1-alt1 built May 19, 2022 Anton Farygin in task 299735 --- May 11, 2022 Anton Farygin - 7.83.1 - Fixes: CVE-2022-30115: HSTS bypass via trailing dot CVE-2022-27782: TLS and SSH connection too eager reuse CVE-2022-27781: CERTINFO never-ending busy-loop CVE-2022-27780: percent-encoded path...
Security fix for the ALT Linux 8 package dovecot-pigeonhole version 1:0.5.5-alt1.M80P.1
1:0.5.5-alt1.M80P.1 built Aug. 30, 2019 Gleb Fotengauer-Malinovskiy in task 236782 Aug. 29, 2019 Gleb Fotengauer-Malinovskiy - Applied upstream security fix fixes CVE-2019-11500...
Security fix for the ALT Linux 10 package firefox-esr version 52.5.0-alt1
Nov. 15, 2017 Andrey Cherepanov 52.5.0-alt1 - New ESR version 52.5.0 - Fixes: + CVE-2017-7828 Use-after-free of PressShell while restyling layout + CVE-2017-7830 Cross-origin URL information leak through Resource + CVE-2017-7826 Memory safety bugs fixed in Firefox 57 and Firefox ESR...
Security fix for the ALT Linux 9 package wireshark version 2.2.7-alt1
June 4, 2017 Anton Farygin 2.2.7-alt1 - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read overflow CVE-2017-9351 wnpa-sec-2017-25 SoulSeek dissector...
Security fix for the ALT Linux 5 package poppler5 version 0.12.4-alt0.M50P.3
Nov. 12, 2010 Andrey Cherepanov 0.12.4-alt0.M50P.3 - backport to p5 branch fixed CVE-2010-3703, CVE-2010-3702, CVE-2010-3704...
Security fix for the ALT Linux 6 package smarty version 2.6.19-alt1
March 12, 2008 Vladimir V Kamarzin 2.6.19-alt1 - 2.6.19. Security fixes: + CVE-2008-1066 Smarty "regexreplace" Modifier Template Security Bypass...
Security fix for the ALT Linux 8 package sudo version 1:1.6.7p5-alt4
Nov. 12, 2004 Dmitry V. Levin 1:1.6.7p5-alt4 - Backported upstream fix that restricts exporting of shell functions and CDPATH shell variable CAN-2004-1051. - Added help to control...
Security fix for the ALT Linux 9 package systemd version 1:246.14-alt1
1:246.14-alt1 built July 23, 2021 Alexey Shabalin in task 279856 July 20, 2021 Alexey Shabalin - 246.14 - Fixes CVE-2021-33910...
Security fix for the ALT Linux 8 package postgresql11 version 11.10-alt0.M80P.1
Nov. 17, 2020 Alexei Takaseev 11.10-alt0.M80P.1 - 11.10 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...
Security fix for the ALT Linux 10 package firefox-esr version 68.8.0-alt1
May 5, 2020 Andrey Cherepanov 68.8.0-alt1 - New ESR version 68.8.0. - Fixes: + CVE-2020-12387 Use-after-free during worker shutdown + CVE-2020-12388 Sandbox escape with improperly guarded Access Tokens + CVE-2020-12389 Sandbox escape with improperly separated process types + CVE-2020-6831 Buffer...
Security fix for the ALT Linux 10 package postgresql15 version 12.2-alt1
Feb. 12, 2020 Alexei Takaseev 12.2-alt1 - 12.2 Fixes CVE-2020-1720...
Security fix for the ALT Linux 10 package git version 2.24.1-alt1
Dec. 8, 2019 Dmitry V. Levin 2.24.1-alt1 - 2.24.0 - 2.24.1 fixes: CVE-2019-1348, CVE-2019-1387, CVE-2019-19604; this update also addresses a few Windows and/or NTFS issues fixes: CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354...
Security fix for the ALT Linux 10 package thunderbird version 60.7.2-alt1
June 22, 2019 Andrey Cherepanov 60.7.2-alt1 - New version 60.7.2. - Fixed: + CVE-2019-11707 Type confusion in Array.pop + CVE-2019-11708 sandbox escape using Prompt:Open...
Security fix for the ALT Linux 10 package thunderbird version 60.3.0-alt1
Nov. 2, 2018 Andrey Cherepanov 60.3.0-alt1 - New version 60.3.0. - Fixes: + CVE-2018-12391 HTTP Live Stream audio data is accessible cross-origin + CVE-2018-12392 Crash with nested event loops + CVE-2018-12393 Integer overflow during Unicode conversion while loading JavaScript + CVE-2018-12389...
Security fix for the ALT Linux 8 package apache2 version 1:2.4.34-alt1
July 31, 2018 Anton Farygin 1:2.4.34-alt1 - 2.4.34 - fixes: CVE-2018-1333 DoS for HTTP/2 connections by crafted requests CVE-2018-8011 modmd, DoS via Coredumps on specially crafted requests...
Security fix for the ALT Linux 9 package bind version 9.10.5.P3-alt1
July 11, 2017 Dmitry V. Levin 9.10.5.P3-alt1 - 9.10.4-P8 - 9.10.5-P3 fixes: CVE-2017-3140, CVE-2017-3141, CVE-2017-3142, CVE-2017-3143...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt66
Oct. 12, 2016 Sergey V Turchin 3:11-alt66 - new version - security fixes: CVE-2016-4273, CVE-2016-4286, CVE-2016-6981, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6987, CVE-2016-6989, CVE-2016-6990, CVE-2016-6992...
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt41
3:11-alt41 built Feb. 6, 2015 Sergey V Turchin in task 139918 Feb. 6, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0313, CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323,...
Security fix for the ALT Linux 6 package libpng version 1.2.44-alt1
June 29, 2010 Dmitry V. Levin 1.2.44-alt1 - Updated to 1.2.44 fixes: CVE-2010-1205, CVE-2010-2249...
Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1
91.3.0-alt1 built Nov. 9, 2021 Andrey Cherepanov in task 288753 Nov. 2, 2021 Andrey Cherepanov - New ESR version. - Security fixes: + CVE-2021-38503 iframe sandbox rules did not apply to XSLT stylesheets + CVE-2021-38504 Use-after-free in file picker dialog + CVE-2021-38505 Windows 10 Cloud...
Security fix for the ALT Linux 10 package thunderbird version 52.8.0-alt1
May 19, 2018 Andrey Cherepanov 52.8.0-alt1 - New version 52.8.0. - Enigmail 2.0.4. - Fixes: + CVE-2018-5183 Backport critical security fixes in Skia + CVE-2018-5184 Full plaintext recovery in S/MIME via chosen-ciphertext attack + CVE-2018-5154 Use-after-free with SVG animations and clip paths +...
Security fix for the ALT Linux 10 package apache2 version 2.2.16-alt1
Sept. 16, 2010 Aleksey Avdeev 2.2.16-alt1 - 2.2.16 Closes: 23933 - Security fixes CVE-2009-3555, CVE-2010-0408, CVE-2010-0425, CVE-2010-043, CVE-2010-1452, CVE-2010-2068 - Updated messages a2en,dis: added an indication of the file Closes: 20932 - Move %apache2extraavailable/Directorydefault.conf....
Security fix for the ALT Linux 9 package apache2 version 2.2.4-alt31
July 5, 2007 Aleksey Avdeev 2.2.4-alt31 - Using Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch...
Security fix for the ALT Linux 10 package firefox-esr version 102.2.0-alt1
Aug. 25, 2022 Pavel Vasenkov 102.2.0-alt1 - New ESR version. - Security fixes: + CVE-2022-38472 Address bar spoofing via XSLT error handling + CVE-2022-38473 Cross-origin XSLT Documents would have inherited the parent's permissions + CVE-2022-38476 Data race and potential use-after-free in...
Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.5-alt1
April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 and .NET SDK 5.0.202 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...
Security fix for the ALT Linux 8 package apache2 version 1:2.4.38-alt1
1:2.4.38-alt1 built Jan. 28, 2019 Anton Farygin in task 219984 Jan. 25, 2019 Anton Farygin - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow...
Security fix for the ALT Linux 7 package samba-DC version 4.4.2-alt1
April 12, 2016 Andrey Cherepanov 4.4.2-alt1 - New version - Security fixes: - CVE-2015-5370 Multiple errors in DCE-RPC code - CVE-2016-2110 Man in the middle attacks possible with NTLMSSP - CVE-2016-2111 NETLOGON Spoofing Vulnerability - CVE-2016-2112 LDAP client and server don't enforce integrit...
Security fix for the ALT Linux 8 package postgresql12 version 9.0.5-alt1
Oct. 11, 2011 Vladimir V Kamarzin 9.0.5-alt1 - 9.0.5 fixes CVE-2011-2483. - Disable devel subpackage...
Security fix for the ALT Linux 8 package openssl10 version 0.9.8m-alt1
Feb. 26, 2010 Evgeny Sinelnikov 0.9.8m-alt1 - Updated to 0.9.8m with security fixes and improvements, including: + CVE-2009-3245, CVE-2008-1678 + CVE-2009-1377, CVE-2009-1378, CVE-2009-1379 + CVE-2009-1387 closes: 20280 + CVE-2009-4355 closes: 22817, 23037 + patch for Cisco VPN client DTLS...
Security fix for the ALT Linux 10 package xorg-server version 2:1.4.0.90-alt6
Jan. 18, 2008 Valery Inozemtsev 2:1.4.0.90-alt6 - CVE-2007-6429: Don't spuriously reject <8bpp shm pixmaps...
Security fix for the ALT Linux 10 package firefox-esr version 102.6.0-alt1
102.6.0-alt1 built Dec. 22, 2022 Pavel Vasenkov in task 311776 Dec. 14, 2022 Pavel Vasenkov - New ESR version. - Security fixes + CVE-2022-46880 Use-after-free in WebGL + CVE-2022-46872 Arbitrary file read from a compromised content process + CVE-2022-46881 Memory corruption in WebGL +...
Security fix for the ALT Linux 10 package thunderbird version 91.10.0-alt1
June 3, 2022 Pavel Vasenkov 91.10.0-alt1 - New version. - Security fixes: + CVE-2022-31736 Cross-Origin resource's length leaked + CVE-2022-31737 Heap buffer overflow in WebGL + CVE-2022-31738 Browser window spoof using fullscreen mode + CVE-2022-31739 Attacker-influenced path traversal when savi...
Security fix for the ALT Linux 9 package clamav version 0.103.6-alt1
0.103.6-alt1 built May 24, 2022 Sergey Y. Afonin in task 300475 May 20, 2022 Sergey Y. Afonin - 0.103.6 + CVE-2022-20770 + CVE-2022-20796 + CVE-2022-20771 + CVE-2022-20785 + CVE-2022-20792...
Security fix for the ALT Linux 9 package dotnet-hostfxr-3.1 version 3.1.22-alt1
3.1.22-alt1 built March 22, 2022 Vitaly Lipatov in task 295274 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...
Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.22-alt1
3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...
Security fix for the ALT Linux 10 package python3-module-django version 2.2.24-alt1
July 13, 2021 Alexey Shabalin 2.2.24-alt1 - new version 2.2.24 - Fixes for the following security vulnerabilities: + CVE-2021-28658 Potential directory-traversal via uploaded files + CVE-2021-31542 Potential directory-traversal via uploaded files + CVE-2021-32052 Header injection possibility sinc...
Security fix for the ALT Linux 10 package thunderbird version 78.5.0-alt1
Nov. 19, 2020 Andrey Cherepanov 78.5.0-alt1 - New version 78.5.0. - Fixes: + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls + CVE-2020-26953 Fullscreen...
Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.6-alt1
Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...
Security fix for the ALT Linux 10 package samba version 4.10.2-alt1
April 11, 2019 Evgeny Sinelnikov 4.10.2-alt1 - Update to spring security release - Security fixes: + CVE-2019-3870 World writable files in Samba AD DC private/ dir + CVE-2019-3880 Save registry file outside share as unprivileged user...
Security fix for the ALT Linux 8 package samba-DC version 4.6.1-alt1
March 23, 2017 Evgeny Sinelnikov 4.6.1-alt1 - Update to spring security release - Fixed build --without docs closes: 33118 - Security fixes: + CVE-2017-2619 Symlink race allows access outside share definition...
Security fix for the ALT Linux 7 package openssl10 version 1.0.1u-alt0.M70P.1
1.0.1u-alt0.M70P.1 built Sept. 23, 2016 Gleb Fotengauer-Malinovskiy in task 169809 Sept. 22, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.1u fixes CVE-2016-2177, CVE-2016-2178, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303,...
Security fix for the ALT Linux 6 package openssl10 version 1.0.0e-alt1
Sept. 12, 2011 Dmitry V. Levin 1.0.0e-alt1 - Updated to 1.0.0e fixes CVE-2011-3207...
Security fix for the ALT Linux 10 package firefox-esr version 102.5.0-alt1
Nov. 16, 2022 Pavel Vasenkov 102.5.0-alt1 - New ESR version. - Security fixes: + CVE-2022-45403 Service Workers might have learned size of cross-origin media files + CVE-2022-45404 Fullscreen notification bypass + CVE-2022-45405 Use-after-free in InputStream implementation + CVE-2022-45406...
Security fix for the ALT Linux 9 package gnutls30 version 3.6.15-alt2
3.6.15-alt2 built March 24, 2021 Mikhail Efremov in task 268190 March 22, 2021 Mikhail Efremov - Fixed gnulib tests. - Fixed CVE-2021-20231, CVE-2021-20232 fixes: CVE-2021-20231, CVE-2021-20232. - Fixed testpkcs11. - Dropped self-provide from devel subpackage...
Security fix for the ALT Linux 9 package clamav version 0.102.4-alt1
0.102.4-alt1 built July 29, 2020 Sergey Y. Afonin in task 255486 July 28, 2020 Sergey Y. Afonin - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...
Security fix for the ALT Linux 10 package python3-module-django version 2.2.12-alt1
April 12, 2020 Alexey Shabalin 2.2.12-alt1 - 2.2.12 - Fixes for the following security vulnerabilities: + CVE-2019-19118 Privilege escalation in the Django admin. + CVE-2019-19844 Potential account hijack via password reset form + CVE-2020-7471 Potential SQL injection via StringAggdelimiter +...
Security fix for the ALT Linux 7 package wireshark version 2.2.7-alt1.M70P.1
2.2.7-alt1.M70P.1 built June 4, 2017 Anton Farygin in task 183813 June 4, 2017 Anton Farygin - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read...
Security fix for the ALT Linux 7 package ImageMagick version 6.8.4.10-alt3.M70P.1
6.8.4.10-alt3.M70P.1 built May 20, 2016 Andrey Cherepanov in task 164801 May 18, 2016 Andrey Cherepanov - Apply security patches from Debian: ImageTragick: The coders EPHEMERAL, URL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT are disabled via policy.xml file, since they are vulnerable to code...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt54
3:11-alt54 built Oct. 14, 2015 Sergey V Turchin in task 151390 Oct. 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-5569, CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7628, CVE-2015-7629, CVE-2015-7630, CVE-2015-7631, CVE-2015-7632, CVE-2015-7633, CVE-2015-7634,...
Security fix for the ALT Linux 6 package perl version 1:5.12.5-alt1.M60P.1
Nov. 10, 2012 Vladimir Lettiev 1:5.12.5-alt1.M60P.1 - 5.12.3 - 5.12.5 - Security fixes: CVE-2011-2728: File::Glob::bsdglob memory error with GLOBALTDIRFUNC CVE-2012-5195: Heap buffer overrun in 'x' string repeat operator - Applied fix for bug 26249...