2275 matches found
Security fix for the ALT Linux 10 package thunderbird version 91.8.0-alt1
April 6, 2022 Pavel Vasenkov 91.8.0-alt1 - New version. - Security fixes: + CVE-2022-1097 Use-after-free in NSSToken objects + CVE-2022-28281 Out of bounds write due to unexpected WebAuthN Extensions + CVE-2022-1197 OpenPGP revocation information was ignored + CVE-2022-1196 Use-after-free after V...
Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1
91.3.0-alt1 built Nov. 9, 2021 Andrey Cherepanov in task 288753 Nov. 2, 2021 Andrey Cherepanov - New ESR version. - Security fixes: + CVE-2021-38503 iframe sandbox rules did not apply to XSLT stylesheets + CVE-2021-38504 Use-after-free in file picker dialog + CVE-2021-38505 Windows 10 Cloud...
Security fix for the ALT Linux 10 package git version 2.24.1-alt1
Dec. 8, 2019 Dmitry V. Levin 2.24.1-alt1 - 2.24.0 - 2.24.1 fixes: CVE-2019-1348, CVE-2019-1387, CVE-2019-19604; this update also addresses a few Windows and/or NTFS issues fixes: CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354...
Security fix for the ALT Linux 10 package thunderbird version 52.8.0-alt1
May 19, 2018 Andrey Cherepanov 52.8.0-alt1 - New version 52.8.0. - Enigmail 2.0.4. - Fixes: + CVE-2018-5183 Backport critical security fixes in Skia + CVE-2018-5184 Full plaintext recovery in S/MIME via chosen-ciphertext attack + CVE-2018-5154 Use-after-free with SVG animations and clip paths +...
Security fix for the ALT Linux 9 package wireshark version 2.2.7-alt1
June 4, 2017 Anton Farygin 2.2.7-alt1 - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read overflow CVE-2017-9351 wnpa-sec-2017-25 SoulSeek dissector...
Security fix for the ALT Linux 10 package apache2 version 1:2.4.25-alt1
May 18, 2017 Anton Farygin 1:2.4.25-alt1 - updated to 2.4.25 witch security fixes: + CVE-2016-8740 modhttp2: Mitigate DoS memory exhaustion via endless CONTINUATION frames. + CVE-2016-5387 core: Mitigate fcgi "httpoxy" issues + CVE-2016-2161 modauthdigest: Prevent segfaults during client entry...
Security fix for the ALT Linux 7 package samba-DC version 4.4.2-alt1
April 12, 2016 Andrey Cherepanov 4.4.2-alt1 - New version - Security fixes: - CVE-2015-5370 Multiple errors in DCE-RPC code - CVE-2016-2110 Man in the middle attacks possible with NTLMSSP - CVE-2016-2111 NETLOGON Spoofing Vulnerability - CVE-2016-2112 LDAP client and server don't enforce integrit...
Security fix for the ALT Linux 5 package poppler5 version 0.12.4-alt0.M50P.3
Nov. 12, 2010 Andrey Cherepanov 0.12.4-alt0.M50P.3 - backport to p5 branch fixed CVE-2010-3703, CVE-2010-3702, CVE-2010-3704...
Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt7
Feb. 23, 2010 Dmitry V. Levin 1:1.6.8p12-alt7 - Backported upstream fix for CVE-2010-0426 a flaw in sudoedit could give a user with permission to run sudoedit the ability to run arbitrary commands; envreset sudoers option had to be explicitly disabled to make an attack possible...
Security fix for the ALT Linux 5 package xpdf version 3.02-alt2
Aug. 8, 2007 Victor Forsyuk 3.02-alt2 - Security fix, see CVE-2007-3387...
Security fix for the ALT Linux 10 package thunderbird version 78.4.0-alt1
Oct. 22, 2020 Andrey Cherepanov 78.4.0-alt1 - New version 78.4.0. - Fixes: + CVE-2020-15969 Use-after-free in usersctp + CVE-2020-15683 Memory safety bugs fixed in Thunderbird 78.4...
Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.6-alt1
Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...
Security fix for the ALT Linux 8 package postgresql12 version 9.0.5-alt1
Oct. 11, 2011 Vladimir V Kamarzin 9.0.5-alt1 - 9.0.5 fixes CVE-2011-2483. - Disable devel subpackage...
Security fix for the ALT Linux 8 package openssl10 version 0.9.8m-alt1
Feb. 26, 2010 Evgeny Sinelnikov 0.9.8m-alt1 - Updated to 0.9.8m with security fixes and improvements, including: + CVE-2009-3245, CVE-2008-1678 + CVE-2009-1377, CVE-2009-1378, CVE-2009-1379 + CVE-2009-1387 closes: 20280 + CVE-2009-4355 closes: 22817, 23037 + patch for Cisco VPN client DTLS...
Security fix for the ALT Linux 8 package sudo version 1:1.6.7p5-alt4
Nov. 12, 2004 Dmitry V. Levin 1:1.6.7p5-alt4 - Backported upstream fix that restricts exporting of shell functions and CDPATH shell variable CAN-2004-1051. - Added help to control...
Security fix for the ALT Linux 9 package dotnet-hostfxr-3.1 version 3.1.22-alt1
3.1.22-alt1 built March 22, 2022 Vitaly Lipatov in task 295274 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...
Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.5-alt1
April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 and .NET SDK 5.0.202 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...
Security fix for the ALT Linux 9 package postgresql12-1C version 12.5-alt4
Feb. 11, 2021 Alexei Takaseev 12.5-alt4 - Fix permission checks on constraint violation errors on partitions. Fixes CVE-2021-3393 - Re-applay patch from 1C...
Security fix for the ALT Linux 10 package thunderbird version 78.5.0-alt1
Nov. 19, 2020 Andrey Cherepanov 78.5.0-alt1 - New version 78.5.0. - Fixes: + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls + CVE-2020-26953 Fullscreen...
Security fix for the ALT Linux 10 package firefox-esr version 68.8.0-alt1
May 5, 2020 Andrey Cherepanov 68.8.0-alt1 - New ESR version 68.8.0. - Fixes: + CVE-2020-12387 Use-after-free during worker shutdown + CVE-2020-12388 Sandbox escape with improperly guarded Access Tokens + CVE-2020-12389 Sandbox escape with improperly separated process types + CVE-2020-6831 Buffer...
Security fix for the ALT Linux 7 package postgresql9.3 version 9.3.18-alt0.M70P.1
9.3.18-alt0.M70P.1 built Aug. 9, 2017 Alexei Takaseev in task 186876 Aug. 9, 2017 Alexei Takaseev - 9.3.18 - fix CVE-2017-7547...
Security fix for the ALT Linux 9 package phpipam version 1.26.050-alt1
Dec. 26, 2016 Alexey Shabalin 1.26.050-alt1 - git snapshot of master branch b99412648829471f3a336036f5cd138b8f131721 - install PHPMailer from upstream fixed CVE-2015-8476,CVE-2016-10033,CVE-2016-10045...
Security fix for the ALT Linux 6 package perl version 1:5.12.5-alt1.M60P.1
Nov. 10, 2012 Vladimir Lettiev 1:5.12.5-alt1.M60P.1 - 5.12.3 - 5.12.5 - Security fixes: CVE-2011-2728: File::Glob::bsdglob memory error with GLOBALTDIRFUNC CVE-2012-5195: Heap buffer overrun in 'x' string repeat operator - Applied fix for bug 26249...
Security fix for the ALT Linux 5 package libxml2 version 1:2.7.8-alt3
Dec. 27, 2010 Dmitry V. Levin 1:2.7.8-alt3 - Updated to v2.7.8-7-gfec31bc fixes CVE-2010-4494...
Security fix for the ALT Linux 10 package xorg-server version 2:1.4.0.90-alt6
Jan. 18, 2008 Valery Inozemtsev 2:1.4.0.90-alt6 - CVE-2007-6429: Don't spuriously reject <8bpp shm pixmaps...
Security fix for the ALT Linux 10 package firefox-esr version 102.5.0-alt1
Nov. 16, 2022 Pavel Vasenkov 102.5.0-alt1 - New ESR version. - Security fixes: + CVE-2022-45403 Service Workers might have learned size of cross-origin media files + CVE-2022-45404 Fullscreen notification bypass + CVE-2022-45405 Use-after-free in InputStream implementation + CVE-2022-45406...
Security fix for the ALT Linux 9 package clamav version 0.103.6-alt1
0.103.6-alt1 built May 24, 2022 Sergey Y. Afonin in task 300475 May 20, 2022 Sergey Y. Afonin - 0.103.6 + CVE-2022-20770 + CVE-2022-20796 + CVE-2022-20771 + CVE-2022-20785 + CVE-2022-20792...
Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.22-alt1
3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...
Security fix for the ALT Linux 10 package git version 2.25.3-alt1
March 18, 2020 Dmitry V. Levin 2.25.3-alt1 - 2.25.2 - 2.25.3 fixes: CVE-2020-5260...
Security fix for the ALT Linux 8 package apache2 version 1:2.4.38-alt1
1:2.4.38-alt1 built Jan. 28, 2019 Anton Farygin in task 219984 Jan. 25, 2019 Anton Farygin - 2.4.38 - fixes: important: modssl 2.4.37 remote DoS when used with OpenSSL 1.1.1. CVE-2019-0190 low: modsessioncookie does not respect expiry time. CVE-2018-17199 low: DoS for HTTP/2 connections via slow...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt54
3:11-alt54 built Oct. 14, 2015 Sergey V Turchin in task 151390 Oct. 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-5569, CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7628, CVE-2015-7629, CVE-2015-7630, CVE-2015-7631, CVE-2015-7632, CVE-2015-7633, CVE-2015-7634,...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47
3:11-alt47 built July 8, 2015 Sergey V Turchin in task 146142 July 8, 2015 Sergey V Turchin - new version - security fixes: CVE-2014-0578, CVE-2015-3097, CVE-2015-3114, CVE-2015-3115, CVE-2015-3116, CVE-2015-3117, CVE-2015-3118, CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122,...
Security fix for the ALT Linux 7 package glibc version 6:2.11.3-alt5
June 21, 2011 Dmitry V. Levin 6:2.11.3-alt5 - Updated to glibc-2.11.3-61-g78856c5 with some broken commits reverted. - Updated cryptblowfish to 1.1 fixes CVE-2011-2483...
Security fix for the ALT Linux 10 package firefox-esr version 102.6.0-alt1
102.6.0-alt1 built Dec. 22, 2022 Pavel Vasenkov in task 311776 Dec. 14, 2022 Pavel Vasenkov - New ESR version. - Security fixes + CVE-2022-46880 Use-after-free in WebGL + CVE-2022-46872 Arbitrary file read from a compromised content process + CVE-2022-46881 Memory corruption in WebGL +...
Security fix for the ALT Linux 9 package glibc version 6:2.27-alt14
6:2.27-alt14 built Sept. 23, 2021 Dmitry V. Levin in task 285569 July 9, 2021 Dmitry V. Levin - Updated to glibc-2.27-174-g73886db621 from 2.27 branch fixes: CVE-2016-10228, CVE-2020-1751, CVE-2020-10029, CVE-2020-27618, CVE-2020-29562, CVE-2021-27645, CVE-2021-35942...
Security fix for the ALT Linux 10 package python3-module-django version 2.2.24-alt1
July 13, 2021 Alexey Shabalin 2.2.24-alt1 - new version 2.2.24 - Fixes for the following security vulnerabilities: + CVE-2021-28658 Potential directory-traversal via uploaded files + CVE-2021-31542 Potential directory-traversal via uploaded files + CVE-2021-32052 Header injection possibility sinc...
Security fix for the ALT Linux 10 package python3-module-django version 2.2.12-alt1
April 12, 2020 Alexey Shabalin 2.2.12-alt1 - 2.2.12 - Fixes for the following security vulnerabilities: + CVE-2019-19118 Privilege escalation in the Django admin. + CVE-2019-19844 Potential account hijack via password reset form + CVE-2020-7471 Potential SQL injection via StringAggdelimiter +...
Security fix for the ALT Linux 10 package thunderbird version 60.3.0-alt1
Nov. 2, 2018 Andrey Cherepanov 60.3.0-alt1 - New version 60.3.0. - Fixes: + CVE-2018-12391 HTTP Live Stream audio data is accessible cross-origin + CVE-2018-12392 Crash with nested event loops + CVE-2018-12393 Integer overflow during Unicode conversion while loading JavaScript + CVE-2018-12389...
Security fix for the ALT Linux 7 package kernel-src-kvm version 3.10.21-alt1
3.10.21-alt1 built Dec. 20, 2013 Led in task 110736 Dec. 19, 2013 Led - 3.10.21 - updates from linux-3.10.25: + CVE-2013-4587 + CVE-2013-6367 + CVE-2013-6368 + CVE-2013-6376...
Security fix for the ALT Linux 5 package pidgin-mini version 2.9.0-alt2.M50P.1
Aug. 23, 2011 Gleb Fotengauer-Malinovskiy 2.9.0-alt2.M50P.1 - backport to p5 branch CVE-2011-2485...
Security fix for the ALT Linux 5 package kdegraphics version 3.5.10-alt4
Dec. 24, 2009 Sergey V Turchin 3.5.10-alt4 - update to lastest branch 3.5 - Security fixes: - CVE-2009-0945 - CVE-2009-1709...
Security fix for the ALT Linux 6 package libmodplug version 0.8.7-alt1
May 1, 2009 Vladimir Lettiev 0.8.7-alt1 - NMU: 0.8.7 - Security fixes: + CVE-2009-1438 Closes: 19694 + PATinst Buffer Overflow Vulnerability Closes: 19824 - removed obosolete post,unldconfig...
Security fix for the ALT Linux 10 package java-17-openjdk version 0:17.0.5.0.8-alt1
0:17.0.5.0.8-alt1 built Nov. 2, 2022 Andrey Cherepanov in task 305236 Oct. 30, 2022 Andrey Cherepanov - New version. - Security fixes: + JDK-8286077, CVE-2022-21618: Wider MultiByte conversions + JDK-8286526, CVE-2022-21619: Improve NTLM support + JDK-8286910, CVE-2022-21624: Improve JNDI lookups...
Security fix for the ALT Linux 10 package firefox-esr version 102.2.0-alt1
Aug. 25, 2022 Pavel Vasenkov 102.2.0-alt1 - New ESR version. - Security fixes: + CVE-2022-38472 Address bar spoofing via XSLT error handling + CVE-2022-38473 Cross-origin XSLT Documents would have inherited the parent's permissions + CVE-2022-38476 Data race and potential use-after-free in...
Security fix for the ALT Linux 10 package thunderbird version 91.10.0-alt1
June 3, 2022 Pavel Vasenkov 91.10.0-alt1 - New version. - Security fixes: + CVE-2022-31736 Cross-Origin resource's length leaked + CVE-2022-31737 Heap buffer overflow in WebGL + CVE-2022-31738 Browser window spoof using fullscreen mode + CVE-2022-31739 Attacker-influenced path traversal when savi...
Security fix for the ALT Linux 10 package thunderbird version 91.9.1-alt1
91.9.1-alt1 built May 27, 2022 Pavel Vasenkov in task 300611 May 21, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-1802 Prototype pollution in Top-Level Await implementation + CVE-2022-1529 Untrusted input used in JavaScript object indexing, leading to prototype pollution...
Security fix for the ALT Linux 10 package wireshark version 3.4.6-alt1
June 11, 2021 Anton Farygin 3.4.6-alt1 - 3.4.6 Fixes: CVE-2021-22222...
Security fix for the ALT Linux 9 package gnutls30 version 3.6.15-alt2
3.6.15-alt2 built March 24, 2021 Mikhail Efremov in task 268190 March 22, 2021 Mikhail Efremov - Fixed gnulib tests. - Fixed CVE-2021-20231, CVE-2021-20232 fixes: CVE-2021-20231, CVE-2021-20232. - Fixed testpkcs11. - Dropped self-provide from devel subpackage...
Security fix for the ALT Linux 9 package clamav version 0.102.4-alt1
0.102.4-alt1 built July 29, 2020 Sergey Y. Afonin in task 255486 July 28, 2020 Sergey Y. Afonin - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...