Security fix for the ALT Linux 10 package samba version 4.10.2-alt1

April 11, 2019 Evgeny Sinelnikov 4.10.2-alt1 - Update to spring security release - Security fixes: + CVE-2019-3870 World writable files in Samba AD DC private/ dir + CVE-2019-3880 Save registry file outside share as unprivileged user...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 2.1.9-alt1

March 13, 2019 Vitaly Lipatov 2.1.9-alt1 - new version 2.1.9 with rpmrb script - includes .NET Core 2.1.9, ASP.NET Core 2.1.9 and .NET Core SDK 2.1.505 - CVE-2019-0657: .NET Core NuGet Tampering Vulnerability...

Security fix for the ALT Linux 8 package mariadb version 10.1.29-alt1

Dec. 6, 2017 Alexey Shabalin 10.1.29-alt1 - 10.1.29 - Fixes for the following security vulnerabilities: + CVE-2017-10378 + CVE-2017-10268 + MDEV-13819...

Security fix for the ALT Linux 8 package apache2 version 1:2.4.25-alt1

May 18, 2017 Anton Farygin 1:2.4.25-alt1 - updated to 2.4.25 witch security fixes: + CVE-2016-8740 modhttp2: Mitigate DoS memory exhaustion via endless CONTINUATION frames. + CVE-2016-5387 core: Mitigate fcgi "httpoxy" issues + CVE-2016-2161 modauthdigest: Prevent segfaults during client entry...

Security fix for the ALT Linux 8 package samba-DC version 4.6.1-alt1

March 23, 2017 Evgeny Sinelnikov 4.6.1-alt1 - Update to spring security release - Fixed build --without docs closes: 33118 - Security fixes: + CVE-2017-2619 Symlink race allows access outside share definition...

Security fix for the ALT Linux 7 package kernel-src-kvm version 3.10.21-alt1

3.10.21-alt1 built Dec. 20, 2013 Led in task 110736 Dec. 19, 2013 Led - 3.10.21 - updates from linux-3.10.25: + CVE-2013-4587 + CVE-2013-6367 + CVE-2013-6368 + CVE-2013-6376...

Security fix for the ALT Linux 10 package apache2 version 2.2.16-alt1

Sept. 16, 2010 Aleksey Avdeev 2.2.16-alt1 - 2.2.16 Closes: 23933 - Security fixes CVE-2009-3555, CVE-2010-0408, CVE-2010-0425, CVE-2010-043, CVE-2010-1452, CVE-2010-2068 - Updated messages a2en,dis: added an indication of the file Closes: 20932 - Move %apache2extraavailable/Directorydefault.conf....

Security fix for the ALT Linux 5 package kdegraphics version 3.5.10-alt4

Dec. 24, 2009 Sergey V Turchin 3.5.10-alt4 - update to lastest branch 3.5 - Security fixes: - CVE-2009-0945 - CVE-2009-1709...

Security fix for the ALT Linux 10 package firefox-esr version 78.12.0-alt1

July 12, 2021 Andrey Cherepanov 78.12.0-alt1 - New version 78.12.0. - Security fixes: + CVE-2021-29970 Use-after-free in accessibility features of a document + CVE-2021-30547 Out of bounds write in ANGLE + CVE-2021-29976 Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12...

Security fix for the ALT Linux 8 package git version 2.24.1-alt1

2.24.1-alt1 built Dec. 12, 2019 Dmitry V. Levin in task 242633 Dec. 8, 2019 Dmitry V. Levin - 2.24.0 - 2.24.1 fixes: CVE-2019-1348, CVE-2019-1387, CVE-2019-19604; this update also addresses a few Windows and/or NTFS issues fixes: CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352,...

Security fix for the ALT Linux 9 package nginx version 1.12.1-alt1

July 11, 2017 Gleb Fotengauer-Malinovskiy 1.12.1-alt1 - Updated to 1.12.1 Fixes CVE-2017-7529...

Security fix for the ALT Linux 7 package wireshark version 2.2.7-alt1.M70P.1

2.2.7-alt1.M70P.1 built June 4, 2017 Anton Farygin in task 183813 June 4, 2017 Anton Farygin - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read...

Security fix for the ALT Linux 6 package bind version 9.3.6-alt7.M60P.2

9.3.6-alt7.M60P.2 built Oct. 4, 2016 Gleb Fotengauer-Malinovskiy in task 170130 Sept. 29, 2016 Gleb Fotengauer-Malinovskiy - Applied upstream fix for CVE-2016-2776...

Security fix for the ALT Linux 7 package ImageMagick version 6.8.4.10-alt3.M70P.1

6.8.4.10-alt3.M70P.1 built May 20, 2016 Andrey Cherepanov in task 164801 May 18, 2016 Andrey Cherepanov - Apply security patches from Debian: ImageTragick: The coders EPHEMERAL, URL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT are disabled via policy.xml file, since they are vulnerable to code...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt45

3:11-alt45 built June 10, 2015 Sergey V Turchin in task 145263 June 10, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3096, CVE-2015-3097, CVE-2015-3098, CVE-2015-3099, CVE-2015-3100, CVE-2015-3101, CVE-2015-3102, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105, CVE-2015-3106,...

Security fix for the ALT Linux 9 package apache2 version 2.2.21-alt2

Nov. 19, 2011 Aleksey Avdeev 2.2.21-alt2 - Security fixes CVE-2011-3368...

Security fix for the ALT Linux 6 package openssl10 version 1.0.0e-alt1

Sept. 12, 2011 Dmitry V. Levin 1.0.0e-alt1 - Updated to 1.0.0e fixes CVE-2011-3207...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.4-alt1

Aug. 5, 2019 Alexey Shabalin 2.2.4-alt1 - 2.2.4 - Fixes for the following security vulnerabilities: + CVE-2019-14232 Adjusted regex to avoid backtracking issues when truncating HTML + CVE-2019-14233 Prevented excessive HTMLParser recursion in striptags when handling incomplete HTML entities +...

Security fix for the ALT Linux 10 package libtiff version 3.9.6-alt3

Aug. 27, 2012 Dmitry V. Levin 3.9.6-alt3 - Updated to Release-v3-9-6-8-g0f67777 fixes CVE-2012-2113 CVE-2012-2088 CVE-2012-3401...

Security fix for the ALT Linux 6 package openssl10 version 1.0.0c-alt1

Feb. 1, 2011 Dmitry V. Levin 1.0.0c-alt1 - Updated to 1.0.0c fixes CVE-2010-4180...

Security fix for the ALT Linux 10 package thunderbird version 102.2.1-alt1

102.2.1-alt1 built Oct. 26, 2022 Andrey Cherepanov in task 307737 Sept. 6, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-3033 Leaking of sensitive information when composing a response to an HTML email with a META refresh tag + CVE-2022-3032 Remote content specified in an HTML...

Security fix for the ALT Linux 10 package wireshark version 3.6.2-alt1

3.6.2-alt1 built Feb. 28, 2022 Anton Farygin in task 295750 Feb. 21, 2022 Anton Farygin - 3.6.2 Fixes: CVE-2022-0586, CVE-2022-0585, CVE-2022-0583, CVE-2022-0582, CVE-2022-0581...

Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt3

9.10.8.P1-alt3 built Aug. 24, 2020 Stanislav Levin in task 256547 Aug. 21, 2020 Stanislav Levin - Applied upstream patches fixes: CVE-2020-8622, CVE-2020-8623, CVE-2020-8624...

Security fix for the ALT Linux 10 package bind version 9.11.19-alt1

May 19, 2020 Stanislav Levin 9.11.19-alt1 - 9.11.18 - 9.11.19 fixes: CVE-2020-8616, CVE-2020-8617...

Security fix for the ALT Linux 10 package thunderbird version 68.1.2-alt1

Oct. 13, 2019 Andrey Cherepanov 68.1.2-alt1 - New version 68.1.2. - Fixed: + CVE-2019-11739 Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message + CVE-2019-11746 Use-after-free while manipulating video + CVE-2019-11744 XSS by breaking out of title and textarea...

Security fix for the ALT Linux 10 package firefox-esr version 60.6.1-alt1

March 23, 2019 Andrey Cherepanov 60.6.1-alt1 - New ESR version 60.6.1. - Fixed: + CVE-2019-9810 IonMonkey MArraySlice has incorrect alias information + CVE-2019-9813 Ionmonkey type confusion with proto mutations...

Security fix for the ALT Linux 8 package mariadb version 10.1.37-alt1

10.1.37-alt1 built Dec. 5, 2018 Alexey Shabalin in task 217040 Nov. 28, 2018 Alexey Shabalin - 10.1.37 - Fixes for the following security vulnerabilities: + CVE-2018-3282 + CVE-2016-9843 + CVE-2018-3174 + CVE-2018-3143 + CVE-2018-3156 + CVE-2018-3251...

Security fix for the ALT Linux 10 package firefox-esr version 60.2.1-alt1

Sept. 24, 2018 Andrey Cherepanov 60.2.1-alt1 - New ESR version 60.2.1. - Fixed: + CVE-2018-12385 Crash in TransportSecurityInfo due to cached data + CVE-2018-12383 Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords...

Security fix for the ALT Linux 8 package vlc version 2.2.6.20170917-alt0.M80C.1

Sept. 18, 2017 Anton V. Boyarshinov 2.2.6.20170917-alt0.M80C.1 - 2.2.6+ Fixes: CVE-2017-10699, CVE-2017-8310, CVE-2017-8311, CVE-2017-8313, CVE-2017-9300, CVE-2017-9301...

Security fix for the ALT Linux 6 package fetchmail version 6.3.8-alt1

April 7, 2007 Michael Shigorin 6.3.8-alt1 - 6.3.8 + APOP was strengthened to make the CVE-2007-1558 attack harder + crash when opening the BSMTP output file failed was fixed + other fixes and improvements...

Security fix for the ALT Linux 9 package dotnet-corefx-3.1 version 3.1.22-alt1

3.1.22-alt1 built March 22, 2022 Vitaly Lipatov in task 295274 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package postgresql13 version 13.3-alt1

May 17, 2021 Alexei Takaseev 13.3-alt1 - 13.3 Fixes CVE-2021-32027, CVE-2021-32028, CVE-2021-32029 - Build with python3...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.3-alt1

Feb. 17, 2021 Vitaly Lipatov 5.0.3-alt1 - .NET 5.0.3 and .NET SDK 5.0.103 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1

1.42.027-alt1 built Oct. 21, 2020 Alexey Shabalin in task 260176 Oct. 19, 2020 Alexey Shabalin - snapshot of 1.4 branch 0c66d2335a9dd13006c83ed64ae565a4a3cb7f0c - Update jQuery to address three CVE Vulnerabilities - Fixes: + CVE-2020-11022 + CVE-2020-11023 + CVE-2019-11358...

Security fix for the ALT Linux 10 package bind version 9.11.22-alt1

Aug. 21, 2020 Stanislav Levin 9.11.22-alt1 - 9.11.20 - 9.11.22 fixes: CVE-2020-8622, CVE-2020-8623, CVE-2020-8624...

Security fix for the ALT Linux 10 package clamav version 0.102.3-alt1

May 27, 2020 Sergey Y. Afonin 0.102.3-alt1 - 0.102.3 + CVE-2020-3327 - 0.102.2 only + CVE-2020-3341 - from 0.101 to 0.102.2...

Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt2

9.10.8.P1-alt2 built May 26, 2020 Stanislav Levin in task 251959 May 19, 2020 Stanislav Levin - Applied upstream patches fixes: CVE-2020-8616, CVE-2020-8617...

Security fix for the ALT Linux 10 package runc version 1.0.0-alt12.rc10

Feb. 17, 2020 Vladimir Didenko 1.0.0-alt12.rc10 - New version - Fixes CVE-2019-19921...

Security fix for the ALT Linux 10 package firefox-esr version 60.3.0-alt1

Oct. 23, 2018 Andrey Cherepanov 60.3.0-alt1 - New ESR version 60.3.0. - Fixed: + CVE-2018-12391 HTTP Live Stream audio data is accessible cross-origin + CVE-2018-12392 Crash with nested event loops + CVE-2018-12393 Integer overflow during Unicode conversion while loading JavaScript + CVE-2018-123...

Security fix for the ALT Linux 7 package samba-DC version 4.5.12-alt1.M70P.1

4.5.12-alt1.M70P.1 built July 13, 2017 Evgeny Sinelnikov in task 185331 July 12, 2017 Evgeny Sinelnikov - Update to summer security release - Security fixes: + CVE-2017-11103 Orpheus' Lyre KDC-REP service name validation...

Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt18

2.6.32-alt18 built Feb. 13, 2014 Led in task 113991 Feb. 12, 2014 Led - 2.6.32-431.5.1.el6: + CVE-2013-2929 + CVE-2013-4588 + CVE-2013-6405...

Security fix for the ALT Linux 7 package krb5 version 1.11.1-alt1

March 30, 2013 Ivan A. Melnikov 1.11.1-alt1 - 1.11.1 + fix a null pointer dereference in the KDC PKINIT code CVE-2013-1415; - drop obsolete patch 21; - add patch 22 from upstream git to fix a memory leak in krb5getinitcredskeytab upstream ticket 7586...

Security fix for the ALT Linux 6 package libpng version 1.2.46-alt1

July 13, 2011 Dmitry V. Levin 1.2.46-alt1 - Updated to 1.2.46 fixes: CVE-2011-2690, CVE-2011-2691, CVE-2011-2692...

Security fix for the ALT Linux 6 package kernel-image-hpc-skif version 2.6.32-alt24

Oct. 20, 2010 Sergey Bolshakov 2.6.32-alt24 - 2.6.32.24 - CVE-2010-3904 fixed...

Security fix for the ALT Linux 10 package thunderbird version 102.6.1-alt1

102.6.1-alt1 built Dec. 29, 2022 Pavel Vasenkov in task 312281 Dec. 23, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-46874 Drag and Dropped Filenames could have been truncated to malicious extensions...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.13-alt1

3.2.13-alt1 built April 12, 2022 Anton Farygin in task 298294 April 11, 2022 Anton Farygin - 3.2.12 - 3.2.13 - Fixes: CVE-2022-28346: Potential SQL injection in QuerySet.annotate, aggregate, and extra CVE-2022-28347: Potential SQL injection via QuerySet.explainoptions on PostgreSQL...

Security fix for the ALT Linux 10 package samba version 4.14.10-alt1

Nov. 7, 2021 Evgeny Sinelnikov 4.14.10-alt1 - Update to latest security release of Samba 4.14 - Security fixes: + CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication. https://www.samba.org/samba/security/CVE-2016-2124.html + CVE-2020-25717: A user on the domain ca...

Security fix for the ALT Linux 9 package wireshark version 3.2.7-alt1

3.2.7-alt1 built Oct. 5, 2020 Anton Farygin in task 258926 Sept. 30, 2020 Anton Farygin - 3.2.7 - fixes: BLIP dissector crash. CVE-2020-25866 TCP dissector crash. CVE-2020-25862 MIME Multipart dissector crash. CVE-2020-25863...

Security fix for the ALT Linux 10 package postgresql14 version 12.4-alt1

Aug. 12, 2020 Alexei Takaseev 12.4-alt1 - 12.4 Fixes CVE-2020-14349, CVE-2020-14350...

Security fix for the ALT Linux 9 package edk2-tools version 20200229-alt1

20200229-alt1 built July 22, 2020 Alexey Shabalin in task 254589 --- May 16, 2020 Alexey Shabalin - edk2-stable202002 Fixes: CVE-2019-14575, CVE-2019-14559, CVE-2019-14587, CVE-2019-14558, CVE-2019-14586, CVE-2019-14563...