Security fix for the ALT Linux 9 package dotnet-aspnetcore-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 and .NET SDK 5.0.202 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.14-alt1

April 17, 2021 Vitaly Lipatov 3.1.14-alt1 - .NET Core 3.1.14 and .NET Core SDK 3.1.408 - CVE-2021-26701 | .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 8 package clamav version 0.103.2-alt1

0.103.2-alt1 built April 14, 2021 Sergey Y. Afonin in task 265894 April 10, 2021 Sergey Y. Afonin - 0.103.2 + CVE-2021-1252, CVE-2021-1405 - 0.103.0 and 0.103.1 only. + CVE-2021-1404 - 0.103.1 and prior...

Security fix for the ALT Linux 9 package glpi version 9.5.4-alt1

9.5.4-alt1 built April 14, 2021 Pavel Zilke in task 269862 March 31, 2021 Pavel Zilke - New version 9.5.4 - This is a security release, upgrading is recommended - Security fixes: + CVE-2021-21326 : Horizontal Privilege Escalation + CVE-2021-21255 : entities switch IDOR + CVE-2021-21258 : XSS...

Security fix for the ALT Linux 9 package wireshark version 3.4.4-alt1

3.4.4-alt1 built April 12, 2021 Anton Farygin in task 269126 March 17, 2021 Anton Farygin - 3.4.4 Fixes: CVE-2021-22191...

Security fix for the ALT Linux 9 package dnsmasq version 2.85-alt1

2.85-alt1 built April 12, 2021 Mikhail Efremov in task 269274 --- April 9, 2021 Mikhail Efremov - Dropped obsoleted patch. - Updated to 2.83 fixes: CVE-2021-3448...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.19-alt1

2.2.19-alt1 built April 12, 2021 Alexey Shabalin in task 266900 Feb. 24, 2021 Alexey Shabalin - 2.2.19 - rename package to python3-module-django back - Fixes for the following security vulnerabilities: + CVE-2021-3281 Potential directory-traversal via archive.extract + CVE-2021-23336 Web cache...

Security fix for the ALT Linux 9 package clamav version 0.103.2-alt1

0.103.2-alt1 built April 12, 2021 Sergey Y. Afonin in task 268496 April 10, 2021 Sergey Y. Afonin - 0.103.2 + CVE-2021-1252, CVE-2021-1405 - 0.103.0 and 0.103.1 only. + CVE-2021-1404 - 0.103.1 and prior...

Security fix for the ALT Linux 10 package clamav version 0.103.2-alt1

April 10, 2021 Sergey Y. Afonin 0.103.2-alt1 - 0.103.2 + CVE-2021-1252, CVE-2021-1405 - 0.103.0 and 0.103.1 only. + CVE-2021-1404 - 0.103.1 and prior...

Security fix for the ALT Linux 10 package dnsmasq version 2.85-alt1

April 9, 2021 Mikhail Efremov 2.85-alt1 - Dropped obsoleted patch. - Updated to 2.85 fixes: CVE-2021-3448...

Security fix for the ALT Linux 10 package glpi version 9.5.4-alt1

March 31, 2021 Pavel Zilke 9.5.4-alt1 - New version 9.5.4 - This is a security release, upgrading is recommended - Security fixes: + CVE-2021-21326 : Horizontal Privilege Escalation + CVE-2021-21255 : entities switch IDOR + CVE-2021-21258 : XSS injection in ajax/kanban + CVE-2021-21314 : XSS...

Security fix for the ALT Linux 9 package spamassassin version 3.4.5-alt1

3.4.5-alt1 built March 29, 2021 Sergey Y. Afonin in task 268491 --- March 25, 2021 Konstantin Lepikhov - 3.4.5 fixes: CVE-2020-1946 - remove dkim patch fixed by upstream...

Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1k-alt1

1.1.1k-alt1 built March 29, 2021 Gleb Fotengauer-Malinovskiy in task 268376 March 25, 2021 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1k fixes CVE-2021-3450, CVE-2021-3449...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1k-alt1

March 25, 2021 Gleb Fotengauer-Malinovskiy 1.1.1k-alt1 - Updated to 1.1.1k fixes CVE-2021-3450, CVE-2021-3449...

Security fix for the ALT Linux 10 package samba version 4.14.2-alt1

March 25, 2021 Evgeny Sinelnikov 4.14.2-alt1 - Update to latest stable security release of the Samba 4.14 - Security fixes: + CVE-2020-27840: Heap corruption via crafted DN strings + CVE-2021-20277: Out of bounds read in AD DC LDAP server...

Security fix for the ALT Linux 9 package gnutls30 version 3.6.15-alt2

3.6.15-alt2 built March 24, 2021 Mikhail Efremov in task 268190 March 22, 2021 Mikhail Efremov - Fixed gnulib tests. - Fixed CVE-2021-20231, CVE-2021-20232 fixes: CVE-2021-20231, CVE-2021-20232. - Fixed testpkcs11. - Dropped self-provide from devel subpackage...

Security fix for the ALT Linux 10 package firefox-esr version 78.9.0-alt1

March 23, 2021 Andrey Cherepanov 78.9.0-alt1 - New version 78.9.0. - Security fixes: + CVE-2021-23981 Texture upload into an unbound backing buffer resulted in an out-of-bound read + CVE-2021-23982 Internal network hosts could have been probed by a malicious webpage + CVE-2021-23984 Malicious...

Security fix for the ALT Linux 10 package gnutls30 version 3.6.15-alt2

March 22, 2021 Mikhail Efremov 3.6.15-alt2 - Fixed gnulib tests. - Fixed CVE-2021-20231, CVE-2021-20232 fixes: CVE-2021-20231, CVE-2021-20232. - Fixed testpkcs11. - Dropped self-provide from devel subpackage...

Security fix for the ALT Linux 9 package python-module-yaml version 5.4.1-alt0.p9

5.4.1-alt0.p9 built March 22, 2021 Andrey Cherepanov in task 267990 --- March 18, 2021 Andrey Cherepanov - Backport version 5.4.x to p9 branch fixes CVE-2020-1747...

Security fix for the ALT Linux 8 package postgresql12 version 12.6-alt0.M80P.1

12.6-alt0.M80P.1 built March 17, 2021 Alexei Takaseev in task 266728 Feb. 20, 2021 Alexei Takaseev - 12.6 Fixes CVE-2021-3393...

Security fix for the ALT Linux 8 package postgresql11-1C version 11.10-alt0.M80P.2

11.10-alt0.M80P.2 built March 17, 2021 Alexei Takaseev in task 266728 Feb. 20, 2021 Alexei Takaseev - Fixes CVE-2021-3393 - Update 1C patch...

Security fix for the ALT Linux 8 package postgresql11 version 11.11-alt0.M80P.1

11.11-alt0.M80P.1 built March 17, 2021 Alexei Takaseev in task 266728 Feb. 20, 2021 Alexei Takaseev - 11.11 Fixes CVE-2021-3393...

Security fix for the ALT Linux 10 package wireshark version 3.4.4-alt1

March 17, 2021 Anton Farygin 3.4.4-alt1 - 3.4.4 Fixes: CVE-2021-22191...

Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1j-alt1

1.1.1j-alt1 built March 17, 2021 Gleb Fotengauer-Malinovskiy in task 267719 March 12, 2021 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1j fixes CVE-2021-23840, CVE-2021-23841...

Security fix for the ALT Linux 9 package qt4 version 4.8.7-alt22

4.8.7-alt22 built March 16, 2021 Sergey V Turchin in task 267393 --- March 4, 2021 Aleksei Nikiforov - Applied security fixes fixes: CVE-2020-17507 thanks zerg@alt - Fixed build with gcc-10+. - Disabled -reduce-relocation option since it causes issues with new binutils...

Security fix for the ALT Linux 9 package node version 14.16.0-alt1

14.16.0-alt1 built March 16, 2021 Vitaly Lipatov in task 267572 Feb. 23, 2021 Vitaly Lipatov - new version 14.16.0 with rpmrb script - CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion - CVE-2021-22884: DNS rebinding in --inspect...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1j-alt1

March 12, 2021 Gleb Fotengauer-Malinovskiy 1.1.1j-alt1 - Updated to 1.1.1j fixes CVE-2021-23840, CVE-2021-23841...

Security fix for the ALT Linux 10 package golang version 1.16.1-alt1

March 11, 2021 Alexey Shabalin 1.16.1-alt1 - New version 1.16.1. - Fixes: + CVE-2021-27918 + CVE-2021-27919 - Remove test for other platform scripts...

Security fix for the ALT Linux 9 package golang version 1.15.9-alt1

March 11, 2021 Alexey Shabalin 1.15.9-alt1 - New version 1.15.9. - Fixes: + CVE-2021-27918 + CVE-2021-27919...

Security fix for the ALT Linux 10 package thunderbird version 78.8.1-alt1

March 10, 2021 Andrey Cherepanov 78.8.1-alt1 - New version 78.8.1. - Security fixes: + CVE-2021-29950 Logic issue potentially leaves key material unlocked...

Security fix for the ALT Linux 9 package wpa_supplicant version 2.9-alt4

2.9-alt4 built March 4, 2021 Andrey Cherepanov in task 267306 --- March 1, 2021 Sergey Bolshakov - P2P: Fix a corner case in peer addition based on PD Request Fixes: CVE-2021-27803...

Security fix for the ALT Linux 9 package bind version 9.11.28-alt1

9.11.28-alt1 built March 4, 2021 Stanislav Levin in task 266592 Feb. 18, 2021 Stanislav Levin - 9.11.25 - 9.11.28 fixes: CVE-2020-8625...

Security fix for the ALT Linux 8 package mailutils version 3.10-alt0.20200913.1

3.10-alt0.20200913.1 built March 2, 2021 Sergey Y. Afonin in task 267166 Sept. 27, 2020 Sergey Y. Afonin - New version CVE-2019-18862 fixed in 3.8 - Updated %description - Updated License tags to SPDX syntax - Require emacs-X11 for build only when mh subpackage is enabled ALT 38371 - Disabled...

Security fix for the ALT Linux 9 package wireshark version 3.4.3-alt1

3.4.3-alt1 built March 1, 2021 Anton Farygin in task 266949 Feb. 24, 2021 Anton Farygin - 3.4.3 Fixes: CVE-2021-22173, CVE-2021-22174...

Security fix for the ALT Linux 9 package dotnet-bootstrap-2.1 version 2.1.25-alt1

2.1.25-alt1 built March 1, 2021 Vitaly Lipatov in task 266708 --- Feb. 17, 2021 Vitaly Lipatov - new version 2.1.25 with rpmgs script - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-coreclr-2.1 version 2.1.25-alt1

2.1.25-alt1 built March 1, 2021 Vitaly Lipatov in task 266708 --- Feb. 17, 2021 Vitaly Lipatov - new version 2.1.25 with rpmgs script - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.12-alt1

3.1.12-alt1 built March 1, 2021 Vitaly Lipatov in task 266709 Feb. 17, 2021 Vitaly Lipatov - new version 3.1.12 with rpmgs script - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-corefx-3.1 version 3.1.12-alt1

3.1.12-alt1 built March 1, 2021 Vitaly Lipatov in task 266709 Feb. 17, 2021 Vitaly Lipatov - .NET Core 3.1.12 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-aspnetcore-3.1 version 3.1.12-alt1

3.1.12-alt1 built March 1, 2021 Vitaly Lipatov in task 266709 Feb. 17, 2021 Vitaly Lipatov - ASP.NET Core 3.1.12 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package thunderbird version 78.8.0-alt1

Feb. 25, 2021 Andrey Cherepanov 78.8.0-alt1 - New version 78.8.0. - Security fixes: + CVE-2021-23969 Content Security Policy violation report could have contained the destination of a redirect + CVE-2021-23968 Content Security Policy violation report could have contained the destination of a...

Security fix for the ALT Linux 10 package wireshark version 3.4.3-alt1

Feb. 24, 2021 Anton Farygin 3.4.3-alt1 - 3.4.3 Fixes: CVE-2021-22173, CVE-2021-22174...

Security fix for the ALT Linux 10 package python3-module-django version 2.2.19-alt1

Feb. 24, 2021 Alexey Shabalin 2.2.19-alt1 - 2.2.19 - rename package to python3-module-django back - Fixes for the following security vulnerabilities: + CVE-2021-3281 Potential directory-traversal via archive.extract + CVE-2021-23336 Web cache poisoning via django.utils.http.limitedparseqsl...

Security fix for the ALT Linux 10 package firefox-esr version 78.8.0-alt1

Feb. 23, 2021 Andrey Cherepanov 78.8.0-alt1 - New version 78.8.0. - Security fixes: + CVE-2021-23969 Content Security Policy violation report could have contained the destination of a redirect + CVE-2021-23968 Content Security Policy violation report could have contained the destination of a...

Security fix for the ALT Linux 10 package node version 14.16.0-alt1

Feb. 23, 2021 Vitaly Lipatov 14.16.0-alt1 - new version 14.16.0 with rpmrb script - CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion - CVE-2021-22884: DNS rebinding in --inspect...

Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 6.0.0.preview.1-alt1

Feb. 23, 2021 Vitaly Lipatov 6.0.0.preview.1-alt1 Wed Feb 17 2021 Vitaly Lipatov &[email protected] 5.0.3-alt1 - .NET 5.0.3 and .NET SDK 5.0.103 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 6.0.0.preview.1-alt1

Feb. 23, 2021 Vitaly Lipatov 6.0.0.preview.1-alt1 Wed Feb 17 2021 Vitaly Lipatov &[email protected] 5.0.3-alt1 - .NET 5.0.3 and .NET SDK 5.0.103 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package postgresql12 version 12.6-alt0.M90P.1

12.6-alt0.M90P.1 built Feb. 19, 2021 Alexei Takaseev in task 266186 Feb. 11, 2021 Alexei Takaseev - 12.6 Fixes CVE-2021-3393...

Security fix for the ALT Linux 10 package bind version 9.11.28-alt1

Feb. 18, 2021 Stanislav Levin 9.11.28-alt1 - 9.11.25 - 9.11.28 fixes: CVE-2020-8625...