Security fix for the ALT Linux 10 package glpi version 9.5.3-alt1

Dec. 5, 2020 Pavel Zilke 9.5.3-alt1 - New version 9.5.3 - This is a security release, upgrading is recommended - Security fixes: + CVE-2020-27662 : Insecure Direct Object Reference on ajax/comments.php + CVE-2020-27663 : Insecure Direct Object Reference on ajax/getDropdownValue.php + CVE-2020-262...

Security fix for the ALT Linux 10 package thunderbird version 78.5.1-alt1

Dec. 2, 2020 Andrey Cherepanov 78.5.1-alt1 - New version 78.5.1. - Security fixes: + CVE-2020-26970 Stack overflow due to incorrect parsing of SMTP server response codes...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.10-alt1

Dec. 2, 2020 Valery Inozemtsev 2:1.20.10-alt1 - 1.20.10 fixes: CVE-2020-25712, CVE-2020-14360...

Security fix for the ALT Linux 9 package node version 14.15.1-alt1

14.15.1-alt1 built Nov. 26, 2020 Vitaly Lipatov in task 261957 Nov. 16, 2020 Vitaly Lipatov - new version 14.15.1 with rpmrb script - set c-ares = 1.16.1-alt2 - CVE-2020-8277: Denial of Service through DNS request High...

Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt1

1.17.2-alt1 built Nov. 24, 2020 Ivan A. Melnikov in task 262110 Nov. 19, 2020 Ivan A. Melnikov - 1.17.2 Fixes: CVE-2020-28196...

Security fix for the ALT Linux 9 package glibc version 6:2.27-alt13

6:2.27-alt13 built Nov. 23, 2020 Dmitry V. Levin in task 261868 Nov. 16, 2020 Dmitry V. Levin - Updated to glibc-2.27-155-gdaf88b1dd1 from 2.27 branch fixes: CVE-2020-1752, CVE-2020-6096...

Security fix for the ALT Linux 10 package helm version 3.4.1-alt1

Nov. 23, 2020 Aleksei Nikiforov 3.4.1-alt1 - Updated to upstream version 3.4.1 Fixes: CVE-2020-4053, CVE-2020-11013, CVE-2020-15184, CVE-2020-15185, CVE-2020-15186, CVE-2020-15187...

Security fix for the ALT Linux 9 package c-ares version 1.16.1-alt2

1.16.1-alt2 built Nov. 19, 2020 Anton Farygin in task 261934 Nov. 17, 2020 Anton Farygin - added 0d252eb commit from upstream to resolve security issue fixes: CVE-2020-8277...

Security fix for the ALT Linux 9 package openvpn version 2.4.9-alt1

2.4.9-alt1 built Nov. 19, 2020 Nikolay A. Fetisov in task 261903 Nov. 16, 2020 Nikolay A. Fetisov - New version - Security fixes: + CVE-2020-11810: race condition allowes one client kills other client session via false client floating Closes: 39122...

Security fix for the ALT Linux 10 package thunderbird version 78.5.0-alt1

Nov. 19, 2020 Andrey Cherepanov 78.5.0-alt1 - New version 78.5.0. - Fixes: + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls + CVE-2020-26953 Fullscreen...

Security fix for the ALT Linux 8 package postgresql11 version 11.10-alt0.M80P.1

Nov. 17, 2020 Alexei Takaseev 11.10-alt0.M80P.1 - 11.10 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.20-alt0.M80P.1

Nov. 17, 2020 Alexei Takaseev 9.6.20-alt0.M80P.1 - 9.6.20 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 8 package postgresql12 version 12.5-alt0.M80P.1

Nov. 17, 2020 Alexei Takaseev 12.5-alt0.M80P.1 - 12.5 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 8 package postgresql10 version 10.15-alt0.M80P.1

Nov. 17, 2020 Alexei Takaseev 10.15-alt0.M80P.1 - 10.15 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 8 package postgresql11-1C version 11.10-alt0.M80P.1

Nov. 17, 2020 Alexei Takaseev 11.10-alt0.M80P.1 - 11.10 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696 - Re-applay patch from 1C...

Security fix for the ALT Linux 10 package node version 14.15.1-alt1

Nov. 16, 2020 Vitaly Lipatov 14.15.1-alt1 - new version 14.15.1 with rpmrb script - set c-ares = 1.16.1-alt2 - CVE-2020-8277: Denial of Service through DNS request High...

Security fix for the ALT Linux 10 package firefox-esr version 78.5.0-alt1

Nov. 16, 2020 Andrey Cherepanov 78.5.0-alt1 - New version 78.5.0. - Fixes: + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls + CVE-2020-26953 Fullscreen...

Security fix for the ALT Linux 10 package postgresql15 version 13.1-alt1

Nov. 16, 2020 Alexei Takaseev 13.1-alt1 - 13.1 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 9 package postgresql12 version 12.5-alt1

Nov. 16, 2020 Alexei Takaseev 12.5-alt1 - 12.5 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 10 package postgresql14 version 13.1-alt1

Nov. 16, 2020 Alexei Takaseev 13.1-alt1 - 13.1 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 9 package postgresql12-1C version 12.5-alt1

Nov. 16, 2020 Alexei Takaseev 12.5-alt1 - 12.5 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696 - Re-applay patch from 1C...

Security fix for the ALT Linux 10 package postgresql15-1C version 12.5-alt1

Nov. 16, 2020 Alexei Takaseev 12.5-alt1 - 12.5 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696 - Re-applay patch from 1C...

Security fix for the ALT Linux 10 package postgresql13 version 13.1-alt1

Nov. 16, 2020 Alexei Takaseev 13.1-alt1 - 13.1 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 10 package postgresql12 version 12.5-alt1

Nov. 16, 2020 Alexei Takaseev 12.5-alt1 - 12.5 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 9 package postgresql9.6 version 9.6.20-alt1

Nov. 16, 2020 Alexei Takaseev 9.6.20-alt1 - 9.6.20 Fixes CVE-2020-25694, CVE-2020-25695, CVE-2020-25696...

Security fix for the ALT Linux 10 package golang version 1.15.5-alt1

Nov. 14, 2020 Alexey Shabalin 1.15.5-alt1 - New version 1.15.5. - Fixes: + CVE-2020-28362 + CVE-2020-28366 + CVE-2020-28367...

Security fix for the ALT Linux 9 package golang version 1.15.5-alt1

Nov. 14, 2020 Alexey Shabalin 1.15.5-alt1 - New version 1.15.5. - Fixes: + CVE-2020-28362 + CVE-2020-28366 + CVE-2020-28367...

Security fix for the ALT Linux 9 package mariadb version 10.4.17-alt1

10.4.17-alt1 built Nov. 13, 2020 Alexey Shabalin in task 261687 Nov. 12, 2020 Alexey Shabalin - 10.4.17 - backport fix for MDEV-24096, MDEV-24121, MDEV-24134 - Fixes for the following security vulnerabilities: + CVE-2020-14812 + CVE-2020-14765 + CVE-2020-14776 + CVE-2020-14789 + CVE-2020-15180...

Security fix for the ALT Linux 10 package thunderbird version 78.4.2-alt1

Nov. 11, 2020 Andrey Cherepanov 78.4.2-alt1 - New version 78.4.2. - Fixes: + CVE-2020-26950 Write side effects in MCallGetProperty opcode not accounted for...

Security fix for the ALT Linux 10 package podman version 2.1.1-alt1

Nov. 10, 2020 Alexey Shabalin 2.1.1-alt1 - new version 2.1.1 Fixes: CVE-2020-14370...

Security fix for the ALT Linux 10 package firefox-esr version 78.4.1-alt1

Nov. 10, 2020 Andrey Cherepanov 78.4.1-alt1 - New version 78.4.1. - Fixes: + CVE-2020-26950 Write side effects in MCallGetProperty opcode not accounted for...

Security fix for the ALT Linux 9 package libxml2 version 1:2.9.10-alt4

1:2.9.10-alt4 built Nov. 9, 2020 Aleksei Nikiforov in task 261133 Nov. 6, 2020 Aleksei Nikiforov - Applied security fixes from upstream Fixes: CVE-2019-20388, CVE-2020-7595, CVE-2020-24977...

Security fix for the ALT Linux 9 package wireshark version 3.2.8-alt1

3.2.8-alt1 built Nov. 6, 2020 Anton Farygin in task 261029 Nov. 3, 2020 Anton Farygin - 3.2.8 - fixes: CVE-2020-28030 the GQUIC dissector could crash. CVE-2020-26575 the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop...

Security fix for the ALT Linux 10 package libxml2 version 1:2.9.10-alt4

Nov. 6, 2020 Aleksei Nikiforov 1:2.9.10-alt4 - Applied security fixes from upstream Fixes: CVE-2019-20388, CVE-2020-7595, CVE-2020-24977...

Security fix for the ALT Linux 10 package wireshark version 3.2.8-alt1

Nov. 3, 2020 Anton Farygin 3.2.8-alt1 - 3.2.8 - fixes: CVE-2020-28030 the GQUIC dissector could crash. CVE-2020-26575 the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop...

Security fix for the ALT Linux 10 package samba version 4.12.9-alt1

Oct. 29, 2020 Evgeny Sinelnikov 4.12.9-alt1 - Update to latest stable security release of the Samba 4.12 - Security fixes: + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify + CVE-2020-14323: Unprivileged user can crash winbind + CVE-2020-14383: An authenticated user can...

Security fix for the ALT Linux 10 package glpi version 9.5.2-alt1

Oct. 26, 2020 Pavel Zilke 9.5.2-alt1 - New version 9.5.2 - Security fixes: + CVE-2020-15176 : SQL injection with a query parameter of user form + CVE-2020-15175 : Removal of .htaccess file in the files folder via a plugin endpoint + CVE-2020-15217 : Leakage issue with knowledge base +...

Security fix for the ALT Linux 9 package glpi version 9.5.2-alt1

Oct. 26, 2020 Pavel Zilke 9.5.2-alt1 - New version 9.5.2 - Security fixes: + CVE-2020-15176 : SQL injection with a query parameter of user form + CVE-2020-15175 : Removal of .htaccess file in the files folder via a plugin endpoint + CVE-2020-15217 : Leakage issue with knowledge base +...

Security fix for the ALT Linux 9 package ntfs-3g version 2:2017.3.23-alt3

Oct. 23, 2020 Valery Inozemtsev 2:2017.3.23-alt3 - add upstream fix for CVE-2019-9755...

Security fix for the ALT Linux 10 package thunderbird version 78.4.0-alt1

Oct. 22, 2020 Andrey Cherepanov 78.4.0-alt1 - New version 78.4.0. - Fixes: + CVE-2020-15969 Use-after-free in usersctp + CVE-2020-15683 Memory safety bugs fixed in Thunderbird 78.4...

Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1

1.42.027-alt1 built Oct. 21, 2020 Alexey Shabalin in task 260176 Oct. 19, 2020 Alexey Shabalin - snapshot of 1.4 branch 0c66d2335a9dd13006c83ed64ae565a4a3cb7f0c - Update jQuery to address three CVE Vulnerabilities - Fixes: + CVE-2020-11022 + CVE-2020-11023 + CVE-2019-11358...

Security fix for the ALT Linux 10 package firefox-esr version 78.4.0-alt1

Oct. 20, 2020 Andrey Cherepanov 78.4.0-alt1 - New version 78.4.0. - Fixes: + CVE-2020-15969 Use-after-free in usersctp + CVE-2020-15683 Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4...

Security fix for the ALT Linux 9 package mediawiki version 1.35.0-alt1

1.35.0-alt1 built Oct. 14, 2020 Vitaly Lipatov in task 259569 Oct. 9, 2020 Vitaly Lipatov - new version 1.35.0 LTS with rpmrb script - CVE-2020-25813, CVE-2020-25812, CVE-2020-25815 - CVE-2020-17367, CVE-2020-17368, CVE-2020-25814 - CVE-2020-25828, CVE-2020-25869, CVE-2020-25827...

Security fix for the ALT Linux 8 package php7 version 7.2.34-alt1

7.2.34-alt1 built Oct. 13, 2020 Anton Farygin in task 259367 Oct. 7, 2020 Anton Farygin - 7.2.34 Fixes: CVE-2020-7069, CVE-2020-7070...

Security fix for the ALT Linux 9 package php7 version 7.3.23-alt1

7.3.23-alt1 built Oct. 10, 2020 Anton Farygin in task 259362 Oct. 7, 2020 Anton Farygin - 7.3.23 Fixes: CVE-2020-7069, CVE-2020-7070...

Security fix for the ALT Linux 9 package systemd version 1:243.9-alt1

1:243.9-alt1 built Oct. 6, 2020 Alexey Shabalin in task 258476 Oct. 3, 2020 Alexey Shabalin - 243.9 Fixes: CVE-2020-13776 - kernelinstalldir path /usr/lib/kernel/install.d - /lib/kernel/install.d - install kernel-install script to /sbin - move systemd-boot and bootctl utils to systemd-boot-efi...

Security fix for the ALT Linux 9 package libetpan version 1.9.4-alt2

1.9.4-alt2 built Oct. 5, 2020 Aleksei Nikiforov in task 259053 Oct. 1, 2020 Aleksei Nikiforov - Applied security fixes from upstream Fixes: CVE-2020-15953...

Security fix for the ALT Linux 9 package wireshark version 3.2.7-alt1

3.2.7-alt1 built Oct. 5, 2020 Anton Farygin in task 258926 Sept. 30, 2020 Anton Farygin - 3.2.7 - fixes: BLIP dissector crash. CVE-2020-25866 TCP dissector crash. CVE-2020-25862 MIME Multipart dissector crash. CVE-2020-25863...

Security fix for the ALT Linux 10 package libetpan version 1.9.4-alt2

Oct. 1, 2020 Aleksei Nikiforov 1.9.4-alt2 - Applied security fixes from upstream Fixes: CVE-2020-15953...

Security fix for the ALT Linux 10 package wireshark version 3.2.7-alt1

Sept. 30, 2020 Anton Farygin 3.2.7-alt1 - 3.2.7 - fixes: BLIP dissector crash. CVE-2020-25866 TCP dissector crash. CVE-2020-25862 MIME Multipart dissector crash. CVE-2020-25863...