Security fix for the ALT Linux 8 package cyrus-imapd version 2.5.14-alt0.M80P.1

2.5.14-alt0.M80P.1 built Nov. 22, 2019 Sergey Y. Afonin in task 240906 Nov. 17, 2019 Sergey Y. Afonin - 2.5.14 fixes: CVE-2019-18928 - logging of reached limits the patch from the https://github.com/cyrusimap/cyrus-imapd/issues/2913...

Security fix for the ALT Linux 10 package bind version 9.11.13-alt1

Nov. 21, 2019 Stanislav Levin 9.11.13-alt1 - 9.11.12 - 9.11.13 fixes: CVE-2019-6477...

Security fix for the ALT Linux 9 package cyrus-imapd version 3.0.12-alt1

3.0.12-alt1 built Nov. 20, 2019 Sergey Y. Afonin in task 240896 Nov. 16, 2019 Sergey Y. Afonin - 3.0.12 fixes: CVE-2019-18928 - logging of reached limits the patch from the https://github.com/cyrusimap/cyrus-imapd/issues/2913...

Security fix for the ALT Linux 10 package php8.0 version 7.3.11-alt1

Nov. 19, 2019 Anton Farygin 7.3.11-alt1 - 7.3.11 fixes: CVE-2019-11043...

Security fix for the ALT Linux 10 package php8.1 version 7.3.11-alt1

Nov. 19, 2019 Anton Farygin 7.3.11-alt1 - 7.3.11 fixes: CVE-2019-11043...

Security fix for the ALT Linux 8 package 389-ds-base version 1.3.9.1-alt1.gitb6ba77876

1.3.9.1-alt1.gitb6ba77876 built Nov. 15, 2019 Stanislav Levin in task 240814 Nov. 14, 2019 Stanislav Levin - 1.3.9.0 - 1.3.9.1. - Applied upstream fixes fixes: CVE-2019-14824...

Security fix for the ALT Linux 10 package libtiff version 4.1.0-alt1

Nov. 14, 2019 Vladimir D. Seleznev 4.1.0-alt1 - Updated to 4.1.0 fixed CVE-2019-17546. - Dropped tiff-CVE-2018-12900.patch...

Security fix for the ALT Linux 10 package thunderbird version 68.2.2-alt1

Nov. 9, 2019 Andrey Cherepanov 68.2.2-alt1 - New version 68.2.2. - Fixed: + CVE-2019-15903 Heap overflow in expat library in XMLGetCurrentLineNumber + CVE-2019-11757 Use-after-free when creating index updates in IndexedDB + CVE-2019-11758 Potentially exploitable crash due to 360 Total Security +...

Security fix for the ALT Linux 10 package golang version 1.13.4-alt1

Nov. 6, 2019 Alexey Shabalin 1.13.4-alt1 - 1.13.4 Fixes: CVE-2019-17596...

Security fix for the ALT Linux 10 package golang version 1.12.11-alt1

Nov. 6, 2019 Alexey Shabalin 1.12.11-alt1 - New version 1.12.11. Fixes: CVE-2019-17596...

Security fix for the ALT Linux 8 package samba version 4.9.15-alt1

4.9.15-alt1 built Nov. 5, 2019 Evgeny Sinelnikov in task 239962 Oct. 29, 2019 Evgeny Sinelnikov - Update to second security autumn release - Security fixes: + CVE-2019-10218 Client code can return filenames containing path separators + CVE-2019-14833 Samba AD DC check password script does not...

Security fix for the ALT Linux 8 package samba-DC version 4.9.15-alt1

4.9.15-alt1 built Nov. 5, 2019 Evgeny Sinelnikov in task 239962 Oct. 29, 2019 Evgeny Sinelnikov - Update to second security autumn release - Security fixes: + CVE-2019-10218 Client code can return filenames containing path separators + CVE-2019-14833 Samba AD DC check password script does not...

Security fix for the ALT Linux 8 package sudo version 1:1.8.28-alt1

1:1.8.28-alt1 built Oct. 31, 2019 Ivan Zakharyaschev in task 240030 Oct. 15, 2019 Evgeny Sinelnikov - Update to autumn security release closes: 37334 - Code execution with euid==0 in rare box configurations fixes: CVE-2019-14287 - Fix post script for sudowheel control in case of upgrade in not...

Security fix for the ALT Linux 10 package samba version 4.10.10-alt1

Oct. 29, 2019 Evgeny Sinelnikov 4.10.10-alt1 - Update to second security autumn release - Security fixes: + CVE-2019-10218 Client code can return filenames containing path separators + CVE-2019-14833 Samba AD DC check password script does not receive the full password + CVE-2019-14847 User with...

Security fix for the ALT Linux 10 package firefox-esr version 68.2.0-alt1

Oct. 27, 2019 Andrey Cherepanov 68.2.0-alt1 - New ESR version 68.2.0. - Fixed: + CVE-2019-15903 Heap overflow in expat library in XMLGetCurrentLineNumber + CVE-2019-11757 Use-after-free when creating index updates in IndexedDB + CVE-2019-11758 Potentially exploitable crash due to 360 Total Securi...

Security fix for the ALT Linux 10 package thunderbird version 68.1.2-alt1

Oct. 13, 2019 Andrey Cherepanov 68.1.2-alt1 - New version 68.1.2. - Fixed: + CVE-2019-11739 Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message + CVE-2019-11746 Use-after-free while manipulating video + CVE-2019-11744 XSS by breaking out of title and textarea...

Security fix for the ALT Linux 9 package mediawiki version 1.33.1-alt1

Oct. 12, 2019 Vitaly Lipatov 1.33.1-alt1 - new version 1.33.1 with rpmrb script - CVE-2019-16738...

Security fix for the ALT Linux 10 package golang version 1.12.10-alt1

Oct. 10, 2019 Alexey Shabalin 1.12.10-alt1 - New version 1.12.10. Fixes: CVE-2019-16276...

Security fix for the ALT Linux 10 package runc version 1.0.0-alt10.rc9

Oct. 10, 2019 Vladimir Didenko 1.0.0-alt10.rc9 - New version - fixes: CVE-2019-16884...

Security fix for the ALT Linux 8 package samba version 4.9.13-alt1

4.9.13-alt1 built Sept. 27, 2019 Evgeny Sinelnikov in task 237896 Sept. 20, 2019 Evgeny Sinelnikov - Update to first security autumn release - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...

Security fix for the ALT Linux 8 package samba-DC version 4.9.13-alt1

4.9.13-alt1 built Sept. 27, 2019 Evgeny Sinelnikov in task 237896 Sept. 20, 2019 Evgeny Sinelnikov - Update to first security autumn release for domain controller release - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...

Security fix for the ALT Linux 10 package kubernetes version 1.15.3-alt1

Sept. 26, 2019 Alexey Shabalin 1.15.3-alt1 - 1.15.3 Fixes: CVE-2019-9512, CVE-2019-9514...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1d-alt1

Sept. 19, 2019 Gleb Fotengauer-Malinovskiy 1.1.1d-alt1 - Updated to 1.1.1d fixes CVE-2019-1543, CVE-2019-1549, CVE-2019-1563, CVE-2019-1547, CVE-2019-1552. - Changed License: tag to SPDX identifier of actual openssl license...

Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1d-alt1

Sept. 19, 2019 Gleb Fotengauer-Malinovskiy 1.1.1d-alt1 - Updated to 1.1.1d fixes CVE-2019-1543, CVE-2019-1549, CVE-2019-1563, CVE-2019-1547, CVE-2019-1552. - Changed License: tag to SPDX identifier of actual openssl license...

Security fix for the ALT Linux 10 package wireshark version 3.0.4-alt1

Sept. 16, 2019 Anton Farygin 3.0.4-alt1 - 3.0.4 - fixes: Gryphon dissector infinite loop. CVE-2019-16319...

Security fix for the ALT Linux 9 package wireshark version 3.0.4-alt1

Sept. 16, 2019 Anton Farygin 3.0.4-alt1 - 3.0.4 - fixes: Gryphon dissector infinite loop. CVE-2019-16319...

Security fix for the ALT Linux 8 package proftpd version 1.3.6-alt0.1.ga73dbfe3b

1.3.6-alt0.1.ga73dbfe3b built Sept. 9, 2019 Sergey Y. Afonin in task 237142 July 23, 2019 Konstantin Lepikhov - Updated to 1.3.6-ga73dbfe3b. - Fix modcopy bug 4372 Ensure that modcopy checks for &LTLimits for its SITE CPFR CVE-2019-12815 closes 37056. - Updated modsqlpostgres patch. - Updated -pc...

Security fix for the ALT Linux 8 package qt4 version 4.8.7-alt7.1

4.8.7-alt7.1 built Sept. 7, 2019 Sergey V Turchin in task 236719 Aug. 28, 2019 Sergey V Turchin - security Fixes: CVE-2018-15518, CVE-2018-19869, CVE-2018-19870, CVE-2018-19871, CVE-2018-19872, CVE-2018-19873...

Security fix for the ALT Linux 8 package cyrus-imapd version 2.5.13-alt0.M80P.1

2.5.13-alt0.M80P.1 built Sept. 5, 2019 Sergey Y. Afonin in task 236049 Aug. 14, 2019 Sergey Y. Afonin - 2.5.13 CVE-2019-11356 - built with USESETPROCTITLE some solutions of the issue 2850 was used, look to cyrus-imapd-2.5.13-setproctitle.c.patch - fixed packaging the imtest utility...

Security fix for the ALT Linux 9 package cyrus-imapd version 3.0.11-alt1

3.0.11-alt1 built Sept. 5, 2019 Alexey Shabalin in task 237080 3.0.11-alt1 built Aug. 14, 2019 Sergey Y. Afonin in task 236018 Aug. 13, 2019 Sergey Y. Afonin - 3.0.11 CVE-2019-11356 fixed in 3.0.10 - updated README.ALT.rus...

Security fix for the ALT Linux 10 package firefox-esr version 68.1.0-alt1

Sept. 4, 2019 Andrey Cherepanov 68.1.0-alt1 - New ESR version 68.1.0. - Fixed: + CVE-2019-11751 Malicious code execution through command line parameters + CVE-2019-11746 Use-after-free while manipulating video + CVE-2019-11744 XSS by breaking out of title and textarea elements using innerHTML +...

Security fix for the ALT Linux 9 package clamav version 0.101.4-alt1

0.101.4-alt1 built Sept. 3, 2019 Sergey Y. Afonin in task 237013 Sept. 2, 2019 Sergey Y. Afonin - 0.101.4 CVE-2019-12900, additional handling CVE-2019-12625 which has been mitigated in 0.101.3...

Security fix for the ALT Linux 10 package samba version 4.10.8-alt1

Sept. 3, 2019 Evgeny Sinelnikov 4.10.8-alt1 - Update to first security autumn release - Fix samba-gpupdate check sysvol path with ignore case for compatibility - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...

Security fix for the ALT Linux 10 package clamav version 0.101.4-alt1

Sept. 2, 2019 Sergey Y. Afonin 0.101.4-alt1 - 0.101.4 CVE-2019-12900, additional handling CVE-2019-12625 which has been mitigated in 0.101.3...

Security fix for the ALT Linux 8 package clamav version 0.101.4-alt1

Sept. 2, 2019 Sergey Y. Afonin 0.101.4-alt1 - 0.101.4 CVE-2019-12900, additional handling CVE-2019-12625 which has been mitigated in 0.101.3...

Security fix for the ALT Linux 10 package grafana version 6.3.4-alt1

Aug. 30, 2019 Alexey Shabalin 6.3.4-alt1 - 6.3.4 Fixes: CVE-2019-15043...

Security fix for the ALT Linux 9 package grafana version 6.3.4-alt1

6.3.4-alt1 built Aug. 30, 2019 Alexey Shabalin in task 236877 Aug. 30, 2019 Alexey Shabalin - 6.3.4 Fixes: CVE-2019-15043...

Security fix for the ALT Linux 10 package node version 10.16.3-alt1

Aug. 30, 2019 Vitaly Lipatov 10.16.3-alt1 - new version 10.16.3 with rpmrb script - libnghttp2 = 1.39.2 - CVE-2019-9511, CVE-2019-9511, CVE-2019-9513, CVE-2019-9514 - CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518...

Security fix for the ALT Linux 8 package dovecot-pigeonhole version 1:0.5.5-alt1.M80P.1

1:0.5.5-alt1.M80P.1 built Aug. 30, 2019 Gleb Fotengauer-Malinovskiy in task 236782 Aug. 29, 2019 Gleb Fotengauer-Malinovskiy - Applied upstream security fix fixes CVE-2019-11500...

Security fix for the ALT Linux 8 package dovecot version 2.3.5-alt1.M80P.1

2.3.5-alt1.M80P.1 built Aug. 30, 2019 Gleb Fotengauer-Malinovskiy in task 236782 Aug. 29, 2019 Gleb Fotengauer-Malinovskiy - Applied upstream security fix fixes CVE-2019-11500...

Security fix for the ALT Linux 10 package thunderbird version 68.0-alt1

Aug. 29, 2019 Andrey Cherepanov 68.0-alt1 - New version 68.0. - Fixed: + CVE-2019-9811 Sandbox escape via installation of malicious language pack + CVE-2019-11711 Script injection within domain through inner window reuse + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI plugins b...

Security fix for the ALT Linux 9 package dovecot version 2.3.7.2-alt1

2.3.7.2-alt1 built Aug. 29, 2019 Gleb Fotengauer-Malinovskiy in task 236729 Aug. 28, 2019 Gleb Fotengauer-Malinovskiy - Updated to 2.3.7.2 fixes CVE-2019-11500...

Security fix for the ALT Linux 8 package libvirt version 3.10.0-alt3

3.10.0-alt3 built Aug. 29, 2019 Grigory Ustinov in task 236664 Aug. 27, 2019 Grigory Ustinov - Fix CVE Fixes: CVE-2019-3840...

Security fix for the ALT Linux 8 package squid version 3.5.28-alt1

3.5.28-alt1 built Aug. 27, 2019 Alexey Shabalin in task 236485 July 15, 2019 Alexey Shabalin - Updated to 3.5.28. - Fixes: + CVE-2018-1000024 Crash processing SSL-Bumped traffic containing ESI + CVE-2018-1000027 Crash handling responses to internally generated requests + CVE-2018-1172 Crash in ES...

Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt1

9.10.8.P1-alt1 built Aug. 26, 2019 Stanislav Levin in task 236400 Aug. 19, 2019 Stanislav Levin - 9.10.6 - 9.10.8-P1 fixes: CVE-2017-3145, CVE-2018-5738, CVE-2018-5740, CVE-2018-5745, CVE-2018-5744, CVE-2019-6465, CVE-2018-5743...

Security fix for the ALT Linux 10 package traefik version 1.7.14-alt1

Aug. 23, 2019 Alexey Shabalin 1.7.14-alt1 - 1.7.14 - build with golang-1.12.9 Fixes: CVE-2019-9512, CVE-2019-9514...

Security fix for the ALT Linux 10 package libarchive version 3.4.0-alt1

Aug. 22, 2019 Aleksei Nikiforov 3.4.0-alt1 - Updated to upstream version 3.4.0. - Fixes: + CVE-2018-1000877 Double Free vulnerability in RAR decoder + CVE-2018-1000878 Use After Free vulnerability in RAR decoder + CVE-2018-1000879 NULL Pointer Dereference vulnerability in ACL parser +...

Security fix for the ALT Linux 10 package golang version 1.12.9-alt1

Aug. 19, 2019 Alexey Shabalin 1.12.9-alt1 - 1.12.9 Fixes: CVE-2019-14809, CVE-2019-9512, CVE-2019-9514...

Security fix for the ALT Linux 10 package firefox-esr version 68.0.2-alt1

Aug. 15, 2019 Andrey Cherepanov 68.0.2-alt1 - New ESR version 68.0.2. - Fixed: + CVE-2019-11733 Stored passwords in 'Saved Logins' can be copied without master password entry...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.15-alt0.M80P.1

9.6.15-alt0.M80P.1 built Aug. 13, 2019 Alexei Takaseev in task 235652 Aug. 7, 2019 Alexei Takaseev - 9.6.15 Fixes CVE-2019-10208...