Security fix for the ALT Linux 8 package samba-DC version 4.7.12-alt1

4.7.12-alt1 built Nov. 29, 2018 Evgeny Sinelnikov in task 216960 Nov. 27, 2018 Evgeny Sinelnikov - Update to autumn security release - Clean test module of thirdparty/iso8601 and subunit modules - Security fixes: + CVE-2018-14629 Unprivileged adding of CNAME record causing loop in AD Internal DNS...

Security fix for the ALT Linux 10 package samba version 4.9.3-alt1

Nov. 28, 2018 Evgeny Sinelnikov 4.9.3-alt1 - Update to autumn security release - Revert Samba DC to build with internal Heimdal Kerberos implementation - Clean test module of thirdparty/iso8601 and subunit modules - Security fixes: + CVE-2018-14629 Unprivileged adding of CNAME record causing loop...

Security fix for the ALT Linux 9 package mariadb version 10.3.11-alt1

Nov. 28, 2018 Alexey Shabalin 10.3.11-alt1 - 10.3.11 - Fixes for the following security vulnerabilities: + CVE-2018-3282 + CVE-2016-9843 + CVE-2018-3174 + CVE-2018-3143 + CVE-2018-3156 + CVE-2018-3251 + CVE-2018-3185 + CVE-2018-3277 + CVE-2018-3162 + CVE-2018-3173 + CVE-2018-3200 + CVE-2018-3284...

Security fix for the ALT Linux 9 package glibc version 6:2.27-alt7

Nov. 27, 2018 Dmitry V. Levin 6:2.27-alt7 - Updated to glibc-2.27-89-g9f433fc791 from 2.27 branch fixes CVE-2018-19591...

Security fix for the ALT Linux 8 package postgresql12 version 11.1-alt0.M80P.1

Nov. 8, 2018 Alexei Takaseev 11.1-alt0.M80P.1 - 11.1 - Fix CVE-2018-16850...

Security fix for the ALT Linux 8 package postgresql11-1C version 10.6-alt0.M80P.1

Nov. 8, 2018 Alexei Takaseev 10.6-alt0.M80P.1 - Backport to P8 - 10.6 - Fix CVE-2018-16850 - Add conflicts to PG 11...

Security fix for the ALT Linux 9 package postgresql12 version 11.1-alt1

Nov. 8, 2018 Alexei Takaseev 11.1-alt1 - 11.1 - Fixes CVE-2018-16850...

Security fix for the ALT Linux 9 package nginx version 1.14.1-alt1

Nov. 6, 2018 Anton Farygin 1.14.1-alt1 - 1.14.1 fixes: CVE-2018-16845, CVE-2018-16843, CVE-2018-16844...

Security fix for the ALT Linux 10 package thunderbird version 60.3.0-alt1

Nov. 2, 2018 Andrey Cherepanov 60.3.0-alt1 - New version 60.3.0. - Fixes: + CVE-2018-12391 HTTP Live Stream audio data is accessible cross-origin + CVE-2018-12392 Crash with nested event loops + CVE-2018-12393 Integer overflow during Unicode conversion while loading JavaScript + CVE-2018-12389...

Security fix for the ALT Linux 9 package NetworkManager version 1.14.5-alt1.gitba83251bba87

Nov. 1, 2018 Mikhail Efremov 1.14.5-alt1.gitba83251bba87 - Upstream git snapshot nm-1-14 branch fixes: CVE-2018-15688...

Security fix for the ALT Linux 8 package curl version 7.62.0-alt1

Oct. 31, 2018 Anton Farygin 7.62.0-alt1 - 7.62.0 - fixes: CVE-2018-16839 - buffer overrun in the SASL authentication code. CVE-2018-16840 - use-after-free in handle close CVE-2018-16842 - warning message out-of-buffer read...

Security fix for the ALT Linux 9 package systemd version 1:239-alt3

Oct. 29, 2018 Alexey Shabalin 1:239-alt3 - merge with v239-stable - Fixes for the following security vulnerabilities: + CVE-2018-15688 dhcp6: make sure we have enough space for the DHCP6 option header + CVE-2018-15687 chown-recursive: rework the recursive logic to use OPATH...

Security fix for the ALT Linux 10 package firefox-esr version 60.3.0-alt1

Oct. 23, 2018 Andrey Cherepanov 60.3.0-alt1 - New ESR version 60.3.0. - Fixed: + CVE-2018-12391 HTTP Live Stream audio data is accessible cross-origin + CVE-2018-12392 Crash with nested event loops + CVE-2018-12393 Integer overflow during Unicode conversion while loading JavaScript + CVE-2018-123...

Security fix for the ALT Linux 7 package libssh version 0.7.6-alt1.M70P.1

0.7.6-alt1.M70P.1 built Oct. 22, 2018 Sergey Y. Afonin in task 215330 Oct. 20, 2018 Sergey Y. Afonin - new version - security fix: CVE-2018-10933...

Security fix for the ALT Linux 8 package libssh version 0.8.4-alt2

Oct. 17, 2018 Sergey V Turchin 0.8.4-alt2 - fix changelog - security fixes: CVE-2018-10933...

Security fix for the ALT Linux 9 package libssh version 0.8.4-alt2

Oct. 17, 2018 Sergey V Turchin 0.8.4-alt2 - fix changelog - security fixes: CVE-2018-10933...

Security fix for the ALT Linux 10 package clamav version 0.100.2-alt1

Oct. 17, 2018 Sergey Y. Afonin 0.100.2-alt1 - 0.100.2 CVE-2018-15378, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682...

Security fix for the ALT Linux 8 package clamav version 0.100.2-alt1

Oct. 17, 2018 Sergey Y. Afonin 0.100.2-alt1 - 0.100.2 CVE-2018-15378, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682...

Security fix for the ALT Linux 9 package libssh version 0.8.4-alt1

Oct. 17, 2018 Sergey V Turchin 0.8.4-alt1 - new version - security fix: CVE-2018-10933...

Security fix for the ALT Linux 8 package libssh version 0.8.4-alt1

Oct. 17, 2018 Sergey V Turchin 0.8.4-alt1 - new version - security fix: CVE-2018-10933...

Security fix for the ALT Linux 9 package clamav version 0.100.2-alt1

Oct. 17, 2018 Sergey Y. Afonin 0.100.2-alt1 - 0.100.2 CVE-2018-15378, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682...

Security fix for the ALT Linux 10 package thunderbird version 60.2.1-alt1

Oct. 15, 2018 Andrey Cherepanov 60.2.1-alt1 - New version 60.2.1. - Fixes: + CVE-2018-12377 Use-after-free in refresh driver timers + CVE-2018-12378 Use-after-free in IndexedDB + CVE-2018-12379 Out-of-bounds write with malicious MAR file + CVE-2017-16541 Proxy bypass using automount and autofs +...

Security fix for the ALT Linux 9 package wireshark version 2.6.4-alt1

Oct. 13, 2018 Anton Farygin 2.6.4-alt1 - 2.6.4 fixes: CVE-2018-18227, CVE-2018-18225, CVE-2018-18225, CVE-2018-12086 - disabled build gtk+ UI...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.159-alt0.M80P.1

1:4.4.159-alt0.M80P.1 built Oct. 9, 2018 kernelbot in task 213838 Oct. 1, 2018 Kernel Bot - v4.4.159 Fixes: CVE-2018-14633...

Security fix for the ALT Linux 10 package firefox-esr version 60.2.2-alt1

Oct. 2, 2018 Andrey Cherepanov 60.2.2-alt1 - New ESR version 60.2.2 - Fixed: + CVE-2018-12386 Type confusion in JavaScript + CVE-2018-12387 JavaScript JIT compiler inlines Array.prototype.push with multiple arguments...

Security fix for the ALT Linux 9 package mediawiki version 1.31.1-alt1

Sept. 29, 2018 Vitaly Lipatov 1.31.1-alt1 - new version 1.31.1 with rpmrb script - CVE-2018-0503, CVE-2018-0505, CVE-2018-1325 - fix apache configs...

Security fix for the ALT Linux 10 package git version 2.17.2-alt1

Sept. 27, 2018 Dmitry V. Levin 2.17.2-alt1 - 2.17.1 - 2.17.2 fixes: CVE-2018-17456...

Security fix for the ALT Linux 8 package git version 2.17.2-alt1

Sept. 27, 2018 Dmitry V. Levin 2.17.2-alt1 - 2.17.1 - 2.17.2 fixes: CVE-2018-17456...

Security fix for the ALT Linux 10 package firefox-esr version 60.2.1-alt1

Sept. 24, 2018 Andrey Cherepanov 60.2.1-alt1 - New ESR version 60.2.1. - Fixed: + CVE-2018-12385 Crash in TransportSecurityInfo due to cached data + CVE-2018-12383 Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.156-alt0.M80P.1

Sept. 17, 2018 Kernel Bot 1:4.4.156-alt0.M80P.1 - v4.4.156 Fixes: CVE-2018-6554, CVE-2018-6555...

Security fix for the ALT Linux 10 package firefox-esr version 60.2.0-alt1

Sept. 10, 2018 Andrey Cherepanov 60.2.0-alt1 - New ESR version 60.2.0. - Fixed: + CVE-2018-12377 Use-after-free in refresh driver timers + CVE-2018-12378 Use-after-free in IndexedDB + CVE-2018-12379 Out-of-bounds write with malicious MAR file + CVE-2017-16541 Proxy bypass using automount and auto...

Security fix for the ALT Linux 8 package curl version 7.61.1-alt1

Sept. 9, 2018 Anton Farygin 7.61.1-alt1 - 7.61.1 fixes: CVE-2018-14618...

Security fix for the ALT Linux 9 package wireshark version 2.6.3-alt1

Sept. 3, 2018 Anton Farygin 2.6.3-alt1 - 2.6.3 fixes: CVE-2018-16056, CVE-2018-16057, CVE-2018-16058...

Security fix for the ALT Linux 10 package node version 8.11.4-alt1

Aug. 29, 2018 Vitaly Lipatov 8.11.4-alt1 - new version 8.11.4 with rpmrb script - 2018-08-15, Version 8.11.4 'Carbon' LTS, @rvagg - CVE-2018-0732, CVE-2018-12115 - build with external libnghttp2 - fix build with ICU = 61 add -DUUSINGICUNAMESPACE=1...

Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2.M80P.2

7.2p2-alt2.M80P.2 built Aug. 27, 2018 Denis Medvedev in task 211899 Aug. 24, 2018 Denis Medvedev - Correction of fix of user enumeration vulnerability Fixes: CVE-2018-15473...

Security fix for the ALT Linux 9 package krb5 version 1.16.1-alt1.S1

Aug. 27, 2018 Ivan A. Melnikov 1.16.1-alt1.S1 - 1.16.1 CVE-2018-5729, CVE-2018-5730...

Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2.M80P.1

Aug. 24, 2018 Andrey Cherepanov 7.2p2-alt2.M80P.1 - Security fix for user enumeration vulnerability Fixes: CVE-2018-15473...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.150-alt0.M80P.1

Aug. 21, 2018 Kernel Bot 1:4.4.150-alt0.M80P.1 - v4.4.150 Fixes: CVE-2018-9363...

Security fix for the ALT Linux 8 package mariadb version 10.1.35-alt1

Aug. 20, 2018 Alexey Shabalin 10.1.35-alt1 - 10.1.35 - Fixes for the following security vulnerabilities: + CVE-2018-3064 + CVE-2018-3063 + CVE-2018-3058 + CVE-2018-3066 - change mode of plugin dir in chroot ALT 33259...

Security fix for the ALT Linux 9 package mariadb version 10.3.9-alt1

Aug. 19, 2018 Alexey Shabalin 10.3.9-alt1 - 10.3.9 - Fixes for the following security vulnerabilities: + CVE-2018-3060 + CVE-2018-3064 + CVE-2018-3063 + CVE-2018-3058 + CVE-2018-3066 - fix path to plugin dir in chroot ALT 35242 - change mode of plugin dir in chroot ALT 33259...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2p-alt1

Aug. 16, 2018 Gleb Fotengauer-Malinovskiy 1.0.2p-alt1 - Updated to 1.0.2p fixes CVE-2018-0732 and CVE-2018-0737...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.10-alt0.M80P.1

9.6.10-alt0.M80P.1 built Aug. 15, 2018 Alexei Takaseev in task 211293 Aug. 11, 2018 Alexei Takaseev - 9.6.10 - Fixes CVE-2018-10915, CVE-2018-10925...

Security fix for the ALT Linux 8 package samba version 4.7.9-alt1

Aug. 15, 2018 Evgeny Sinelnikov 4.7.9-alt1 - Update to summer security release - Security fixes: + CVE-2018-1139 Weak authentication protocol allowed + CVE-2018-10858 Insufficient input validation on client directory listing in libsmbclient + CVE-2018-10918 Denial of Service Attack on AD DC DRSUA...

Security fix for the ALT Linux 8 package samba-DC version 4.7.9-alt1

Aug. 15, 2018 Evgeny Sinelnikov 4.7.9-alt1 - Update to summer security release - Security fixes: + CVE-2018-1139 Weak authentication protocol allowed + CVE-2018-10858 Insufficient input validation on client directory listing in libsmbclient + CVE-2018-10918 Denial of Service Attack on AD DC DRSUA...

Security fix for the ALT Linux 8 package postgresql10 version 10.5-alt0.M80P.1

10.5-alt0.M80P.1 built Aug. 15, 2018 Alexei Takaseev in task 211293 Aug. 11, 2018 Alexei Takaseev - 10.5 - Fixes CVE-2018-10915, CVE-2018-10925...

Security fix for the ALT Linux 10 package samba version 4.8.4-alt1.S1

Aug. 14, 2018 Evgeny Sinelnikov 4.8.4-alt1.S1 - Update to summer security release - Security fixes: + CVE-2018-1139 Weak authentication protocol allowed + CVE-2018-1140 Denial of Service Attack on DNS and LDAP server + CVE-2018-10858 Insufficient input validation on client directory listing in...

Security fix for the ALT Linux 10 package thunderbird version 60.0-alt1

Aug. 13, 2018 Andrey Cherepanov 60.0-alt1 - New version 60.0. - Enigmail 2.0.8. - Fixes: + CVE-2018-12359 Buffer overflow using computed size of canvas element + CVE-2018-12360 Use-after-free when using focus + CVE-2018-12361 Integer overflow in SwizzleData + CVE-2018-12362 Integer overflow in...

Security fix for the ALT Linux 9 package bind version 9.11.4.P1-alt1

Aug. 13, 2018 Stanislav Levin 9.11.4.P1-alt1 - 9.11.3 - 9.11.4.P1 fixes: CVE-2018-5738, CVE-2018-5740...

Security fix for the ALT Linux 8 package postgresql11-1C version 10.5-alt1

Aug. 11, 2018 Alexei Takaseev 10.5-alt1 - 10.5 - Fix CVE-2018-10915, CVE-2018-10925...

Security fix for the ALT Linux 9 package postgresql9.6 version 9.6.10-alt1

Aug. 11, 2018 Alexei Takaseev 9.6.10-alt1 - 9.6.10 - Fixes CVE-2018-10915, CVE-2018-10925...