Category ../System

- new version 2.14.1
- v5.10.230 (2024-11-17).
- checkinstall: Fallback to grep for file4.
- New version 1.7.5.
- Update to 1.7.6 (2024-10-23).
- Add support for Linux 6.9, 6.10, 6.11 (x86_64).
- Backport updates to ipaserver/dcerpc, ipasam, rpcserver and trust-add mudules.
- Apply separated patch for CVE-2023-5455.
- Security fix:
  + CVE-2020-15078 Ensure key state is authenticated before sending push reply
- 1.20.1 (Fixes CVE-2024-8508)
- Backport to c9f2
- backport to c9f2.
- Backport new version to p10 branch.
- removed 3gp format from output video generation
  due to limitations in supported sizes list (closes: #46708)
- Backport to c9f2.
- Applied security fixes from upstream (Fixes: CVE-2024-5171).
- 1.26.1 -> 1.26.2 (Fixes: CVE-2024-7347)
- Updated to 0.5.21.1.
- Updated to 2.3.21.1.
- Security fixes:
  + CVE-2024-23184: A large number of address headers in email resulted
    in excessive CPU usage.
  + CVE-2024-23185: Abnormally large email headers are now truncated or
    discarded, with a limit of 10MB on a single header and 50MB for all
    the headers of all the parts of an email.
- 2.4.61 -> 2.4.62
- keep GSS API consistent with previous release
- new release
- 27.1.1 (fixes: CVE-2024-41110)
- 2.0.27 -> 2.0.29 (Fixes: CVE-2024-36387)
- Backported fix for https://pagure.io/bind-dyndb-ldap/issue/228
- Backported bind-9.11 CVE and bug fixes:
  + (fixes: CVE-2022-2795, CVE-2022-38177, CVE-2022-38178, CVE-2023-2828)
  + (fixes: CVE-2023-3341, CVE-2023-4408, CVE-2023-50387, CVE-2023-50868)
- Fix symlink-to-dir file conflict when updating from c9f1.
- New version.
- Security fixes: CVE-2024-22231 and CVE-2024-22232.
- New version (fixes CVE-2022-21159, CVE-2022-1302, CVE-2021-45769).
- Build to branch c9 for update samba to latest supported security release 4.16
- Backport security fixes from Samba 4.17
- Security fixes (Samba#15422, Samba#15424, Samba#15439, Samba#15473, Samba#15474):
 + CVE-2023-3961:  Unsanitized pipe names allow SMB clients to connect as root
                   to existing unix domain sockets on the file system.
                   https://www.samba.org/samba/security/CVE-2023-3961.html

 + CVE-2023-4091:  SMB client can truncate files to 0 bytes by opening files
                   with OVERWRITE disposition when using the acl_xattr Samba VFS
                   module with the smb.conf setting
                   "acl_xattr:ignore system acls = yes"
                   https://www.samba.org/samba/security/CVE-2023-4091.html

 + CVE-2023-4154:  An RODC and a user with the GET_CHANGES right can view all
                   attributes, including secrets and passwords.  Additionally,
                   the access check fails open on error conditions.
                   https://www.samba.org/samba/security/CVE-2023-4154.html

 + CVE-2023-42669: Calls to the rpcecho server on the AD DC can request that the
                   server block for a user-defined amount of time, denying
                   service.
                   https://www.samba.org/samba/security/CVE-2023-42669.html

 + CVE-2023-42670: Samba can be made to start multiple incompatible RPC
                   listeners, disrupting service on the AD DC.
                   https://www.samba.org/samba/security/CVE-2023-42670.htm
- Backport to c9f2.
- Backport to c9f2.
- Backport new version to c9 branch
- Exchange ldso symlink and binary (ALT#49857).
- Build for kernel-image-std-def-5.10.230-alt0.c9f.2.
- Build for kernel-image-un-def-5.10.29-alt2.
- 1.60.0 -> 1.61.0 (Fixes: CVE-2024-28182)
- Fix side-channel in the deterministic ECDSA (fixes: CVE-2024-28834).
- tests: Add test for CVE-2024-28835.
- rsa-psk: minimize branching after decryption (fixes: CVE-2024-0553).
- x509: detect loop in certificate chain (fixes: CVE-2024-0567).
- Backport fixes from 10.1.0 and 10.2.0-rc1 (Fixes: CVE-2024-1441, CVE-2024-2494)
- 2.4.2 (Fixes: CVE-2012-6687)
- 1.26.14
- Build for kernel-image-std-def-5.10.230-alt0.c9f.2.
- Build for kernel-image-un-def-5.10.29-alt2.
- new version
- new version
- new version
- new version
- new version
- new version
- new version
- NMU: 2.1.28 (Closes: #49511)
- New version (3.98).
- Certificate Authority Changes:
  + Add CN=D-Trust SBR Root CA 1 2022
  + Add CN=D-Trust SBR Root CA 2 2022
  + Add CN=Telekom Security SMIME ECC Root 2021
  + Add CN=Telekom Security SMIME RSA Root 2023
  + Add CN=Telekom Security TLS ECC Root 2020
  + Add CN=Telekom Security TLS RSA Root 2023
- Fixed different signedness comparison on 32bit systems.
- Dropped obsoleted patches.
- Patches from upstream git:
  + Add missing CHANGELOG entries for 2.90;
  + Fix spurious "resource limit exceeded" messages.
- Updated to 2.90 (fixes: CVE-2023-50387,CVE 2023-50868).
- Autobuild version bump to 1.2.1
- fixed systemd unit (Closes: #49359)
- Add info about CVE to changelog.
- Fixed FTBFS (libssh 0.10.6).
- new version
- update shim-15.8-alt-Bump-grub-SBAT-revocation-to-4 patch
- Fixes:
  + CVE-2023-40546 mok: fix LogError() invocation
  + CVE-2023-40547 - avoid incorrectly trusting HTTP headers
  + CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system
  + CVE-2023-40549 Authenticode: verify that the signature header is in bounds.
  + CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat()
  + CVE-2023-40551: pe-relocate: Fix bounds check for MZ binaries
- 2.0.3.
- 1.4.5.
- Backport to c9.
- Update to latest 2.9 major release in long-term maintenance (LTM) phase.
- Fixes from upstream:
  + A crash when PAM passkey processing incorrectly handles non-passkey data.
  + A workaround was implemented to handle gracefully misbehaving applications
    that destroy internal state of SSSD client librarires.
  + An error when rotating KCM's logs was fixed.
  + Group membership handling when members are coming from different forest
    domains and using ldap token groups is prohibited.
  + Files provider was erroneously taking into consideration local_auth_policy
    config option, thus breaking smartcard authentication of local user in
    setups that didn't explicitly specify this option.
- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408
- 2.10.7
- new version (fixes: CVE-2023-6004 CVE-2023-48795 CVE-2023-6918) (closes: 49050)
- 1.17.6
- 1.0.15
- 0.79.18 -> 0.79.19.
- Add knob for building without python.
- New version.
- add fix against 6.6 kernel
- 1.25.15 -> 1.25.16 (Fixes: CVE-2023-5528)
- update to 2.0.23 (Fixes: CVE-2023-27522)
- New upstream microcode datafile 20231114:
  + Security updates for INTEL-SA-00950 (CVE-2023-23583).
  + Updated microcodes:
    sig 0x000606a6, pf_mask 0x87, 2023-09-01, rev 0xd0003b9, size 299008
    sig 0x000606c1, pf_mask 0x10, 2023-09-08, rev 0x1000268, size 290816
    sig 0x000706e5, pf_mask 0x80, 2023-09-03, rev 0x00c2, size 113664
    sig 0x000806c1, pf_mask 0x80, 2023-09-07, rev 0x00b4, size 111616
    sig 0x000806c2, pf_mask 0xc2, 2023-09-07, rev 0x0034, size 98304
    sig 0x000806d1, pf_mask 0xc2, 2023-09-07, rev 0x004e, size 104448
    sig 0x000806f4, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f4, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f5, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f5, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f6, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f6, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f7, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f8, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f8, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x00090672, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x00090675, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x000906a3, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160
    sig 0x000906a4, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160
    sig 0x000a0671, pf_mask 0x02, 2023-09-03, rev 0x005d, size 104448
    sig 0x000b0671, pf_mask 0x32, 2023-08-29, rev 0x011d, size 210944
    sig 0x000b06a2, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064
    sig 0x000b06a3, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064
    sig 0x000b06e0, pf_mask 0x11, 2023-06-26, rev 0x0012, size 136192
    sig 0x000b06f2, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x000b06f5, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
- source: update symlinks to reflect id of the latest release, 20231114.
- 1.24.17 (Fixes: CVE-2023-2728)
- Rename the package to include major and minor versions
- Make kubernetes-common and kubernetes-crio noarch packages
- Allow write to config dir /etc/kubernetes for kube group
- Allow write to home dir /var/lib/kubernetes for kube group
- Update R: and BR:
- Make kubernetes-common and kubernetes-crio noarch packages
- Allow write to config dir /etc/kubernetes for kube group
- Allow write to home dir /var/lib/kubernetes for kube group
- Update R: and BR:
- Make kubernetes-common and kubernetes-crio noarch packages
- Allow write to config dir /etc/kubernetes for kube group
- Allow write to home dir /var/lib/kubernetes for kube group
- New version 1.6.22.
- new version 2.3.0 (with rpmrb script)
- CVE-2023-43641
- Updated to 1.1.1w (fixes CVE-2023-3446, CVE-2023-3817, CVE-2023-4807).
- 1.8.7 (fixes: CVE-2023-43787)
- 3.5.17 (fixes: CVE-2023-43787)
- 2.4.7 (Fixes: CVE-2023-4504)
- updated Ubuntu-9100-ppd-cache-add-auto-presets.patch
- removed unused and/or integrated to upstream patches:
   - FC-multilib.patch
   - FC-uri-compat.patch
   - FC-0001-scheduler-ipp.c-Allocate-device_uri-via-cupsdSetStri.patch
   - Ubuntu-0016-Debian-po4a-infrastructure-and-translations-for-manp.patch
   - Ubuntu-9110-create-local-printer-localhost-fix.patch
   - ALT-1.6.1-hardening.patch
   - ALT-1.4.6-config-libs.patch
   - ALT-config-nolibs.patch
- enable mod_ident and make trigger with warning if unsupported
  configuration detected (closes #47656).
- adjust default configuration for IdentLookups changes.
- 1.3.2 (fixed CVE-2023-4863)
- 1.10.9 -> 1.10.10
- fixed built with new ImageMagick
- Build for kernel-image-std-def-5.10.230-alt0.c9f.2.
- Build for kernel-image-std-def-5.10.230-alt0.c9f.2.
- Build for kernel-image-un-def-5.10.29-alt2.
- Build for kernel-image-std-def-5.10.230-alt0.c9f.2.
- Build for kernel-image-un-def-5.10.29-alt2.
- 2.8.2
- 2.48.12
- Backport fix for use-after-free in kadmin5
  (Fixes: CVE-2023-36054).
- Added support for ALT 8 SP and c9f2 repository.
- 1.13.16
- Initial build for Sisyphus.
add upstream commit 93e60d3 (Fixes: CVE-2023-24805)
- fixes CVE-2019-5544.
- 1.9.1 -> 1.10.4.
- Updated to v4.13.
- 1.3.3 released

Category ../System

Subcategories: