ISO Image: alt-workstation-10.0-aarch64.iso
Mar 26, 2024, 09:53 AM
libvirt-libs
Summary: Client side libraries
March 21, 2024 Alexander Kuznetsov:
- Check for negative array lengths before allocation (Fixes: CVE-2024-2494)
Mar 26, 2024, 09:53 AM
libvirt-client
Summary: Client side utilities of the libvirt library
March 21, 2024 Alexander Kuznetsov:
- Check for negative array lengths before allocation (Fixes: CVE-2024-2494)
Mar 25, 2024, 10:23 AM
python3-module-jinja2
Summary: The new and improved version of a small but fast template engine
Feb. 26, 2024 Andrey Cherepanov:
- Fixed CVE-2024-22195.
Mar 20, 2024, 04:32 PM
thunderbird
Summary: Thunderbird is Mozilla's e-mail client
March 12, 2024 Pavel Vasenkov:
- New version. - Security fixes: + CVE-2024-1936 Leaking of encrypted email subjects to other conversations
Mar 18, 2024, 12:54 PM
openssh-common-gostcrypto
Summary: OpenSSH common files
March 13, 2024 Gleb Fotengauer-Malinovskiy:
- Updated -gostcrypto version to fix security issues (CVE-2019-6111, CVE-2019-6109, CVE-2023-38408 CVE-2023-48795).
Mar 18, 2024, 12:54 PM
openssh-server-gostcrypto
Summary: OpenSSH Secure Shell protocol daemon
March 13, 2024 Gleb Fotengauer-Malinovskiy:
- Updated -gostcrypto version to fix security issues (CVE-2019-6111, CVE-2019-6109, CVE-2023-38408 CVE-2023-48795).
Mar 18, 2024, 12:54 PM
openssh-clients-gostcrypto
Summary: OpenSSH Secure Shell protocol clients
March 13, 2024 Gleb Fotengauer-Malinovskiy:
- Updated -gostcrypto version to fix security issues (CVE-2019-6111, CVE-2019-6109, CVE-2023-38408 CVE-2023-48795).
Mar 18, 2024, 12:54 PM
openssh-gostcrypto
Summary: OpenSSH free Secure Shell (SSH) implementation
March 13, 2024 Gleb Fotengauer-Malinovskiy:
- Updated -gostcrypto version to fix security issues (CVE-2019-6111, CVE-2019-6109, CVE-2023-38408 CVE-2023-48795).
Mar 18, 2024, 12:54 PM
openssh-server-control-gostcrypto
Summary: Control rules for the OpenSSH server configuration
March 13, 2024 Gleb Fotengauer-Malinovskiy:
- Updated -gostcrypto version to fix security issues (CVE-2019-6111, CVE-2019-6109, CVE-2023-38408 CVE-2023-48795).
Mar 18, 2024, 12:54 PM
openssh-askpass-common-gostcrypto
Summary: OpenSSH common passphrase dialog infrastructure
March 13, 2024 Gleb Fotengauer-Malinovskiy:
- Updated -gostcrypto version to fix security issues (CVE-2019-6111, CVE-2019-6109, CVE-2023-38408 CVE-2023-48795).
Mar 15, 2024, 10:40 AM
curl
Summary: Gets a file from a FTP, GOPHER or HTTP server
Jan. 31, 2024 Anton Farygin:
- 8.5.0 -> 8.6.0 - Fixes: * CVE-2024-0853 : OCSP verification bypass with TLS session reuse
Mar 15, 2024, 10:40 AM
libcurl
Summary: The shared library for file transfer
Jan. 31, 2024 Anton Farygin:
- 8.5.0 -> 8.6.0 - Fixes: * CVE-2024-0853 : OCSP verification bypass with TLS session reuse
Mar 12, 2024, 11:04 PM
libswscale5
Summary: FFmpeg image scaling and colorspace and pixel format conversion library
June 20, 2023 Anton Farygin:
- 4.4.3 -> 4.4.4 (Fixes: CVE-2022-3964, CVE-2022-3341, CVE-2022-3109)
Mar 12, 2024, 11:04 PM
libavdevice58
Summary: FFmpeg device handling library
June 20, 2023 Anton Farygin:
- 4.4.3 -> 4.4.4 (Fixes: CVE-2022-3964, CVE-2022-3341, CVE-2022-3109)
Mar 12, 2024, 11:04 PM
libavformat58
Summary: FFmpeg audio, video and subtitle streams (de)multiplexing library
June 20, 2023 Anton Farygin:
- 4.4.3 -> 4.4.4 (Fixes: CVE-2022-3964, CVE-2022-3341, CVE-2022-3109)
Mar 12, 2024, 11:04 PM
libavcodec58
Summary: provides implementation of a wider range of codecs
June 20, 2023 Anton Farygin:
- 4.4.3 -> 4.4.4 (Fixes: CVE-2022-3964, CVE-2022-3341, CVE-2022-3109)
Mar 12, 2024, 11:04 PM
libswresample3
Summary: FFmpeg audio resampling, rematrixing and sample format conversion library
June 20, 2023 Anton Farygin:
- 4.4.3 -> 4.4.4 (Fixes: CVE-2022-3964, CVE-2022-3341, CVE-2022-3109)
Mar 12, 2024, 11:04 PM
libpostproc55
Summary: FFmpeg postprocessing library
June 20, 2023 Anton Farygin:
- 4.4.3 -> 4.4.4 (Fixes: CVE-2022-3964, CVE-2022-3341, CVE-2022-3109)
Mar 12, 2024, 11:04 PM
libavutil56
Summary: Utility library to aid portable multimedia programming
June 20, 2023 Anton Farygin:
- 4.4.3 -> 4.4.4 (Fixes: CVE-2022-3964, CVE-2022-3341, CVE-2022-3109)
Mar 12, 2024, 11:04 PM
libavresample4
Summary: FFmpeg video postprocessing library
June 20, 2023 Anton Farygin:
- 4.4.3 -> 4.4.4 (Fixes: CVE-2022-3964, CVE-2022-3341, CVE-2022-3109)
Mar 12, 2024, 11:04 PM
libavfilter7
Summary: FFmpeg filter layer library
June 20, 2023 Anton Farygin:
- 4.4.3 -> 4.4.4 (Fixes: CVE-2022-3964, CVE-2022-3341, CVE-2022-3109)
Mar 9, 2024, 05:03 PM
python3
Summary: Version 3 of the Python programming language aka Python 3000
Feb. 15, 2024 Grigory Ustinov:
- Updated to upstream version 3.9.18 (Closes: #49415). - Fixed CVE's (Fixes: CVE-2023-0286, CVE-2022-4303, CVE-2023-40217, CVE-2023-24329).
Mar 9, 2024, 05:03 PM
python3-modules-sqlite3
Summary: DB-API 2.0 interface for SQLite databases
Feb. 15, 2024 Grigory Ustinov:
- Updated to upstream version 3.9.18 (Closes: #49415). - Fixed CVE's (Fixes: CVE-2023-0286, CVE-2022-4303, CVE-2023-40217, CVE-2023-24329).
Mar 9, 2024, 05:03 PM
libpython3
Summary: Python3 shared library
Feb. 15, 2024 Grigory Ustinov:
- Updated to upstream version 3.9.18 (Closes: #49415). - Fixed CVE's (Fixes: CVE-2023-0286, CVE-2022-4303, CVE-2023-40217, CVE-2023-24329).
Mar 9, 2024, 05:03 PM
python3-dev
Summary: Libraries and header files needed for Python 3 development
Feb. 15, 2024 Grigory Ustinov:
- Updated to upstream version 3.9.18 (Closes: #49415). - Fixed CVE's (Fixes: CVE-2023-0286, CVE-2022-4303, CVE-2023-40217, CVE-2023-24329).
Mar 9, 2024, 05:03 PM
python3-modules-curses
Summary: Python3 "curses" module
Feb. 15, 2024 Grigory Ustinov:
- Updated to upstream version 3.9.18 (Closes: #49415). - Fixed CVE's (Fixes: CVE-2023-0286, CVE-2022-4303, CVE-2023-40217, CVE-2023-24329).
Mar 9, 2024, 05:03 PM
python3-base
Summary: Python 3 runtime libraries
Feb. 15, 2024 Grigory Ustinov:
- Updated to upstream version 3.9.18 (Closes: #49415). - Fixed CVE's (Fixes: CVE-2023-0286, CVE-2022-4303, CVE-2023-40217, CVE-2023-24329).
Mar 9, 2024, 12:39 PM
libvirt-libs
Summary: Client side libraries
March 5, 2024 Alexander Kuznetsov:
- Fix off-by-one error in udevListInterfacesByStatus (Fixes: CVE-2024-1441)
Mar 9, 2024, 12:39 PM
libvirt-client
Summary: Client side utilities of the libvirt library
March 5, 2024 Alexander Kuznetsov:
- Fix off-by-one error in udevListInterfacesByStatus (Fixes: CVE-2024-1441)
Mar 6, 2024, 05:40 PM
zabbix-common
Summary: zabbix network monitor (common stuff)
Feb. 27, 2024 Alexei Takaseev:
- 6.0.27 (Fixes: CVE-2023-32725, CVE-2023-32726, CVE-2023-32727 CVE-2023-32728, CVE-2024-22119)
Mar 6, 2024, 05:40 PM
zabbix-agent-sudo
Summary: sudo entry for zabbix agent
Feb. 27, 2024 Alexei Takaseev:
- 6.0.27 (Fixes: CVE-2023-32725, CVE-2023-32726, CVE-2023-32727 CVE-2023-32728, CVE-2024-22119)
Mar 6, 2024, 05:40 PM
zabbix-agent
Summary: zabbix agent
Feb. 27, 2024 Alexei Takaseev:
- 6.0.27 (Fixes: CVE-2023-32725, CVE-2023-32726, CVE-2023-32727 CVE-2023-32728, CVE-2024-22119)
Mar 5, 2024, 08:25 PM
firefox-esr
Summary: The Mozilla Firefox project is a redesign of Mozilla's browser (ESR version)
Feb. 21, 2024 Pavel Vasenkov:
- New ESR version. - Security fixes + CVE-2024-1546 Out-of-bounds memory read in networking channels + CVE-2024-1547 Alert dialog could have been spoofed on another site + CVE-2024-1548 Fullscreen Notification could have been hidden by select element + CVE-2024-1549 Custom cursor could obscure the permission dialog + CVE-2024-1550 Mouse cursor re-positioned unexpectedly could have led to unintended permission grants + CVE-2024-1551 Multipart HTTP Responses would accept the Set-Cookie header in response parts + CVE-2024-1552 Incorrect code generation on 32-bit ARM devices + CVE-2024-1553 Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8
Feb 26, 2024, 01:07 PM
dnsmasq
Summary: A lightweight caching nameserver
Feb. 19, 2024 Mikhail Efremov:
- Fixed different signedness comparison on 32bit systems. - Dropped obsoleted patches. - Patches from upstream git: + Add missing CHANGELOG entries for 2.90; + Fix spurious "resource limit exceeded" messages. - Updated to 2.90 (fixes: CVE-2023-50387,CVE 2023-50868).
Feb 26, 2024, 10:03 AM
sqlite3
Feb 26, 2024, 10:03 AM
libsqlite3
Summary: An Embeddable SQL Database Engine (shared library)
Feb. 17, 2024 Andrey Cherepanov:
- Fixed CVE-2023-7104.
Feb 16, 2024, 06:12 PM
libpq5
Summary: The shared libraries required for any PostgreSQL clients
Feb. 12, 2024 Alexei Takaseev:
- 16.2 (Fixes CVE-2024-0985)
Feb 9, 2024, 10:58 PM
firefox-esr
Summary: The Mozilla Firefox project is a redesign of Mozilla's browser (ESR version)
Feb. 4, 2024 Pavel Vasenkov:
- New ESR version. - Security fixes + CVE-2024-0741 Out of bounds write in ANGLE + CVE-2024-0742 Failure to update user input timestamp + CVE-2024-0746 Crash when listing printers on Linux + CVE-2024-0747 Bypass of Content Security Policy when directive unsafe-inline was set + CVE-2024-0749 Phishing site popup could show local origin in address bar + CVE-2024-0750 Potential permissions request bypass via clickjacking + CVE-2024-0751 Privilege escalation through devtools + CVE-2024-0753 HSTS policy on subdomain could bypass policy of upper domain + CVE-2024-0755 Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7
Feb 9, 2024, 05:55 PM
grub-efi
Summary: GRand Unified Bootloader (UEFI variant)
Oct. 6, 2023 Egor Ignatov:
- backport upstream NTFS patch set (fixes: CVE-2023-4692, CVE-2023-4693) + bump grub SBAT level to 4 and reset grub.altlinux - backport upstream ext2 fs patches (closes: #48343) - backport: Fix md array device enumeration (closes #47850) - return backward compatibility for grub config (closes: #48056)
Feb 9, 2024, 05:55 PM
grub-common
Summary: GRand Unified Bootloader (common part)
Oct. 6, 2023 Egor Ignatov:
- backport upstream NTFS patch set (fixes: CVE-2023-4692, CVE-2023-4693) + bump grub SBAT level to 4 and reset grub.altlinux - backport upstream ext2 fs patches (closes: #48343) - backport: Fix md array device enumeration (closes #47850) - return backward compatibility for grub config (closes: #48056)
Feb 6, 2024, 03:44 PM
libssh2
Summary: A library implementing the SSH2 protocol
Jan. 30, 2024 Anton Farygin:
- Applied security fix from upstream (Fixes: CVE-2023-48795).
Feb 1, 2024, 06:42 PM
libmysqlclient21
Summary: Shared libraries for MySQL
Jan. 18, 2024 Nikolai Kostrigin:
- new version + (fixes: CVE-2024-20960, CVE-2024-20961, CVE-2024-20962, CVE-2024-20963) + (fixes: CVE-2024-20964, CVE-2024-20965, CVE-2024-20966, CVE-2024-20967) + (fixes: CVE-2024-20968, CVE-2024-20969, CVE-2024-20970, CVE-2024-20971) + (fixes: CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20975) + (fixes: CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20981) + (fixes: CVE-2024-20982, CVE-2024-20983, CVE-2024-20984, CVE-2024-20985) - update mysql-shell 8.0.35 -> 8.0.36
Jan 26, 2024, 08:52 PM
zabbix-agent-sudo
Summary: sudo entry for zabbix agent
Jan. 24, 2024 Alexei Takaseev:
- Build for p10 (ALT #49152) - (Fixes: CVE-2023-32726, CVE-2023-32727, CVE-2023-32728)
Jan 26, 2024, 08:52 PM
zabbix-common
Summary: zabbix network monitor (common stuff)
Jan. 24, 2024 Alexei Takaseev:
- Build for p10 (ALT #49152) - (Fixes: CVE-2023-32726, CVE-2023-32727, CVE-2023-32728)
Jan 26, 2024, 08:52 PM
zabbix-agent
Summary: zabbix agent
Jan. 24, 2024 Alexei Takaseev:
- Build for p10 (ALT #49152) - (Fixes: CVE-2023-32726, CVE-2023-32727, CVE-2023-32728)
Jan 26, 2024, 07:36 PM
krb5-kdc
Summary: The Kerberos 5 Key Distribution Center
Jan. 15, 2024 Stanislav Levin:
- Backport fixes for bronze bit attack (fixes: CVE-2022-37967).
Jan 26, 2024, 07:36 PM
krb5-kinit
Summary: Kerberos 5 programs for use on workstations
Jan. 15, 2024 Stanislav Levin:
- Backport fixes for bronze bit attack (fixes: CVE-2022-37967).
Jan 26, 2024, 07:36 PM
libkrb5
Summary: The shared libraries used by Kerberos 5
Jan. 15, 2024 Stanislav Levin:
- Backport fixes for bronze bit attack (fixes: CVE-2022-37967).
Jan 26, 2024, 07:36 PM
krb5-kadmin
Summary: The KDC admin programs for Kerberos 5
Jan. 15, 2024 Stanislav Levin:
- Backport fixes for bronze bit attack (fixes: CVE-2022-37967).
Jan 26, 2024, 07:36 PM
libkrb5-ldap
Summary: The shared Kerberos 5 libraries, LDAP support
Jan. 15, 2024 Stanislav Levin:
- Backport fixes for bronze bit attack (fixes: CVE-2022-37967).