ISO Image: alt-education-9.2-20210520-aarch64.iso

Version: 3.6.15-alt2 → 3.6.16-alt5

Summary: Transport Layer Security library

March 29, 2024 Mikhail Efremov:

- Fix side-channel in the deterministic ECDSA (fixes: CVE-2024-28834).
- tests: Add test for CVE-2024-28835.
- rsa-psk: minimize branching after decryption (fixes: CVE-2024-0553).
- x509: detect loop in certificate chain (fixes: CVE-2024-0567).

Version: 6.6.0-alt2 → 7.3.0-alt0.p9.3

Summary: Client side libraries

March 28, 2024 Alexander Kuznetsov:

- Backport fixes from 10.1.0 and 10.2.0-rc1 (Fixes: CVE-2024-1441, CVE-2024-2494)

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: Libraries and header files needed for Python 3 development

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: Python3 "curses" module

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: DB-API 2.0 interface for SQLite databases

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: Version 3 of the Python programming language aka Python 3000

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: Python 3 runtime libraries

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: A GUI toolkit for Python 3

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: A collection of tools included with Python 3

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: Python3 shared library

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: NIS module from Python3

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 12.6-alt0.M90P.1 → 12.18-alt0.M90P.1

Summary: The shared libraries required for any PostgreSQL clients

Feb. 12, 2024 Alexei Takaseev:

- 12.18 (Fixes CVE-2024-0985)

Version: 12.5-alt5 → 12.17-alt0.M90P.2

Summary: PostgreSQL client programs and libraries (edition for 1C 8.3.13 and later)

Feb. 16, 2024 Alexei Takaseev:

- Fixes CVE-2024-0985
- Update 1C patch

Version: 1.20.8-alt8 → 1.20.8-alt12

Summary: A virtual framebuffer X Windows System server for X.Org

Jan. 16, 2024 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Version: 1.20.8-alt8 → 1.20.8-alt12

Summary: A kdrive-based X server

Jan. 16, 2024 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Version: 1.20.8-alt8 → 1.20.8-alt12

Summary: Wayland X server

Jan. 16, 2024 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Version: 1.20.8-alt8 → 1.20.8-alt12

Summary: The X server common files

Jan. 16, 2024 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Version: 1.20.8-alt8 → 1.20.8-alt12

Summary: Xserver - X Window System display server

Jan. 16, 2024 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Version: 1.20.8-alt8 → 1.20.8-alt11

Summary: A kdrive-based X server

Dec. 13, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Version: 1.20.8-alt8 → 1.20.8-alt11

Summary: Xserver - X Window System display server

Dec. 13, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Version: 1.20.8-alt8 → 1.20.8-alt11

Summary: A virtual framebuffer X Windows System server for X.Org

Dec. 13, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Version: 1.20.8-alt8 → 1.20.8-alt11

Summary: Wayland X server

Dec. 13, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Version: 1.20.8-alt8 → 1.20.8-alt11

Summary: The X server common files

Dec. 13, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Version: 3.3.16-alt1 → 3.3.17-alt7.g37f1060.p10.2

Summary: System and process monitoring utilities

Dec. 12, 2023 Mikhail Efremov:

- Patch from Fedora:
  + ps: Fix possible buffer overflow in -C option (fixes: CVE-2023-4016).
- Fixed NEWS file.
- spec: added a knob to build without systemd (by Alexey Sheplyakov)
- Makefile.am: fixed build without systemd (by Alexey Sheplyakov)

Version: 3.3.16-alt1 → 3.3.17-alt7.g37f1060.p10.2

Summary: procps shared library

Dec. 12, 2023 Mikhail Efremov:

- Patch from Fedora:
  + ps: Fix possible buffer overflow in -C option (fixes: CVE-2023-4016).
- Fixed NEWS file.
- spec: added a knob to build without systemd (by Alexey Sheplyakov)
- Makefile.am: fixed build without systemd (by Alexey Sheplyakov)

Version: 2.85-alt1 → 2.85-alt2.p9.1

Summary: A lightweight caching nameserver

Dec. 12, 2023 Mikhail Efremov:

- Use RPM_OPT_FLAGS when build lease-tools.
- Use RPM_OPT_FLAGS.
- dnsmasq-helper: Fixed deadlock during restart from openresolv
  subscriber.
- Fixed bogus date in changelog.
- Fixed changelog.
- Patches upstream (backport):
  + Set the default maximum DNS UDP packet size to 1232 (fixes: CVE-2023-28450);
  + Minimum safe size is recommended to be 1232;
  + Fix write-after-free error in DHCPv6 code (fixes: CVE-2022-0934).

Version: 3.6.15-alt2 → 3.6.16-alt4

Summary: Transport Layer Security library

Nov. 23, 2023 Mikhail Efremov:

- auth/rsa_psk: side-step potential side-channel (fixes: CVE-2023-5981).

Version: 12.6-alt0.M90P.1 → 12.17-alt0.M90P.1

Summary: The shared libraries required for any PostgreSQL clients

Nov. 9, 2023 Alexei Takaseev:

- 12.17 (Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870)

Version: 12.5-alt5 → 12.17-alt0.M90P.1

Summary: PostgreSQL client programs and libraries (edition for 1C 8.3.13 and later)

Nov. 9, 2023 Alexei Takaseev:

- 12.17 (Fixes CVE-2023-39417, CVE-2023-5868, CVE-2023-5869, CVE-2023-5870)
- Update 1C patch

Version: 1.20.8-alt8 → 1.20.8-alt10

Summary: A virtual framebuffer X Windows System server for X.Org

Nov. 16, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Version: 1.20.8-alt8 → 1.20.8-alt10

Summary: Wayland X server

Nov. 16, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Version: 1.20.8-alt8 → 1.20.8-alt10

Summary: A kdrive-based X server

Nov. 16, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Version: 1.20.8-alt8 → 1.20.8-alt10

Summary: The X server common files

Nov. 16, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Version: 1.20.8-alt8 → 1.20.8-alt10

Summary: Xserver - X Window System display server

Nov. 16, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Version: 4.4.2-alt1 → 4.4.3.P1-alt1

Summary: Dynamic Host Configuration Protocol (DHCP) distribution

Oct. 7, 2022 Mikhail Efremov:

- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).

Version: 4.4.2-alt1 → 4.4.3.P1-alt1

Summary: The ISC DHCP client daemon

Oct. 7, 2022 Mikhail Efremov:

- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).

Version: 4.4.2-alt1 → 4.4.3.P1-alt1

Summary: The ISC DHCP server daemon

Oct. 7, 2022 Mikhail Efremov:

- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).

Version: 4.4.2-alt1 → 4.4.3.P1-alt1

Summary: Shared libraries used by ISC dhcp client and server

Oct. 7, 2022 Mikhail Efremov:

- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).

Version: 10.4.17-alt1 → 10.4.31-alt0.M90P.1

Summary: Common files used in client and servers

Oct. 18, 2023 Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Version: 10.4.17-alt1 → 10.4.31-alt0.M90P.1

Summary: MariaDB database server facility control

Oct. 18, 2023 Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Version: 10.4.17-alt1 → 10.4.31-alt0.M90P.1

Summary: A very fast and reliable MariaDB database server

Oct. 18, 2023 Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Version: 10.4.17-alt1 → 10.4.31-alt0.M90P.1

Summary: Shared libraries

Oct. 18, 2023 Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Version: 10.4.17-alt1 → 10.4.31-alt0.M90P.1

Summary: Client

Oct. 18, 2023 Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Version: 0.9.16-alt1 → 0.9.23.1-alt1

Summary: Remote Desktop Protocol (RDP) modules for X.org

Sept. 28, 2023 Andrey Cherepanov:

- New version.
- Security fixes:
  + CVE-2023-42822: Unchecked access to font glyph info

Version: 0.9.16-alt1 → 0.9.23.1-alt1

Summary: An open source remote desktop protocol (RDP) server

Sept. 28, 2023 Andrey Cherepanov:

- New version.
- Security fixes:
  + CVE-2023-42822: Unchecked access to font glyph info

Version: 2.02-alt29.qa3 → 2.02-alt29.qa5

Summary: GRand Unified Bootloader (UEFI variant)

Sept. 21, 2023 Egor Ignatov:

- backport upstream CVE fix (closes: #45913) (fixes: CVE-2022-3775)
  + add grub-2.06-upstream-font-Fix-an-integer-underflow-in-blit_comb patch

Version: 2.02-alt29.qa3 → 2.02-alt29.qa5

Summary: GRand Unified Bootloader (common part)

Sept. 21, 2023 Egor Ignatov:

- backport upstream CVE fix (closes: #45913) (fixes: CVE-2022-3775)
  + add grub-2.06-upstream-font-Fix-an-integer-underflow-in-blit_comb patch

Version: 0.9.16-alt1 → 0.9.23-alt1

Summary: Remote Desktop Protocol (RDP) modules for X.org

Sept. 22, 2023 Andrey Cherepanov:

- New version.
- Security fixes:
  + CVE-2023-40184: Improper handling of session establishment errors allows bypassing OS-level session restrictions

Version: 0.9.16-alt1 → 0.9.23-alt1

Summary: An open source remote desktop protocol (RDP) server

Sept. 22, 2023 Andrey Cherepanov:

- New version.
- Security fixes:
  + CVE-2023-40184: Improper handling of session establishment errors allows bypassing OS-level session restrictions

Version: 12.6-alt0.M90P.1 → 12.16-alt0.M90P.1

Summary: The shared libraries required for any PostgreSQL clients

Aug. 9, 2023 Alexei Takaseev:

- 12.16 (Fixes CVE-2023-39417)

VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla

Version: v24.4.2