ISO Image: alt-kworkstation-9.0-install-x86_64.iso

Summary: Transport Layer Security library

March 29, 2024 Mikhail Efremov:

- Fix side-channel in the deterministic ECDSA (fixes: CVE-2024-28834).
- tests: Add test for CVE-2024-28835.
- rsa-psk: minimize branching after decryption (fixes: CVE-2024-0553).
- x509: detect loop in certificate chain (fixes: CVE-2024-0567).

Version: 3.6.14-alt1 → 3.6.16-alt5

Summary: Transport Layer Security library

March 29, 2024 Mikhail Efremov:

- Fix side-channel in the deterministic ECDSA (fixes: CVE-2024-28834).
- tests: Add test for CVE-2024-28835.
- rsa-psk: minimize branching after decryption (fixes: CVE-2024-0553).
- x509: detect loop in certificate chain (fixes: CVE-2024-0567).

Version: 3.6.13-alt1 → 3.6.16-alt5

Summary: Transport Layer Security library

March 29, 2024 Mikhail Efremov:

- Fix side-channel in the deterministic ECDSA (fixes: CVE-2024-28834).
- tests: Add test for CVE-2024-28835.
- rsa-psk: minimize branching after decryption (fixes: CVE-2024-0553).
- x509: detect loop in certificate chain (fixes: CVE-2024-0567).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: Python3 shared library

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: Libraries and header files needed for Python 3 development

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: DB-API 2.0 interface for SQLite databases

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: Python 3 runtime libraries

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: A GUI toolkit for Python 3

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 3.7.4-alt3 → 3.7.17-alt1

Summary: Version 3 of the Python programming language aka Python 3000

Feb. 18, 2024 Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Version: 12.3-alt1 → 12.18-alt0.M90P.1

Summary: The shared libraries required for any PostgreSQL clients

Feb. 12, 2024 Alexei Takaseev:

- 12.18 (Fixes CVE-2024-0985)

Version: 1.20.5-alt2 → 1.20.8-alt12

Summary: Xserver - X Window System display server

Jan. 16, 2024 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Version: 1.20.8-alt3 → 1.20.8-alt12

Summary: Xserver - X Window System display server

Jan. 16, 2024 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Version: 1.20.5-alt2 → 1.20.8-alt12

Summary: Wayland X server

Jan. 16, 2024 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Version: 1.20.5-alt2 → 1.20.8-alt12

Summary: The X server common files

Jan. 16, 2024 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Version: 1.20.8-alt3 → 1.20.8-alt12

Summary: The X server common files

Jan. 16, 2024 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Version: 8-alt1.20190312 → 23-alt1.20231114

Summary: Microcode definitions for Intel processors

Nov. 14, 2023 Konstantin Lepikhov:

- New upstream microcode datafile 20231114:
  + Security updates for INTEL-SA-00950 (CVE-2023-23583).
  + Updated microcodes:
    sig 0x000606a6, pf_mask 0x87, 2023-09-01, rev 0xd0003b9, size 299008
    sig 0x000606c1, pf_mask 0x10, 2023-09-08, rev 0x1000268, size 290816
    sig 0x000706e5, pf_mask 0x80, 2023-09-03, rev 0x00c2, size 113664
    sig 0x000806c1, pf_mask 0x80, 2023-09-07, rev 0x00b4, size 111616
    sig 0x000806c2, pf_mask 0xc2, 2023-09-07, rev 0x0034, size 98304
    sig 0x000806d1, pf_mask 0xc2, 2023-09-07, rev 0x004e, size 104448
    sig 0x000806f4, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f4, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f5, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f5, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f6, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f6, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f7, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f8, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f8, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x00090672, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x00090675, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x000906a3, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160
    sig 0x000906a4, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160
    sig 0x000a0671, pf_mask 0x02, 2023-09-03, rev 0x005d, size 104448
    sig 0x000b0671, pf_mask 0x32, 2023-08-29, rev 0x011d, size 210944
    sig 0x000b06a2, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064
    sig 0x000b06a3, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064
    sig 0x000b06e0, pf_mask 0x11, 2023-06-26, rev 0x0012, size 136192
    sig 0x000b06f2, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x000b06f5, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
- source: update symlinks to reflect id of the latest release, 20231114.

Version: 1.20.5-alt2 → 1.20.8-alt11

Summary: Xserver - X Window System display server

Dec. 13, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Version: 1.20.8-alt3 → 1.20.8-alt11

Summary: Xserver - X Window System display server

Dec. 13, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Version: 1.20.5-alt2 → 1.20.8-alt11

Summary: The X server common files

Dec. 13, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Version: 1.20.8-alt3 → 1.20.8-alt11

Summary: The X server common files

Dec. 13, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Version: 1.20.5-alt2 → 1.20.8-alt11

Summary: Wayland X server

Dec. 13, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Version: 3.3.16-alt1 → 3.3.17-alt7.g37f1060.p10.2

Summary: procps shared library

Dec. 12, 2023 Mikhail Efremov:

- Patch from Fedora:
  + ps: Fix possible buffer overflow in -C option (fixes: CVE-2023-4016).
- Fixed NEWS file.
- spec: added a knob to build without systemd (by Alexey Sheplyakov)
- Makefile.am: fixed build without systemd (by Alexey Sheplyakov)

Version: 3.3.16-alt1 → 3.3.17-alt7.g37f1060.p10.2

Summary: System and process monitoring utilities

Dec. 12, 2023 Mikhail Efremov:

- Patch from Fedora:
  + ps: Fix possible buffer overflow in -C option (fixes: CVE-2023-4016).
- Fixed NEWS file.
- spec: added a knob to build without systemd (by Alexey Sheplyakov)
- Makefile.am: fixed build without systemd (by Alexey Sheplyakov)

Version: 2.80-alt3 → 2.85-alt2.p9.1

Summary: A lightweight caching nameserver

Dec. 12, 2023 Mikhail Efremov:

- Use RPM_OPT_FLAGS when build lease-tools.
- Use RPM_OPT_FLAGS.
- dnsmasq-helper: Fixed deadlock during restart from openresolv
  subscriber.
- Fixed bogus date in changelog.
- Fixed changelog.
- Patches upstream (backport):
  + Set the default maximum DNS UDP packet size to 1232 (fixes: CVE-2023-28450);
  + Minimum safe size is recommended to be 1232;
  + Fix write-after-free error in DHCPv6 code (fixes: CVE-2022-0934).

Version: 3.6.13-alt1 → 3.6.16-alt4

Summary: Transport Layer Security library

Nov. 23, 2023 Mikhail Efremov:

- auth/rsa_psk: side-step potential side-channel (fixes: CVE-2023-5981).

Version: 3.6.14-alt1 → 3.6.16-alt4

Summary: Transport Layer Security library

Nov. 23, 2023 Mikhail Efremov:

- auth/rsa_psk: side-step potential side-channel (fixes: CVE-2023-5981).

Version: 3.6.13-alt1 → 3.6.16-alt4

Summary: Transport Layer Security library

Nov. 23, 2023 Mikhail Efremov:

- auth/rsa_psk: side-step potential side-channel (fixes: CVE-2023-5981).

Version: 12.3-alt1 → 12.17-alt0.M90P.1

Summary: The shared libraries required for any PostgreSQL clients

Nov. 9, 2023 Alexei Takaseev:

- 12.17 (Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870)

Version: 1.20.5-alt2 → 1.20.8-alt10

Summary: Xserver - X Window System display server

Nov. 16, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Version: 1.20.8-alt3 → 1.20.8-alt10

Summary: Xserver - X Window System display server

Nov. 16, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Version: 1.20.5-alt2 → 1.20.8-alt10

Summary: The X server common files

Nov. 16, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Version: 1.20.8-alt3 → 1.20.8-alt10

Summary: The X server common files

Nov. 16, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Version: 1.20.5-alt2 → 1.20.8-alt10

Summary: Wayland X server

Nov. 16, 2023 Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Version: 4.4.2-alt1 → 4.4.3.P1-alt1

Summary: The ISC DHCP client daemon

Oct. 7, 2022 Mikhail Efremov:

- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).

Version: 4.4.2-alt1 → 4.4.3.P1-alt1

Summary: Dynamic Host Configuration Protocol (DHCP) distribution

Oct. 7, 2022 Mikhail Efremov:

- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).

Version: 4.4.2-alt1 → 4.4.3.P1-alt1

Summary: Shared libraries used by ISC dhcp client and server

Oct. 7, 2022 Mikhail Efremov:

- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).

Version: 10.4.12-alt1 → 10.4.31-alt0.M90P.1

Summary: A very fast and reliable MariaDB database server

Oct. 18, 2023 Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Version: 10.4.12-alt1 → 10.4.31-alt0.M90P.1

Summary: Common files used in client and servers

Oct. 18, 2023 Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Version: 10.4.12-alt1 → 10.4.31-alt0.M90P.1

Summary: Client

Oct. 18, 2023 Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Version: 10.4.12-alt1 → 10.4.31-alt0.M90P.1

Summary: Shared libraries

Oct. 18, 2023 Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Version: 10.4.12-alt1 → 10.4.31-alt0.M90P.1

Summary: MariaDB database server facility control

Oct. 18, 2023 Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Version: 2.02-alt26 → 2.02-alt29.qa5

Summary: GRand Unified Bootloader (PC BIOS variant)

Sept. 21, 2023 Egor Ignatov:

- backport upstream CVE fix (closes: #45913) (fixes: CVE-2022-3775)
  + add grub-2.06-upstream-font-Fix-an-integer-underflow-in-blit_comb patch

Version: 2.02-alt26 → 2.02-alt29.qa5

Summary: GRand Unified Bootloader (common part)

Sept. 21, 2023 Egor Ignatov:

- backport upstream CVE fix (closes: #45913) (fixes: CVE-2022-3775)
  + add grub-2.06-upstream-font-Fix-an-integer-underflow-in-blit_comb patch

Version: 2.02-alt26 → 2.02-alt29.qa5

Summary: GRand Unified Bootloader (UEFI variant)

Sept. 21, 2023 Egor Ignatov:

- backport upstream CVE fix (closes: #45913) (fixes: CVE-2022-3775)
  + add grub-2.06-upstream-font-Fix-an-integer-underflow-in-blit_comb patch

Version: 12.3-alt1 → 12.16-alt0.M90P.1

Summary: The shared libraries required for any PostgreSQL clients

Aug. 9, 2023 Alexei Takaseev:

- 12.16 (Fixes CVE-2023-39417)

Version: 1.17.1-alt1 → 1.17.2-alt5

Summary: The shared Kerberos 5 libraries, LDAP support

July 27, 2023 Ivan A. Melnikov:

- Backport fix for use-after-free in kadmin5
  (Fixes: CVE-2023-36054).

Version: 1.17.1-alt1 → 1.17.2-alt5

Summary: The Kerberos 5 Key Distribution Center

July 27, 2023 Ivan A. Melnikov:

- Backport fix for use-after-free in kadmin5
  (Fixes: CVE-2023-36054).

Version: 1.17.1-alt1 → 1.17.2-alt5

Summary: Kerberos 5 programs for use on workstations

July 27, 2023 Ivan A. Melnikov:

- Backport fix for use-after-free in kadmin5
  (Fixes: CVE-2023-36054).

Version: 1.17.1-alt1 → 1.17.2-alt5

Summary: The shared libraries used by Kerberos 5

July 27, 2023 Ivan A. Melnikov:

- Backport fix for use-after-free in kadmin5
  (Fixes: CVE-2023-36054).

Version: 1.17.1-alt1 → 1.17.2-alt5

Summary: The KDC admin programs for Kerberos 5

July 27, 2023 Ivan A. Melnikov:

- Backport fix for use-after-free in kadmin5
  (Fixes: CVE-2023-36054).

Version: v24.4.2