Безопасность

- (Fixes: CVE-2021-3560)
- Backport latest security release fixed CVE-2021-3156 to p8/c8/c8.1 branches
  without sudo python plugin due it not compatible with python3.5
- 7.2.34 (Fixes: CVE-2020-7069, CVE-2020-7070)
- 10.1.46
- Fixes for the following security vulnerabilities:
  + CVE-2020-2574
  + CVE-2020-2752
  + CVE-2020-2812
  + CVE-2020-2814
- 3.5.1 (fixes: CVE-2020-14367)
- Applied upstream patches
  (fixes: CVE-2020-8622, CVE-2020-8623, CVE-2020-8624).
- v4.19.135  (Fixes: CVE-2019-11477, CVE-2019-11478, CVE-2019-11479)
- New version.
- Fixes:
  + CVE-2019-6502 (#1586)
  + CVE-2019-15946 (a3fc769)
  + CVE-2019-15945 (412a614)
  + CVE-2019-19480 (6ce6152284c47ba9b1d4fe8ff9d2e6a3f5ee02c7)
  + CVE-2019-19481 (b75c002cfb1fd61cd20ec938ff4937d7b1a94278)
  + CVE-2019-19479 (c3f23b836e5a1766c36617fe1da30d22f7b63de2)
- Fix License tag according to SPDX.
- 7.71.0
- fixes:
  * CVE-2020-8177: curl overwrite local file with -J
  * CVE-2020-8169: Partial password leak over DNS on HTTP redirect
- 1.5.2 (Fixes: CVE-2017-9103 CVE-2017-9104 CVE-2017-9105 CVE-2017-9109, 
	CVE-2017-9106, CVE-2017-9107, CVE-2017-9108)
- v4.9.227  (Fixes: CVE-2020-10757)
- 0.34.4 -> 0.34.6 (fixes: CVE-2020-10737).
- 2.4.43 (Fixes:  CVE-2020-1927, CVE-2020-1934)
[merged 1:239-alt5 by Vladimir D. Seleznev vseleznv@]
- security update (fixes CVE-2019-20386, CVE-2019-3842, CVE-2019-3843,
  CVE-2019-3844 and CVE-2020-1712)
- security (Fixes: CVE-2019-18281, CVE-2020-0569, CVE-2020-0570)
- Update to last security winter release
- Security fixes:
  + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server
  + CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC
- Update to last security winter release
- Security fixes:
  + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server
  + CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC
- 6.9.4
- fixes:
	* CVE-2019-19012 Integer overflow related to reg->dmax in search_in_range()
	* CVE-2019-19203 heap-buffer-overflow in gb18030_mbc_enc_len()
	* CVE-2019-19204 heap-buffer-overflow in fetch_interval_quantifier()
- Applied security patches (fixes: CVE-2019-14867, CVE-2019-10195).
- Added support for 389-ds 1.3.9.
- 1.3.9.0 -> 1.3.9.1.
- Applied upstream fixes (fixes: CVE-2019-14824).
- Backport vulnerability fixes from 0.19.0 and 0.20.0-rc2
  (Fixes: CVE-2018-16391, CVE-2018-16392, CVE-2018-16393, CVE-2018-16418,
   CVE-2018-16419, CVE-2018-16420, CVE-2018-16421, CVE-2018-16422,
   CVE-2018-16423, CVE-2018-16424, CVE-2018-16425, CVE-2018-16426,
   CVE-2018-16427, CVE-2019-15945, CVE-2019-15946).
- new version 1.8.4 (with rpmrb script) (ALT bug 36068)
- CVE-2018-8794, CVE-2018-8795, CVE-2018-8797, CVE-2018-20175
- CVE-2018-20176, CVE-2018-8791, CVE-2018-8792, CVE-2018-8793
- CVE-2018-8796, CVE-2018-8798, CVE-2018-8799, CVE-2018-8800
- CVE-2018-20174, CVE-2018-20177, CVE-2018-20178, CVE-2018-20179
- CVE-2018-20180, CVE-2018-20181, CVE-2018-20182
- Port to c8.1 branch due to upgrade of the server side (SPICE);
- (Fixes: CVE-2016-3066).
- security (Fixes: CVE-2019-14744)
- Applied upstream security fix (fixes CVE-2019-11500).
- Applied upstream security fix (fixes CVE-2019-11500).
- v4.9.190  (Fixes: CVE-2019-3900)
- v4.9.190  (Fixes: CVE-2019-3900)
- Updated to 3.5.28.
- Fixes:
  + CVE-2018-1000024 Crash processing SSL-Bumped traffic containing ESI
  + CVE-2018-1000027 Crash handling responses to internally generated requests
  + CVE-2018-1172 Crash in ESI Response processing
  + CVE-2018-19132 Fix memory leak when parsing SNMP packet
  + CVE-2019-12525 Fix Digest auth parameter parsing
  + CVE-2019-12529 Replace uudecode with libnettle base64 decoder
  + CVE-2019-13345 Multiple XSS issues in cachemgr.cgi
- Sync with Debian 3.20190514.1:
  + New upstream microcode datafile 20190514
  + SECURITY UPDATE
    Implements MDS mitigation (RIDL, Fallout, Zombieload), INTEL-SA-00223
    CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  + New Microcodes:
    sig 0x00030678, pf_mask 0x02, 2019-04-22, rev 0x0838, size 52224
    sig 0x00030678, pf_mask 0x0c, 2019-04-22, rev 0x0838, size 52224
    sig 0x00030679, pf_mask 0x0f, 2019-04-23, rev 0x090c, size 52224
    sig 0x000406c3, pf_mask 0x01, 2019-04-23, rev 0x0368, size 69632
    sig 0x000406c4, pf_mask 0x01, 2019-04-23, rev 0x0411, size 68608
    sig 0x00050657, pf_mask 0xbf, 2019-02-27, rev 0x5000021, size 47104
  + Updated Microcodes:
    sig 0x000206a7, pf_mask 0x12, 2019-02-17, rev 0x002f, size 12288
    sig 0x000306a9, pf_mask 0x12, 2019-02-13, rev 0x0021, size 14336
    sig 0x000306c3, pf_mask 0x32, 2019-02-26, rev 0x0027, size 23552
    sig 0x000306d4, pf_mask 0xc0, 2019-03-07, rev 0x002d, size 19456
    sig 0x000306e4, pf_mask 0xed, 2019-03-14, rev 0x042e, size 16384
    sig 0x000306e7, pf_mask 0xed, 2019-03-14, rev 0x0715, size 17408
    sig 0x000306f2, pf_mask 0x6f, 2019-03-01, rev 0x0043, size 34816
    sig 0x000306f4, pf_mask 0x80, 2019-03-01, rev 0x0014, size 18432
    sig 0x00040651, pf_mask 0x72, 2019-02-26, rev 0x0025, size 21504
    sig 0x00040661, pf_mask 0x32, 2019-02-26, rev 0x001b, size 25600
    sig 0x00040671, pf_mask 0x22, 2019-03-07, rev 0x0020, size 14336
    sig 0x000406e3, pf_mask 0xc0, 2019-04-01, rev 0x00cc, size 100352
    sig 0x000406f1, pf_mask 0xef, 2019-03-02, rev 0xb000036, size 30720
    sig 0x00050654, pf_mask 0xb7, 2019-04-02, rev 0x200005e, size 32768
    sig 0x00050662, pf_mask 0x10, 2019-03-23, rev 0x001a, size 32768
    sig 0x00050663, pf_mask 0x10, 2019-03-23, rev 0x7000017, size 24576
    sig 0x00050664, pf_mask 0x10, 2019-03-23, rev 0xf000015, size 23552
    sig 0x00050665, pf_mask 0x10, 2019-03-23, rev 0xe00000d, size 19456
    sig 0x000506c9, pf_mask 0x03, 2019-01-15, rev 0x0038, size 17408
    sig 0x000506ca, pf_mask 0x03, 2019-03-01, rev 0x0016, size 15360
    sig 0x000506e3, pf_mask 0x36, 2019-04-01, rev 0x00cc, size 100352
    sig 0x000506f1, pf_mask 0x01, 2019-03-21, rev 0x002e, size 11264
    sig 0x000706a1, pf_mask 0x01, 2019-01-02, rev 0x002e, size 73728
    sig 0x000806e9, pf_mask 0x10, 2019-04-01, rev 0x00b4, size 98304
    sig 0x000806e9, pf_mask 0xc0, 2019-04-01, rev 0x00b4, size 99328
    sig 0x000806ea, pf_mask 0xc0, 2019-04-01, rev 0x00b4, size 99328
    sig 0x000806eb, pf_mask 0xd0, 2019-03-30, rev 0x00b8, size 98304
    sig 0x000806ec, pf_mask 0x94, 2019-03-30, rev 0x00b8, size 97280
    sig 0x000906e9, pf_mask 0x2a, 2019-04-01, rev 0x00b4, size 99328
    sig 0x000906ea, pf_mask 0x22, 2019-04-01, rev 0x00b4, size 98304
    sig 0x000906eb, pf_mask 0x02, 2019-04-01, rev 0x00b4, size 99328
    sig 0x000906ec, pf_mask 0x22, 2019-02-14, rev 0x00ae, size 98304
    sig 0x000906ed, pf_mask 0x22, 2019-03-17, rev 0x00b8, size 97280
- Applied various fixes from Debian 3.22-26 package, including
  fixes for memory corruption bugs in formail (fixes: CVE-2017-16844).
- (Fixes: CVE-2016-1238)
- fixes:
 + CVE-2017-16611 Open files with O_NOFOLLOW
- Fix crash on lease renewals (closes: #36730).
- Updated to 6.11.7 (fixes: CVE-2019-11766).
- 12.2.12
- Fixes for the following security vulnerabilities(in 12.2.11):
  + CVE-2018-14662: mon: limit caps allowed to access the config store
  + CVE-2018-16846: rgw: enforce bounds on max-keys/max-uploads/max-parts
  + CVE-2018-16889: rgw: sanitize customer encryption keys from log output in v4 auth
- Fixes:
  + CVE-2016-0787 Truncated Diffie-Hellman secret length
  + CVE-2019-3855 Possible integer overflow in transport read allows out-of-bounds write
  + CVE-2019-3856 Possible integer overflow in keyboard interactive handling allows out-of-bounds write
  + CVE-2019-3857 Possible integer overflow leading to zero-byte allocation and out-of-bounds write
  + CVE-2019-3858 Possible zero-byte allocation leading to an out-of-bounds read
  + CVE-2019-3859 Out-of-bounds reads with specially crafted payloads due to unchecked use of
    _libssh2_packet_require and _libssh2_packet_requirev
  + CVE-2019-3860 Out-of-bounds reads with specially crafted SFTP packets
  + CVE-2019-3861 Out-of-bounds reads with specially crafted SSH packets
  + CVE-2019-3862 Out-of-bounds memory comparison
  + CVE-2019-3863 Integer overflow in user authenicate keyboard interactive allows out-of-bounds writes
- Fixed ACL evaluation in allow,deny mode (fixes: CVE-2018-1080).
- 4.2.8p12 (CVE-2018-12327)
- Updated to 3.4.1 (fixes: CVE-2018-16869).
- v3.1.2 -> v3.1.3 (fixes CVE-2018-5764).
- Fixed running with an unknown current directory
  (by Florian Weimer; fixes upstream bug 6422).
- Added --noatime option (based on patch from Nicolas George;
  fixes upstream bug 7249).
- Backported upstream fixes
  (GnuPG-bug-id: 2923, 3329, 3898, 4012; fixes CVE-2018-12020).
- 2.4.0
- do not build python bindings
- Fixes for the following security vulnerabilities:
  + CVE-2019-9893 64-bit argument comparisons do not work correctly
- for c8, soap reenabled
(Fixes: CVE-2017-1000061)
- Backported to c8 branch (fixes CVE-2018-0732, CVE-2018-0737,
  and CVE-2018-0739).
- Actually updated source to 1.1.32.
- Upstream support for SOURCE_DATE_EPOCH (ALT#32814).
- Fixes:
  + CVE-2017-5029 generation of text nodes integer overflow,
  + CVE-2016-1684 integer overflow (mishandle the i format token for
    xsl:number),
  + CVE-2016-1683 out-of-bounds heap memory access (mishandle namespace nodes).
- 2.6.7
- fixes:
     * ASN.1 BER and related dissectors crash. CVE-2019-9209
     * TCAP dissector crash. CVE-2019-9208
- Upstream git snapshot (nm-1-4 branch) (fixes: CVE-2018-15688).
- 0.14.1 (Fixes: CVE-2018-10873)
- fixes: CVE-2017-6892, CVE-2017-12562
- backport to c8
- multiple vulnerabilities (so-called KRACK attack) (Fixes:
  + CVE-2017-13077
  + CVE-2017-13078
  + CVE-2017-13079
  + CVE-2017-13080
  + CVE-2017-13081
  + CVE-2017-13082
  + CVE-2017-13086
  + CVE-2017-13087
  + CVE-2017-13088)