ISO Образ: alt-kworkstation-9.2-install-x86_64.iso

О пакете: Transport Layer Security library

29 марта 2024 г. Mikhail Efremov:

- Fix side-channel in the deterministic ECDSA (fixes: CVE-2024-28834).
- tests: Add test for CVE-2024-28835.
- rsa-psk: minimize branching after decryption (fixes: CVE-2024-0553).
- x509: detect loop in certificate chain (fixes: CVE-2024-0567).

Версия: 3.6.16-alt1 → 3.6.16-alt5

О пакете: Transport Layer Security library

29 марта 2024 г. Mikhail Efremov:

- Fix side-channel in the deterministic ECDSA (fixes: CVE-2024-28834).
- tests: Add test for CVE-2024-28835.
- rsa-psk: minimize branching after decryption (fixes: CVE-2024-0553).
- x509: detect loop in certificate chain (fixes: CVE-2024-0567).

Версия: 3.7.11-alt1 → 3.7.17-alt1

О пакете: Python3 shared library

18 февраля 2024 г. Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Версия: 3.7.11-alt1 → 3.7.17-alt1

О пакете: Libraries and header files needed for Python 3 development

18 февраля 2024 г. Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Версия: 3.7.11-alt1 → 3.7.17-alt1

О пакете: DB-API 2.0 interface for SQLite databases

18 февраля 2024 г. Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Версия: 3.7.11-alt1 → 3.7.17-alt1

О пакете: Python 3 runtime libraries

18 февраля 2024 г. Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Версия: 3.7.11-alt1 → 3.7.17-alt1

О пакете: Version 3 of the Python programming language aka Python 3000

18 февраля 2024 г. Grigory Ustinov:

- Updated to upstream version 3.7.17.
- CVE Fixes (Fixes: CVE-2023-24329, CVE-2022-37454, CVE-2020-10735).

Версия: 12.8-alt0.M90P.1 → 12.18-alt0.M90P.1

О пакете: The shared libraries required for any PostgreSQL clients

12 февраля 2024 г. Alexei Takaseev:

- 12.18 (Fixes CVE-2024-0985)

Версия: 1.20.8-alt8 → 1.20.8-alt12

О пакете: A virtual framebuffer X Windows System server for X.Org

16 января 2024 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Версия: 1.20.8-alt8 → 1.20.8-alt12

О пакете: Xserver - X Window System display server

16 января 2024 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Версия: 1.20.8-alt8 → 1.20.8-alt12

О пакете: Wayland X server

16 января 2024 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Версия: 1.20.8-alt8 → 1.20.8-alt12

О пакете: The X server common files

16 января 2024 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408

Версия: 8-alt1.20190312 → 23-alt1.20231114

О пакете: Microcode definitions for Intel processors

14 ноября 2023 г. Konstantin Lepikhov:

- New upstream microcode datafile 20231114:
  + Security updates for INTEL-SA-00950 (CVE-2023-23583).
  + Updated microcodes:
    sig 0x000606a6, pf_mask 0x87, 2023-09-01, rev 0xd0003b9, size 299008
    sig 0x000606c1, pf_mask 0x10, 2023-09-08, rev 0x1000268, size 290816
    sig 0x000706e5, pf_mask 0x80, 2023-09-03, rev 0x00c2, size 113664
    sig 0x000806c1, pf_mask 0x80, 2023-09-07, rev 0x00b4, size 111616
    sig 0x000806c2, pf_mask 0xc2, 2023-09-07, rev 0x0034, size 98304
    sig 0x000806d1, pf_mask 0xc2, 2023-09-07, rev 0x004e, size 104448
    sig 0x000806f4, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f4, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f5, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f5, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f6, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f6, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f7, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f8, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f8, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x00090672, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x00090675, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x000906a3, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160
    sig 0x000906a4, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160
    sig 0x000a0671, pf_mask 0x02, 2023-09-03, rev 0x005d, size 104448
    sig 0x000b0671, pf_mask 0x32, 2023-08-29, rev 0x011d, size 210944
    sig 0x000b06a2, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064
    sig 0x000b06a3, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064
    sig 0x000b06e0, pf_mask 0x11, 2023-06-26, rev 0x0012, size 136192
    sig 0x000b06f2, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x000b06f5, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
- source: update symlinks to reflect id of the latest release, 20231114.

Версия: 1.20.8-alt8 → 1.20.8-alt11

О пакете: Xserver - X Window System display server

13 декабря 2023 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Версия: 1.20.8-alt8 → 1.20.8-alt11

О пакете: A virtual framebuffer X Windows System server for X.Org

13 декабря 2023 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Версия: 1.20.8-alt8 → 1.20.8-alt11

О пакете: The X server common files

13 декабря 2023 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Версия: 1.20.8-alt8 → 1.20.8-alt11

О пакете: Wayland X server

13 декабря 2023 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2023-6377, CVE-2023-6478

Версия: 3.3.16-alt1 → 3.3.17-alt7.g37f1060.p10.2

О пакете: procps shared library

12 декабря 2023 г. Mikhail Efremov:

- Patch from Fedora:
  + ps: Fix possible buffer overflow in -C option (fixes: CVE-2023-4016).
- Fixed NEWS file.
- spec: added a knob to build without systemd (by Alexey Sheplyakov)
- Makefile.am: fixed build without systemd (by Alexey Sheplyakov)

Версия: 3.3.16-alt1 → 3.3.17-alt7.g37f1060.p10.2

О пакете: System and process monitoring utilities

12 декабря 2023 г. Mikhail Efremov:

- Patch from Fedora:
  + ps: Fix possible buffer overflow in -C option (fixes: CVE-2023-4016).
- Fixed NEWS file.
- spec: added a knob to build without systemd (by Alexey Sheplyakov)
- Makefile.am: fixed build without systemd (by Alexey Sheplyakov)

Версия: 2.85-alt1 → 2.85-alt2.p9.1

О пакете: A lightweight caching nameserver

12 декабря 2023 г. Mikhail Efremov:

- Use RPM_OPT_FLAGS when build lease-tools.
- Use RPM_OPT_FLAGS.
- dnsmasq-helper: Fixed deadlock during restart from openresolv
  subscriber.
- Fixed bogus date in changelog.
- Fixed changelog.
- Patches upstream (backport):
  + Set the default maximum DNS UDP packet size to 1232 (fixes: CVE-2023-28450);
  + Minimum safe size is recommended to be 1232;
  + Fix write-after-free error in DHCPv6 code (fixes: CVE-2022-0934).

Версия: 3.6.16-alt1 → 3.6.16-alt4

О пакете: Transport Layer Security library

23 ноября 2023 г. Mikhail Efremov:

- auth/rsa_psk: side-step potential side-channel (fixes: CVE-2023-5981).

Версия: 3.6.16-alt1 → 3.6.16-alt4

О пакете: Transport Layer Security library

23 ноября 2023 г. Mikhail Efremov:

- auth/rsa_psk: side-step potential side-channel (fixes: CVE-2023-5981).

Версия: 12.8-alt0.M90P.1 → 12.17-alt0.M90P.1

О пакете: The shared libraries required for any PostgreSQL clients

9 ноября 2023 г. Alexei Takaseev:

- 12.17 (Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870)

Версия: 1.20.8-alt8 → 1.20.8-alt10

О пакете: Xserver - X Window System display server

16 ноября 2023 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Версия: 1.20.8-alt8 → 1.20.8-alt10

О пакете: The X server common files

16 ноября 2023 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Версия: 1.20.8-alt8 → 1.20.8-alt10

О пакете: A virtual framebuffer X Windows System server for X.Org

16 ноября 2023 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Версия: 1.20.8-alt8 → 1.20.8-alt10

О пакете: Wayland X server

16 ноября 2023 г. Valery Inozemtsev:

- cherry pick upstream fixes for CVE-2021-4011, CVE-2021-4009, CVE-2021-4010,
	CVE-2021-4008, CVE-2022-2320, CVE-2022-2319, CVE-2022-46340, CVE-2022-46341,
	CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-4283, CVE-2022-46340,
	CVE-2023-0494, CVE-2023-1393, CVE-2023-5367, CVE-2023-5380

Версия: 4.4.2-alt1 → 4.4.3.P1-alt1

О пакете: Управляющая программа клиента ISC DHCP

7 октября 2022 г. Mikhail Efremov:

- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).

Версия: 4.4.2-alt1 → 4.4.3.P1-alt1

О пакете: Dynamic Host Configuration Protocol (DHCP) distribution

7 октября 2022 г. Mikhail Efremov:

- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).

Версия: 4.4.2-alt1 → 4.4.3.P1-alt1

О пакете: Разделяемые библиотеки, используемые клиентом и сервером ISC DHCP

7 октября 2022 г. Mikhail Efremov:

- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).

Версия: 10.4.20-alt1 → 10.4.31-alt0.M90P.1

О пакете: A very fast and reliable MariaDB database server

18 октября 2023 г. Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Версия: 10.4.20-alt1 → 10.4.31-alt0.M90P.1

О пакете: Common files used in client and servers

18 октября 2023 г. Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Версия: 10.4.20-alt1 → 10.4.31-alt0.M90P.1

О пакете: Client

18 октября 2023 г. Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Версия: 10.4.20-alt1 → 10.4.31-alt0.M90P.1

О пакете: Shared libraries

18 октября 2023 г. Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Версия: 10.4.20-alt1 → 10.4.31-alt0.M90P.1

О пакете: MariaDB database server facility control

18 октября 2023 г. Alexei Takaseev:

- 10.4.31
- Drop mariadb-10.4.16-alt-link-with-latomic-if-needed.patch, fixed upstream.
- Fixes for the following security vulnerabilities:
    CVE-2021-35604, CVE-2021-46657, CVE-2021-46658, CVE-2021-46659, CVE-2021-46661,
    CVE-2021-46662, CVE-2021-46663, CVE-2021-46664, CVE-2021-46665, CVE-2021-46666,
    CVE-2021-46667, CVE-2021-46668, CVE-2021-46669, CVE-2022-0778, CVE-2022-21427,
    CVE-2022-21451, CVE-2022-21595, CVE-2022-47015, CVE-2022-32091, CVE-2022-32089,
    CVE-2022-32088, CVE-2022-32087, CVE-2022-32086, CVE-2022-32085, CVE-2022-32084,
    CVE-2022-32083, CVE-2022-32082, CVE-2022-32081, CVE-2022-31624, CVE-2022-27458,
    CVE-2022-27457, CVE-2022-27456, CVE-2022-27455, CVE-2022-27452, CVE-2022-27451,
    CVE-2022-27449, CVE-2022-27448, CVE-2022-27447, CVE-2022-27446, CVE-2022-27445,
    CVE-2022-27444, CVE-2022-27387, CVE-2022-27386, CVE-2022-27385, CVE-2022-27384,
    CVE-2022-27383, CVE-2022-27382, CVE-2022-27381, CVE-2022-27380, CVE-2022-27379,
    CVE-2022-27378, CVE-2022-27377, CVE-2022-27376, CVE-2022-24052, CVE-2022-24051,
    CVE-2022-24050, CVE-2022-24048

Версия: 2.02-alt29.qa4 → 2.02-alt29.qa5

О пакете: GRand Unified Bootloader (PC BIOS variant)

21 сентября 2023 г. Egor Ignatov:

- backport upstream CVE fix (closes: #45913) (fixes: CVE-2022-3775)
  + add grub-2.06-upstream-font-Fix-an-integer-underflow-in-blit_comb patch

Версия: 2.02-alt29.qa4 → 2.02-alt29.qa5

О пакете: GRand Unified Bootloader (common part)

21 сентября 2023 г. Egor Ignatov:

- backport upstream CVE fix (closes: #45913) (fixes: CVE-2022-3775)
  + add grub-2.06-upstream-font-Fix-an-integer-underflow-in-blit_comb patch

Версия: 2.02-alt29.qa4 → 2.02-alt29.qa5

О пакете: GRand Unified Bootloader (UEFI variant)

21 сентября 2023 г. Egor Ignatov:

- backport upstream CVE fix (closes: #45913) (fixes: CVE-2022-3775)
  + add grub-2.06-upstream-font-Fix-an-integer-underflow-in-blit_comb patch

Версия: 12.8-alt0.M90P.1 → 12.16-alt0.M90P.1

О пакете: The shared libraries required for any PostgreSQL clients

9 августа 2023 г. Alexei Takaseev:

- 12.16 (Fixes CVE-2023-39417)

Версия: 1.17.2-alt2 → 1.17.2-alt5

О пакете: The shared Kerberos 5 libraries, LDAP support