Категория ../Система

- Backported CVE fixes (fixes: CVE-2024-2199, CVE-2024-3657, CVE-2024-5953).
- v5.4.282 (2024-08-19).
- config: Enable CONFIG_CRASH_DUMP.
- Backported fix for https://pagure.io/bind-dyndb-ldap/issue/228
- Backported bind-9.11 CVE and bug fixes:
  + (fixes: CVE-2022-2795, CVE-2022-38177, CVE-2022-38178, CVE-2023-2828)
  + (fixes: CVE-2023-3341, CVE-2023-4408, CVE-2023-50387, CVE-2023-50868)
- v5.10.219 (2024-06-16).
- 1.20.0 (Fixes CVE-2024-33655)
- Updated keys:
  + alt-sisyphus@ (DA2773BB).
  + alt-p9@ (7AED4D09).
- avoid calling _update with zero-length input (fixes: CVE-2021-4209).
- Backport fixes from 10.1.0 and 10.2.0-rc1 (Fixes: CVE-2024-1441, CVE-2024-2494)
- Build for kernel-image-std-def-5.4.282-alt1.
- Build for kernel-image-un-def-5.10.219-alt1.
- new version
- new version
- new version
- new version
- new version
- new version
- new version
- cherry pick upstream fixes for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0409, CVE-2024-0408
- NMU: fixed output of ethlist for devices which unsupported by ethtool
- Use RPM_OPT_FLAGS when build lease-tools.
- Use RPM_OPT_FLAGS.
- dnsmasq-helper: Fixed deadlock during restart from openresolv
  subscriber.
- Fixed bogus date in changelog.
- Fixed changelog.
- Patches upstream (backport):
  + Set the default maximum DNS UDP packet size to 1232 (fixes: CVE-2023-28450);
  + Minimum safe size is recommended to be 1232;
  + Fix write-after-free error in DHCPv6 code (fixes: CVE-2022-0934).
- Backported to p9 branch new package icu69 (only library).
- New upstream microcode datafile 20231114:
  + Security updates for INTEL-SA-00950 (CVE-2023-23583).
  + Updated microcodes:
    sig 0x000606a6, pf_mask 0x87, 2023-09-01, rev 0xd0003b9, size 299008
    sig 0x000606c1, pf_mask 0x10, 2023-09-08, rev 0x1000268, size 290816
    sig 0x000706e5, pf_mask 0x80, 2023-09-03, rev 0x00c2, size 113664
    sig 0x000806c1, pf_mask 0x80, 2023-09-07, rev 0x00b4, size 111616
    sig 0x000806c2, pf_mask 0xc2, 2023-09-07, rev 0x0034, size 98304
    sig 0x000806d1, pf_mask 0xc2, 2023-09-07, rev 0x004e, size 104448
    sig 0x000806f4, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f4, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f5, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f5, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f6, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f6, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x000806f7, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f8, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416
    sig 0x000806f8, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184
    sig 0x00090672, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x00090675, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x000906a3, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160
    sig 0x000906a4, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160
    sig 0x000a0671, pf_mask 0x02, 2023-09-03, rev 0x005d, size 104448
    sig 0x000b0671, pf_mask 0x32, 2023-08-29, rev 0x011d, size 210944
    sig 0x000b06a2, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064
    sig 0x000b06a3, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064
    sig 0x000b06e0, pf_mask 0x11, 2023-06-26, rev 0x0012, size 136192
    sig 0x000b06f2, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
    sig 0x000b06f5, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208
- source: update symlinks to reflect id of the latest release, 20231114.
- 2.4.58
- 2.0.24 -> 2.0.25 (Fixes: CVE-2023-45802)
- New version.
- Security fixes:
  + CVE-2023-42822: Unchecked access to font glyph info
- repocop cronbuild 20230922. At your service.
- backport upstream CVE fix (closes: #45913) (fixes: CVE-2022-3775)
  + add grub-2.06-upstream-font-Fix-an-integer-underflow-in-blit_comb patch
- added accept_language module (Closes: #47364)
- updated pam and geoip modules
- repocop cronbuild 20230825. At your service.
- Build for kernel-image-un-def-5.10.219-alt1.
- Build for kernel-image-std-def-5.4.282-alt1.
- Backport fix for use-after-free in kadmin5
  (Fixes: CVE-2023-36054).
- Backport new version to p9 branch.
- Remove alterator-setup-kworkstation.po.
add upstream commit 93e60d3 (Fixes: CVE-2023-24805)
- Updated to 1.1.1u (fixes CVE-2023-2650).
- Backport new version to p9 branch.
- Added arepo source line if it exists for repository (ALT #31605).
- Add default values to net-ip6tables.conf (closes: #34291).
- Update to latest stable release.
- Fix run_time message validation in logsrvd.
- Fixed a potential double-free bug when matching a sudoers rule
  that contains a per-command chroot directive (CHROOT=dir).
- New version.
- Conflicted with pcsc-lite-openct (ALT #45282).
- 1.6.4 released
- Applied security fixes from upstream (Fixes: CVE-2022-40303, CVE-2022-40304).
- 247.13 (Fixes: CVE-2022-4415)
- New version (3.86).
- Set nssckbi version number to 2.60.
- Certificate Authority Changes:
  + Remove CN=EC-ACC
  + Remove CN=Network Solutions Certificate Authority
  + Remove CN=Staat der Nederlanden EV Root CA
  + Remove CN=SwissSign Platinum CA - G2
- Rebuild with new nss without tests.
- Patches from upstream git:
  + Increase label size from 48 -> 128;
  + Fix write buffer overflow by 1 in domain_to_punycode();
  + Fix stack buffer overflow WRITE 1 in domain_to_punycode();
  + Avoid 8bit overflow in is_public_suffix();
  + Avoid 'NULL + 1' as it is UB.
- fixed plugin path (ALT #44524)
- fixed configdir path
- new version
- Update samba defaults from samba-4.16.6-alt1 release.
- Update restore script with default configuration files actually placed in
  default directory as in the user's system.
- exo-helper: Properly quote command parameters (fixes: CVE-2022-45062).
- 4.6.1
- Fixes (CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
  CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789,
  CVE-2022-40284)
- Updated to GIT 5e9dd41.
- Build for kernel-image-un-def-5.10.219-alt1.
- Build for kernel-image-std-def-5.4.282-alt1.
- moved to Sisyphus from Autoimports (ALT #43074)
- added init script for sysvinit
- built with --enable-memory-failure
- removed Requires for hwdata
- New version (4.35).
- Updated to 4.4.3-P1 (fixes: CVE-2022-2928,CVE-2022-2929).
- 2022b -> 2022d.
- 1.4.67
- 1.46 -> 1.47.
- Add udev-rules-sgutils package.
- Rebuilt with the latest tzdata.
- Add tmpfiles config for /var/run/teamd/ directory.
- teamd: better handle failures to chown(TEAMD_RUN_DIR) during
  teamd_drop_privileges() (patch from openSUSE) (closes: #43269).
- Don't package teamd@.service (closes: #41998).
- Upstream git snapshot (closes: #43298).
- Build for kernel-image-std-def-5.4.282-alt1.
- Misc: Fix compatibility with ALT Linux P9.
- added upstream fix against build with linux kernel  5.10.121+
- New version (Closes: 42217)
- Security fixes:
  + CVE-2022-0547: possible authentication bypass if multiple
    authentication plugins tries to do deferred authentication
- Fix build with new python3-module-docutils
- Build for kernel-image-un-def-5.10.219-alt1.
- Build for kernel-image-std-def-5.4.282-alt1.
- 1.18.2 (fixed CVE-2022-1215)
- Backport to p9 branch.
- Backport fixes to p9 branch.
- changed ua.alt to ru.alt default domain name in scsi initiator generator
- 4.5.1
- Backported upstream security fix (fixes CVE-2022-0778).
- Add missing BR: libkrb5-devel
- cleanup %files section in spec
- Backport new version to p9 branch.
- Correct adml definitions for controls and group policies.
- Update machine and user packages settings.
- Add Gsettings for windows manager Marco.
- Add policies for local users support.
- Add Simply Linux 10 as BaseALT product.
- Bumped release to keep version in Sisyphus greater than in autoimports.
- Initial build upstream master snapshot.
- rules.mk: no error if existing /lib/firmware
- Fix require rpm-build-python3.
- Set verify ELF method to 'relaxed' for all arches.
- Add libnss-role control facility
- New version.
- (Fixes: CVE-2021-4034)
- New version.
- fixed init script permissions (closes: #41778)
- Fixed memory leak.
- Updated to 2.4.3 (with multiple security fixes).
- Fixes:
  + CVE-2021-45960 issues with left shift by >= 29 places in function storeAtts that
    can lead to realloc misbehavior;
  + CVE-2021-46143 Integer overflow on variable m_groupSize in function doProlog;
  + CVE-2022-22822 Integer overflows near memory allocation in function addBinding;
  + CVE-2022-22823 Integer overflows near memory allocation in function build_model;
  + CVE-2022-22824 Integer overflows near memory allocation in function defineAttribute;
  + CVE-2022-22825 Integer overflows near memory allocation in function lookup;
  + CVE-2022-22826 Integer overflows near memory allocation in function nextScaffoldPart;
  + CVE-2022-22827 Integer overflows near memory allocation in function storeAtts.
- new version
- New version.
- new version
- new version
- new version
- new version
- new version
- new version

Категория ../Система

Подкатегории: