Безопасность

- Updated to 1.1.1t (fixes CVE-2023-0286, CVE-2023-0215, CVE-2022-4450,
  CVE-2022-4304).
- 2.4.55 (Fixes: CVE-2022-37436, CVE-2006-20001, CVE-2022-36760)
- Applied security fixes from upstream (Fixes: CVE-2022-40303, CVE-2022-40304).
- Fixed libssl knob.
- Fixed License tag.
- Added Vcs tag.
- Patch from upstream:
  + Fixed crash when st_info_list is NULL (fixes: CVE-2022-4121).
- 4.4.2 (Fixes: CVE-2022-28487, CVE-2022-27942, CVE-2022-27940, CVE-2022-37047, CVE-2022-37049,
     CVE-2022-27939, CVE-2022-25484, CVE-2022-27941)
- exo-helper: Properly quote command parameters (fixes: CVE-2022-45062).
- Backports from 1.19.4:
  + fix integer overflows in PAC parsing (Fixes: CVE-2022-42898);
  + fix some memory leaks.
- 1.22.1 (Fixes: CVE-2022-41741, CVE-2022-41742)
- Fix double free during gnutls_pkcs7_verify (fixes: CVE-2022-2509).
- New version (Closes: 42217)
- Security fixes:
  + CVE-2022-0547: possible authentication bypass if multiple
    authentication plugins tries to do deferred authentication
- Fix build with new python3-module-docutils
- 0.103.6
  + CVE-2022-20770
  + CVE-2022-20796
  + CVE-2022-20771
  + CVE-2022-20785
  + CVE-2022-20792
- 1.18.2 (fixed CVE-2022-1215)
- 9.11.36 -> 9.11.37 (fixes: CVE-2021-25220).
- Backported upstream security fix (fixes CVE-2022-0778).
- 3.6.2 (Fixes: CVE-2022-0586, CVE-2022-0585, CVE-2022-0583, CVE-2022-0582, CVE-2022-0581)
- NMU (fixes: CVE-2021-4034).
- Applied upstream fix for a trivially exploitable local root vulnerability,
  see https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
- 1.4.5 Release (Fixes: CVE-2020-7988).
- Updated to 2.4.3 (with multiple security fixes).
- Fixes:
  + CVE-2021-45960 issues with left shift by >= 29 places in function storeAtts that
    can lead to realloc misbehavior;
  + CVE-2021-46143 Integer overflow on variable m_groupSize in function doProlog;
  + CVE-2022-22822 Integer overflows near memory allocation in function addBinding;
  + CVE-2022-22823 Integer overflows near memory allocation in function build_model;
  + CVE-2022-22824 Integer overflows near memory allocation in function defineAttribute;
  + CVE-2022-22825 Integer overflows near memory allocation in function lookup;
  + CVE-2022-22826 Integer overflows near memory allocation in function nextScaffoldPart;
  + CVE-2022-22827 Integer overflows near memory allocation in function storeAtts.
- new version 2.2.25
- Fixes for the following security vulnerabilities:
  + CVE-2021-44420: Potential bypass of an upstream access control based on URL paths
- 7.3.33 (Fixes: CVE-2021-21707)
- 2.1.36 -> 2.1.37 (fixes bug in the fix for CVE-2021-43332).
- New version.
- Security fixes:
  + CVE-2021-41159 Improper client input validation for gateway connections allows to overwrite memory
  + CVE-2021-41160 Improper region checks in all clients allow out of bound write to memory
- 3.2.8 (fixes: CVE-2021-33582)
- new version
- security (fixes: CVE-2021-3634)
- 2021.8.22 (Fixes: CVE-2021-33285, CVE-2021-35269, CVE-2021-35268, CVE-2021-33289,
  CVE-2021-33286, CVE-2021-35266, CVE-2021-33287, CVE-2021-35267, CVE-2021-39251,
  CVE-2021-39252, CVE-2021-39253, CVE-2021-39254, CVE-2021-39255, CVE-2021-39256,
  CVE-2021-39257, CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261,
  CVE-2021-39262, CVE-2021-39263)
- Updated to 2.3.16 (fixes CVE-2021-33515, CVE-2021-29157, CVE-2021-33515, CVE-2021-29157).
- Package watch file.
- 1.17.2 (Fixes: CVE-2021-3672)
- E2K: apply mcst patches, including CVE-2018-6621 fix
- Version bump to 5.4.91-2.10
- Most fixes from upstream v5.4.128
(Fixes: CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-26141 CVE-2020-26145)
(Fixes: CVE-2020-26147 CVE-2021-3564 CVE-2021-23133 CVE-2021-23134)
- Sync with sisyphus v5.4.129
- Disable docs build by default.
- Version bump to 5.4.91-2.10
- Most fixes from upstream v5.4.128
(Fixes: CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-26141 CVE-2020-26145)
(Fixes: CVE-2020-26147 CVE-2021-3564 CVE-2021-23133 CVE-2021-23134)
- Sync with sisyphus v5.4.129
- Disable docs build by default.
- Version bump to 5.4.91-2.10
- Most fixes from upstream v5.4.128
(Fixes: CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-26141 CVE-2020-26145)
(Fixes: CVE-2020-26147 CVE-2021-3564 CVE-2021-23133 CVE-2021-23134)
- Sync with sisyphus v5.4.129
- Disable docs build by default.
- Version bump to 5.4.91-2.10
- Most fixes from upstream v5.4.128
(Fixes: CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-26141 CVE-2020-26145)
(Fixes: CVE-2020-26147 CVE-2021-3564 CVE-2021-23133 CVE-2021-23134)
- Sync with sisyphus v5.4.129
- Disable docs build by default.
- Version bump to 5.4.91-2.10
- Most fixes from upstream v5.4.128
(Fixes: CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-26141 CVE-2020-26145)
(Fixes: CVE-2020-26147 CVE-2021-3564 CVE-2021-23133 CVE-2021-23134)
- Sync with sisyphus v5.4.129
- Disable docs build by default.
- Backported patch from NM-1.32.2 (fixes: CVE-2020-13529):
  + dhcp/systemd: ignore FORCERENEW requests for DHCPV4 to workaround
    CVE-2020-13529.
- Upstream git snapshot (nm-1-18 branch).
- new version (1.3.0) with rpmgs script
- CVE-2020-9382, CVE-2020-35625
- new version 1.36.1 (with rpmrb script)
- (T280226, CVE-2021-35197): Prevent blocked users from purging pages
- Updated to 4.4.2-P1 (fixes: CVE-2021-25217).
- Updated to 1.8.17 (fixes: CVE-2021-32563).
- avoid infinite-loop in avahi-daemon (closes: #39357) (fixes: CVE-2021-3468)
- 0.15.0 (Fixes: CVE-2020-14355)
- E2K:
  + added mcst patches, mostly as-is except:
    - 0003-Add-copy-optimizations.patch: partially obsolete
    - 0006-Add-bug-workaround.patch: obsolete for arch > e2kv2
    - 0010-Restore-DRI1-support.{add,mod}.patch: need more reverts
    - 0040-Fix-CVE-2018-14665.patch: applied elsewhere upstream
    and specifically, including:
    - 0010-restore-DRI1-support-for-e1c.patch
    - mga2 related patch from mcst#5155
  + warning-related ftbfs workarounds
- Dropped obsoleted patch.
- Updated to 2.83 (fixes: CVE-2021-3448).
- 3.4.5 (fixes: CVE-2020-1946)
- remove dkim patch (fixed by upstream).
- P2P: Fix a corner case in peer addition based on PD Request
  (Fixes: CVE-2021-27803)
- applied patches from upstream git to fix security issue (Fixes: CVE-2020-5208)
  see https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
- added upstream fix FTBFS with gcc-10
- Autobuild version bump to 366
- CVE-2021-27135 (Closes: #39725)
- New version.
- Fixes:
  + CVE-2020-17525 Remote unauthenticated denial-of-service in Subversion mod_authz_svn
- Version bump
- Many bugfixes, including security, including, but not limited to:
  Fixes: CVE-2020-25725, CVE-2020-35376
- Fixes:
  + CVE-2017-12847 Kill arbitrary processes by leveraging access to PID file.
- Don't install the PID file.
- Applied security fix from upstream (Fixes CVE-2018-16789).
- Applied security fix from upstream (Fixes CVE-2018-8754).
- Applied security fix from upstream (Fixes CVE-2018-18584).
- new version 0.21.0 (Fixes CVE-2020-25650, CVE-2020-25651, CVE-2020-25652, CVE-2020-25653).
- Applied security fix from upstream (Fixes: CVE-2020-29074).
- Backported upstream commits (fixes CVE-2020-9366).
- added upstream commit:
  + fixed a incorrect overflow check that could be optimized away
    (fixes CVE-2020-0452)
- new version 1.4.10 (with rpmrb script)
- CVE-2020-35730
- Applied security patches from Debian and Gentoo (Fixes: CVE-2014-0466, CVE-2015-8107).
- Updated to upstream version 0.32.3 (Fixes: CVE-2017-5208,
  CVE-2017-5331, CVE-2017-5332, CVE-2017-5333).
- Applied security patch from Gentoo (Fixes: CVE-2017-9430).
- Updated to upstream version 1.2.1 (Fixes: CVE-2018-16741, CVE-2018-16742,
  CVE-2018-16743, CVE-2018-16744, CVE-2018-16745, CVE-2019-1010189, CVE-2019-1010190).
- Updated to upstream version 1.6.9 (Fixes: CVE-2019-11778, CVE-2019-11779).
- Applied security fix from upstream (Fixes: CVE-2019-14495).
- Updated to upstream version 1.18.0 (Fixes: CVE-2017-5991, CVE-2018-10289,
  CVE-2018-16647, CVE-2018-16648, CVE-2019-14975, CVE-2020-26519).
- Updated to upstream version 1.2.2 (Fixes: CVE-2019-13045, CVE-2019-15717).
- Updated to upstream version 1.4.2.1 (Fixes: CVE-2019-6135, CVE-2019-6136,
  CVE-2019-6138, CVE-2019-6719, CVE-2019-16510, CVE-2019-1010300, CVE-2020-7054).
- Applied security fix from upstream (Fixes: CVE-2019-17362).
- Applied security patch from Fedora (Fixes: CVE-2019-19917, CVE-2019-19918)
- Version bump for CVE-2017-17742, CVE-2018-6914, CVE-2018-8777,
  CVE-2018-8778, CVE-2018-8779, CVE-2018-8780 fixes.
- Enable -O3 optimization anm apply vm.c workaround for lcc bug.
- Move to E2K naming scheme.
- Switch to e2k e2kv4 e2kv5 e2kv6 e2k4c e2k8c e2k1cp e2k8c2 e2k12c e2k16c e2k2c3.
- Updated rpm post script (Fixes: CVE-2020-12050).
- Updated to upstream version 0.19 (Fixes: CVE-2016-9601, CVE-2020-12268).
- Updated to upstream version 6.11 (Fixes: CVE-2020-14342).
- p9 build
- 5.28.3
- fixes CVE-2020-10543,CVE-2020-10878,CVE-2020-12723
- 1.2.3
- securuty fixes: CVE-2016-7951, CVE-2016-7952
- 0.9.10
- securuty fixes: CVE-2016-7949, CVE-2016-7950
- Updated to 2.7.18 (fixes CVE-2019-9636).
- 'Trusted mode' added (thnx boyarsh@).
- License tag fixed (thnx boyarsh@).
- Backported to p9 (fixes CVE-2019-11068, CVE-2019-13117 and CVE-2019-13118).
- Build with bzip2 compression method support
- Massive apply security patches from Fedora and openSUSE
- Fixes:
  + CVE-2014-8139 CRC32 verification heap-based buffer overread
  + CVE-2014-8140 out-of-bounds write issue in test_compr_eb()
  + CVE-2014-8141 getZip64Data() out-of-bounds read issues
  + CVE-2014-9913 buffer overflow in zipinfo
  + CVE-2014-9636 out-of-bounds read or write and crash
  + CVE-2015-7696 fix for heap overflow
  + CVE-2015-7697 fix infinite loop when extracting empty bzip2 data
  + CVE-2016-9844 buffer overflow in zipinfo in similar way like fix for CVE-2014-9913
  + CVE-2018-1000035 heap based buffer overflow when opening password protected files
  + CVE-2018-18384 buffer overflow, when a ZIP archive specially crafted
- 10.4.17
- backport fix for MDEV-24096, MDEV-24121, MDEV-24134
- Fixes for the following security vulnerabilities:
  + CVE-2020-14812
  + CVE-2020-14765
  + CVE-2020-14776
  + CVE-2020-14789
  + CVE-2020-15180
- Updated to upstream version 0.15.0 (Fixes: CVE-2020-26682).
- Switched to CVE-2008-4935 fix from Debian.
- Added -Werror=implicit-function-declaration compiler flag.
- Updated to version 1.76 from Debian (Fixes: CVE-2009-1382, CVE-2009-2459).
- Updated to upstream version 1.1.108-0.17.ga6958ef (Fixes: CVE-2010-4173).
- Cleaned up sources by importing sources from Debian.
- Forced using system build flags.
- Updated fix for CVE-2015-2063.
- Applied patches from Debian (Fixes: CVE-2013-4420).
- Applied patches from Debian (Fixes: CVE-2014-8123).
- Updated to upstream version 3.20 (Fixes: CVE-2013-6410, CVE-2013-7441, CVE-2015-0847).
- Fixed CVE-2020-15999.
- Applied patches from Gentoo (Fixes: CVE-2015-8836, CVE-2015-8837).
- Updated to upstream version 1.92 (Fixes: CVE-2017-1000421).
- Updated to upstream version 1.2.2 (Fixes: CVE-2017-15953, CVE-2017-15954, CVE-2017-15955).
- Updated to upstream version 1.4.2 (Fixes: CVE-2020-24361).
- Updated to upstream version 2.0.29 (Fixes: CVE-2019-20917, CVE-2020-25269).
- 4.13 (Fixes: CVE-2020-15811, CVE-2020-15810, CVE-2020-24606)
- AP: Silently ignore management frame from unexpected source address
  (Fixes: CVE-2019-16275) (Closes: 39131)
- Applied patches from Debian (Fixes: CVE-2005-3178).
- Applied patches from Debian and Gentoo (Fixes: CVE-2005-2536, CVE-2006-5869).
- Build now respects %optflags.
- Applied security fixes from Gentoo (Fixes: CVE-2010-2642, CVE-2011-0433,
  CVE-2011-0764, CVE-2011-1552, CVE-2011-1553, CVE-2011-1554, CVE-2011-5244).
- Updated to snapshot from upstream (Fixes: CVE-2016-9422, CVE-2016-9423,
  CVE-2016-9424, CVE-2016-9425, CVE-2016-9426, CVE-2016-9428, CVE-2016-9429,
  CVE-2016-9430, CVE-2016-9431, CVE-2016-9432, CVE-2016-9433, CVE-2016-9434,
  CVE-2016-9435, CVE-2016-9436, CVE-2016-9437, CVE-2016-9438, CVE-2016-9439,
  CVE-2016-9440, CVE-2016-9441, CVE-2016-9442, CVE-2016-9443, CVE-2016-9622,
  CVE-2016-9623, CVE-2016-9624, CVE-2016-9625, CVE-2016-9626, CVE-2016-9627,
  CVE-2016-9628, CVE-2016-9629, CVE-2016-9630, CVE-2016-9631, CVE-2016-9632,
  CVE-2016-9633, CVE-2018-6196, CVE-2018-6197, CVE-2018-6198).
- Applied patches from Debian and Gentoo (Fixes: CVE-2004-2779).