[cyber] I: p10/branch packages: +7 (19078)

QA Team Robot qa на altlinux.org
Вт Июн 16 03:26:31 MSK 2026


	7 UPDATED packages

apache2 - Apache HTTP Server (httpd), modular web server
* Tue Jun 09 2026 Anton Farygin <rider на altlinux> 1:2.4.68-alt1
- 2.4.67 -> 2.4.68
- Fixes:
  * CVE-2026-49975: mod_http2 denial of service
  * CVE-2026-48913: mod_http2 memory corruption when file handles exhausted
  * CVE-2026-44631: Heap Underflow in `ap_regname` via Signed Char Overflow
  * CVE-2026-44186: Loop in `proxy_ftp_handler` in mod_proxy_ftp
  * CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request`
  * CVE-2026-44119: escalation of privilege through expressions in .htaccess in multiple modules
  * CVE-2026-43951: OOB Read in `merge_response_headers` can cause crash
  * CVE-2026-42536: mod_xml2enc heap overflow
  * CVE-2026-42535: mod_dav_fs protected directory access
  * CVE-2026-34356: ProxyPassReverseCookieMap buffer overflow
  * CVE-2026-34355: mod_proxy_html buffer overflow
  * CVE-2026-29170: mod_proxy_ftp XSS
  * CVE-2026-29167: mod_ldap per-dir use-after-free
* Tue May 05 2026 Anton Farygin <rider на altlinux> 1:2.4.67-alt1

java-11-openjdk - OpenJDK Runtime Environment 11                	[70M]
* Fri May 01 2026 Andrey Cherepanov <cas на altlinux> 0:11.0.31.0.11-alt0.c10.1
- Backport new version with security fixes to c10 branch.
* Thu Apr 30 2026 Andrey Cherepanov <cas на altlinux> 0:11.0.31.0.11-alt1
- New version (fixes: CVE-2026-22016, CVE-2026-34282, CVE-2026-22021,
  CVE-2026-22013, CVE-2026-23865, CVE-2026-22018, CVE-2026-22007,
  CVE-2026-34268).
* Mon Jan 26 2026 Andrey Cherepanov <cas на altlinux> 0:11.0.30.0.7-alt0.c10.1

postgresql13-pgpool-II - Pgpool is a connection pooling/replication server for PostgreSQL
* Sun Jun 07 2026 Alexei Takaseev <taf на altlinux> 4.6.7-alt0.p10.1
- 4.6.7
* Tue Mar 17 2026 Alexei Takaseev <taf на altlinux> 4.6.6-alt0.p10.2

postgresql14-pgpool-II - Pgpool is a connection pooling/replication server for PostgreSQL
* Sun Jun 07 2026 Alexei Takaseev <taf на altlinux> 4.6.7-alt0.p10.1
- 4.6.7
* Tue Mar 17 2026 Alexei Takaseev <taf на altlinux> 4.6.6-alt0.p10.2

postgresql15-pgpool-II - Pgpool is a connection pooling/replication server for PostgreSQL
* Sun Jun 07 2026 Alexei Takaseev <taf на altlinux> 4.6.7-alt0.p10.1
- 4.6.7
* Tue Mar 17 2026 Alexei Takaseev <taf на altlinux> 4.6.6-alt0.p10.2

postgresql16-pgpool-II - Pgpool is a connection pooling/replication server for PostgreSQL
* Sun Jun 07 2026 Alexei Takaseev <taf на altlinux> 4.6.7-alt0.p10.1
- 4.6.7
* Tue Mar 17 2026 Alexei Takaseev <taf на altlinux> 4.6.6-alt0.p10.2

postgresql17-pgpool-II - Pgpool is a connection pooling/replication server for PostgreSQL
* Sun Jun 07 2026 Alexei Takaseev <taf на altlinux> 4.6.7-alt0.p10.1
- 4.6.7
* Tue Mar 17 2026 Alexei Takaseev <taf на altlinux> 4.6.6-alt0.p10.2

Total 19078 source packages.


Подробная информация о списке рассылки Sisyphus-cybertalk