aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* main/wireshark: security upgrade to 1.12.10. Fixes #5228Leonardo Arena2016-04-111-4/+4
| | | | CVE-2016-2521, CVE-2016-2523, CVE-2016-2530, CVE-2016-2531, CVE-2016-2532
* main/wireshark: security upgrade to 1.12.9. Fixes #5224Leonardo Arena2016-04-111-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | CVE-2015-8711: The NBAP dissector could crash CVE-2015-8712, CVE-2015-8713: The UMTS FP dissector could crash CVE-2015-8714: The DCOM dissector could crash CVE-2015-8715: The AllJoyn dissector could go into an infinite loop CVE-2015-8716: The T.38 dissector could crash CVE-2015-8717: The SDP dissector could crash CVE-2015-8718: The NLM dissector could crash CVE-2015-8719: The DNS dissector could crash CVE-2015-8720: ASN.1 BER-based dissectors could crash CVE-2015-8721: Dissectors which use zlib decompression could crash CVE-2015-8722: The SCTP dissector could crash CVE-2015-8723: The 802.11 dissector could crash CVE-2015-8725: The DIAMETER dissector could crash CVE-2015-8726: The VeriWave file parser could crash CVE-2015-8727: The RSVP dissector could crash CVE-2015-8728: The ANSI A and GSM A dissectors could crash CVE-2015-8729: The Ascend file parser could crash CVE-2015-8730: The NBAP dissector could crash CVE-2015-8731: The RSL dissector could crash CVE-2015-8732: The ZigBee ZCL dissector could crash CVE-2015-8733: The Sniffer file parser could crash
* main/perl-pathtools: security upgrade to 3.62 (CVE-2015-8607). Fixes #5331Leonardo Arena2016-04-111-6/+6
|
* main/nss: security upgrade to 3.19.2.3 (CVE-2016-1950, CVE-2016-1979). Fixes ↵Leonardo Arena2016-04-112-30/+5
| | | | #5324
* main/openvswitch: security fix (CVE-2016-2074). Fixes #5339Leonardo Arena2016-04-062-4/+62
| | | | (cherry picked from commit 3f597cd91f6b9a54ac5d7ece8cf44dd376f0cb60)
* main/quagga: security fix (CVE-2016-2342). Fixes #5344Leonardo Arena2016-04-063-1/+152
|
* main/php: security upgrade to 5.6.20Kaarle Ritvanen2016-04-041-4/+4
|
* main/acf-freeradius3: upgrade to 0.1.2Ted Trask2016-03-311-4/+4
| | | | (cherry picked from commit f7dff6c702eebb4365e9c0e503a7b5226b779cd3)
* main/openssh: security fix (CVE-2016-3115). Fixes #5287Leonardo Arena2016-03-222-4/+88
|
* main/samba: security upgrade to 4.1.23 (CVE-2015-7560, CVE-2016-0771). Fixes ↵Leonardo Arena2016-03-151-4/+4
| | | | #5275
* main/libotr: upgrade version to 4.1.1 due to CVE-2016-2851. Fixes #5258Johannes Matheis2016-03-141-4/+4
| | | | | (cherry picked from commit 719fd59bc6e33da1a3fb549e6c4fa24848c34e91) Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
* main/putty: security upgrade to 0.67 (CVE-2016-2563). Fixes #5253Leonardo Arena2016-03-141-5/+5
| | | | (cherry picked from commit 7c18b536e1c1329ab8466eb402c956ebfff315ba)
* main/acf-quagga: upgrade to 0.10.1Ted Trask2016-03-111-5/+5
| | | | | (cherry picked from commit 2016bb19c32399d9089e9153ec242f109001f63d) (cherry picked from commit 0ee3daf0911f9934482a80288cff00501290dc6e)
* main/bind: security upgrade to 9.10.3_p4 (CVE-2016-1285, CVE-2016-1286, ↵Leonardo Arena2016-03-111-4/+4
| | | | CVE-2016-2088). Fixes #5242
* main/jasper: security fixes (CVE-2016-1577, CVE-2016-2089, CVE-2016-2116). ↵Leonardo Arena2016-03-114-4/+127
| | | | | | Fixes #5235 (cherry picked from commit 244e4d797e740c7fedf8e3e9df9d9d85859b11b4)
* main/owncloud: upgrade to 7.0.13Leonardo Arena2016-03-091-4/+4
|
* main/cacti: security fix (CVE-2015-8604). Fixes #5204Leonardo Arena2016-03-042-4/+36
| | | | (cherry picked from commit 81eb7e3b062d62dff1b82864cdd42732b50f4a9c)
* main/openssl: security upgrade to 1.0.2gNatanael Copa2016-03-011-4/+5
| | | | | | | | | | | CVE-2016-0800 [High severity] CVE-2016-0705 [Low severity] CVE-2016-0798 [Low severity] CVE-2016-0797 [Low severity] CVE-2016-0799 [Low severity] CVE-2016-0702 [Low severity] fixes #5209
* main/tdb: upgrade to 1.3.8Leonardo Arena2016-02-263-108/+5
|
* main/talloc: upgrade to 2.1.5Leonardo Arena2016-02-262-95/+7
|
* main/samba: security upgrade to 4.1.22. Fixes #5043Leonardo Arena2016-02-261-4/+4
| | | | (CVE-2015-3223, CVE-2015-5252, CVE-2015-5296, CVE-2015-5299, CVE-2015-5330, CVE-2015-7540, CVE-2015-8467)
* main/ldb: upgrade to 1.1.24Leonardo Arena2016-02-262-93/+5
|
* main/tevent: upgrade to 1.1.24Leonardo Arena2016-02-262-93/+5
|
* main/nss: security fix (CVE-2015-7575, CVE-2016-1938). Fixes #5186Leonardo Arena2016-02-263-4/+110
| | | | (cherry picked from commit bacf664c11b53ab5cb8224a2910b1e31dc6841e5)
* main/libssh2: security fix (CVE-2016-0787). Fixes #5181Leonardo Arena2016-02-262-3/+31
| | | | (cherry picked from commit 172d419b0e074112384b90baca96f8494e026a72)
* main/libssh: fix source urlLeonardo Arena2016-02-261-2/+2
|
* main/libssh: upgrade to 0.6.5, security fix (CVE-2016-0739). Fixes #5175Leonardo Arena2016-02-262-1/+75
| | | | (cherry picked from commit 8fd14512598c4438817e0c3b405cfa648fc72898)
* main/nettle: security fix (CVE-2015-8803, CVE-2015-8804, CVE-2015-8805). ↵Leonardo Arena2016-02-263-5/+294
| | | | Fixes #5169
* main/xen: security fixes. Fixes #5162 (partially)Leonardo Arena2016-02-258-1/+738
| | | | | | | | | | (CVE-2016-2270, XSA-154) (CVE-2015-8339, CVE-2015-8340, XSA-159) (CVE-2015-8341, XSA-160) (CVE-2015-8555, XSA-165) (CVE-2016-1570, XSA-167) (CVE-2016-1571, XSA 168) (CVE-2016-2271, XSA-170)
* main/nodejs: security upgrade to 0.10.42 (CVE-2016-2086, CVE-2016-2216). ↵Leonardo Arena2016-02-231-4/+4
| | | | Fixes #5156
* main/krb5: security fixes (CVE-2015-8629, CVE-2015-8630, CVE-2015-8631). ↵Leonardo Arena2016-02-234-0/+702
| | | | | | Fixes #5128 (cherry picked from commit eab4343d4108ba85530b8141ae3fe0a2242cd72b)
* main/xdelta3: security upgrade to 3.0.11 (CVE-2014-9765). Fixes #5151Leonardo Arena2016-02-221-10/+14
|
* main/libgcrypt: security upgrade to 1.6.5 (CVE-2015-7511). Fixes #5136Leonardo Arena2016-02-181-4/+4
|
* main/postgresql: security upgrade to 9.3.11 (CVE-2016-0766, CVE-2016-0773). ↵Leonardo Arena2016-02-161-4/+4
| | | | Fixes #5121
* main/cgit: security fix CVE-2016-1899, CVE-2016-1900, CVE-2016-1901. Fixes #5098Leonardo Arena2016-02-115-6/+214
| | | | (cherry picked from commit c8d5b3017f998d5284638c262ae52971c8b6c1cb)
* main/privoxy: security upgrade to 3.0.24 (CVE-2016-1982,CVE-2016-1983). ↵Leonardo Arena2016-02-091-4/+4
| | | | | | Fixes #5062 (cherry picked from commit 51e24c0cf8b4c51e2a63b60ed33ad38c7c5632d2)
* main/openssl: security upgrade to 1.0.1rTimo Teräs2016-01-281-4/+4
| | | | Fixes CVE-2015-3197
* main/bind: security upgrade to 9.10.3_p3 (CVE-2015-8704,CVE-2015-8705). ↵Leonardo Arena2016-01-271-4/+4
| | | | Fixes #5036
* main/libpng: security upgrade to 1.6.20 (CVE-2015-8472). Fixes #5022Leonardo Arena2016-01-271-7/+7
|
* main/cacti: security fix CVE-2015-8369. #4996Leonardo Arena2016-01-272-4/+212
| | | | (cherry picked from commit f2790debf25f0b5bcd813f4b67e771465afe6877)
* main/php: security upgrade to 5.6.17Kaarle Ritvanen2016-01-251-4/+4
|
* main/dhcp: security fix CVE-2015-8605Leonardo Arena2016-01-151-4/+4
| | | | (cherry picked from commit 22e7e932857b63925e02a28dead479be5b913561)
* main/dhcp: upgrade to 4.3.3Natanael Copa2016-01-152-30/+5
| | | | (cherry picked from commit 01aa8019e97fbc95bc800d7342cfd344c64f8400)
* main/dhcp: upgrade to 4.3.2Natanael Copa2016-01-152-22/+7
| | | | (cherry picked from commit 0087c52e2be8c96576a588a663a7805f37a4028b)
* main/dhcp: add linux-headersCarlo Landmeter2016-01-151-1/+1
| | | | (cherry picked from commit 33c09599e49d495abfb402034d5ffdae6701f954)
* main/openssh: security fix for CVE-2016-0777 and CVE-2016-0778Natanael Copa2016-01-142-4/+48
| | | | | | | | | | | | | | | | | | CVE-2016-0777 An information leak (memory disclosure) can be exploited by a rogue SSH server to trick a client into leaking sensitive data from the client memory, including for example private keys. CVE-2016-0778 A buffer overflow (leading to file descriptor leak), can also be exploited by a rogue SSH server, but due to another bug in the code is possibly not exploitable, and only under certain conditions (not the default configuration), when using ProxyCommand, ForwardAgent or ForwardX11. fixes #5017
* main/acf-weblog: upgrade to 0.10.5Ted Trask2015-12-301-4/+4
| | | | (cherry picked from commit 90307c81ab6049080934fb67cb2b5352f5fc07bc)
* main/owncloud: upgrade to 7.0.12Leonardo Arena2015-12-301-4/+4
|
* main/roundcubemail: security upgrade to 1.0.8Leonardo Arena2015-12-291-4/+4
| | | | https://www.htbridge.com/advisory/HTB23283
* main/bind: security upgrade to 9.10.3_p2 (CVE-2015-8461,CVE-2015-8000)Natanael Copa2015-12-161-4/+4
| | | | fixes #4958