aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* main/xen: upgrade to 4.9.2Henrik Riomar2018-04-0517-2457/+5
| | | | | | | | Update musl-support.patch and remove hunk that fixes tools/libxl/libxl_arm_acpi.c as this is in upstream commit: 6b1a2704e7 libxl/arm: Fix build on arm64 + acpi Drop patches included in new upstream version
* main/apk-tools: fix index refresh on time zeroTimo Teräs2018-04-052-2/+38
| | | | (cherry picked from commit 1dcf9e4a7be72e1b04fcfbdb24c4406e44bb1926)
* community/firefox-esr: security upgrade to 52.7.2Natanael Copa2018-04-021-2/+2
| | | | | | | | | | | | | | fixes #8702 CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList CVE-2018-5129: Out-of-bounds write with malformed IPC messages CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources CVE-2018-5144: Integer overflow during Unicode conversion CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7
* main/tiff: fix CVE-2018-5784prspkt2018-04-023-3/+135
| | | | fixes #8707
* main/openssl: security upgrade to 1.0.2o and rebuild depending pkgsAndy Postnikov2018-04-014-5/+9
| | | | | | Fixes CVE-2017-3738, CVE-2018-0739, CVE-2018-0733 Rebuilds packages that link openssl statically.
* main/zsh: fix CVE-2018-1071, CVE-2018-1083prspkt2018-03-313-2/+85
|
* community/php7: security upgrade to 7.1.16Andy Postnikov2018-03-311-2/+2
|
* community/php5: security upgrade to 5.6.35Andy Postnikov2018-03-311-2/+2
|
* main/ruby: security upgrade to 2.4.4Natanael Copa2018-03-291-2/+9
| | | | | | | | | | | | | | | | | | | CVE-2017-17742: HTTP response splitting in WEBrick CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir CVE-2018-8777: DoS by large request in WEBrick CVE-2018-8778: Buffer under-read in String#unpack CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir fixes #8747
* community/go1.10: add backportNatanael Copa2018-03-293-0/+279
|
* community/drupal7: security upgrade to 7.58Andy Postnikov2018-03-281-2/+6
| | | | CVE-2018-7600
* community/icinga2: build fixNatanael Copa2018-03-271-1/+1
| | | | use mariadb-dev instead of mariadb-connector-c
* community/icinga2: security upgrade to 2.8.2 ↵Natanael Copa2018-03-271-3/+9
| | | | | | (CVE-2018-6532,CVE-2018-6534,CVE-2018-6535) fixes #8716
* main/uwsgi: security upgrade to 2.0.17 (CVE-2018-6758,CVE-2018-7490)Natanael Copa2018-03-271-3/+5
| | | | fixes #8734
* main/apache2: security upgrade to 2.4.33Kaarle Ritvanen2018-03-271-3/+11
| | | | fixes #8729
* community/php5-apcu: upgrade to 5.1.11Andy Postnikov2018-03-261-5/+3
| | | | Fixes segfaults & random deadlock
* community/rt4: fix email patch for v4.4.2Kory Prince2018-03-262-13/+49
| | | | Fixes #8712
* community/wireshark: security upgrade to 2.4.5Natanael Copa2018-03-261-2/+25
| | | | | | | | | | | CVE-2018-7320, CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324, CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328, CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332, CVE-2018-7333, CVE-2018-7334, CVE-2018-7335, CVE-2018-7336, CVE-2018-7337, CVE-2018-7417, CVE-2018-7418, CVE-2018-7419, CVE-2018-7420 Fixes #8651
* main/rsync: security upgrade to 3.1.3 (CVE-2018-5764)Natanael Copa2018-03-205-144/+6
| | | | fixes #8676
* main/kamailio: version bump 5.0.6Nathan Angelacos2018-03-201-3/+3
|
* main/curl: upgrade to 7.59.0prspkt2018-03-191-3/+7
| | | | fixes #8644
* main/samba: security upgrade to 4.7.6Jakub Jirutka2018-03-151-3/+6
|
* Revert "main/nodejs: upgrade to 8.10.0"Jakub Jirutka2018-03-151-2/+2
| | | | | | | | | | This reverts commit 0fec1f8393961c474ddc240c8f94f13c9002103f. It fails to build on v3.7 (but works on edge): ../src/node.cc: In function 'void node::SetupProcessObject(node::Environment*, int, const char* const*, int, const char* const*)': ../src/node.cc:3495:63: error: 'uv_os_getpid' was not declared in this scope Integer::New(env->isolate(), uv_os_getpid()));
* main/nodejs: upgrade to 8.10.0Tim Brust2018-03-141-2/+2
|
* main/ruby-bundler: upgrade to 1.16.1Jakub Jirutka2018-03-141-2/+2
|
* main/mqtt-exec: upgrade to 0.4Natanael Copa2018-03-131-7/+3
|
* main/py-django: security upgrade to 1.11.11Leonardo Arena2018-03-121-3/+6
| | | | | | CVE-2018-7536, CVE-2018-7537 Fixes #8637
* community/zoneminder: add missing dependenciesKaarle Ritvanen2018-03-101-5/+5
|
* community/docker: update to 17.12.1Bernhard J. M. Gruen2018-03-071-2/+2
|
* community/docker: enable on s390xNatanael Copa2018-03-071-2/+2
|
* community/docker: upgrade to 17.12.0Kevin Daudt2018-03-071-10/+8
| | | | switch to a stable release channel instead of docker 'edge'
* Revert "community/texmf-dist: move from testing"William Pitcock2018-03-062-0/+0
| | | | This reverts commit a14600015b1965e2c3815c1e259a6daaab5fdf7c.
* community/texmf-dist: move from testingWilliam Pitcock2018-03-062-0/+0
|
* main/memcached: extstore remains utterly broken on non-x86_64, reverse the logicWilliam Pitcock2018-03-061-3/+3
|
* main/memcached: Upgrade to 1.5.6tcely2018-03-062-7/+135
| | | | Add patch for seccomp musl fixes.
* main/libmemcached: Add depend on cyrus-sasl-dev to libmemcached-devtcely2018-03-061-23/+17
|
* main/xen: security fixesLeonardo Arena2018-03-065-1/+390
| | | | | | | | CVE-2018-7540, XSA-252 CVE-2018-7541, XSA-255 CVE-2018-7542, XSA-256 Fixes #8614
* main/dovecot: security upgrade to 2.2.34Andy Postnikov2018-03-061-3/+8
| | | | https://www.dovecot.org/list/dovecot-news/2018-February/000370.html
* main/alpine-conf: fix update-kernel to handle -vanilla suffixNatanael Copa2018-03-052-4/+42
|
* main/mosquitto: security upgrade to 1.4.15Jakub Jirutka2018-03-041-3/+6
|
* community/php7: upgrade to 7.1.15Valery Kartel2018-03-031-2/+2
|
* community/php5: upgrade to 5.6.34Valery Kartel2018-03-031-2/+2
|
* main/postgresql: upgrade to 10.3Jakub Jirutka2018-03-021-2/+4
|
* main/patch: security fix (CVE-2018-6951)Leonardo Arena2018-02-282-5/+40
| | | | | | | Partially fixes #8563 Patch for CVE-2018-6952 not yet available: https://savannah.gnu.org/bugs/index.php?53133
* main/squid: security upgrade to 3.5.27Leonardo Arena2018-02-282-20/+13
| | | | | | CVE-2018-1000024, CVE-2018-1000027 Fixes #8551
* main/libseccomp: fix depends for -devNatanael Copa2018-02-281-3/+4
| | | | | | libseccomp-dev needs linux-headers fixes #8597
* main/libtasn1: security fix (CVE-2018-6003)Leonardo Arena2018-02-282-2/+70
| | | | Fixes #8527
* community/phpmyadmin: security upgrade to 4.7.8 (CVE-2017-1000499,CVE-2018-7260)Natanael Copa2018-02-271-2/+2
| | | | fixes #8590
* main/qemu: fix configure for s390xNatanael Copa2018-02-272-1/+60
| | | | | | | | the configure script assumes that grep handles binary data. Busybox grep does not when its compiled with musl so we filter the input with `strings`. Upstream: http://patchwork.ozlabs.org/patch/863654/
* main/libvorbis: security fixes (CVE-2017-14632, CVE-2017-14633)dai9ah2018-02-273-5/+34
| | | | Fixes #8515