aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* community/zabbix: upgrade to 3.4.7Leonardo Arena2018-02-201-2/+2
|
* main/quagga: upgrade to 1.2.4Timo Teräs2018-02-201-2/+2
| | | | (cherry picked from commit cacf8c7b23a8bca8e1ae7bf9b8f4ee3c29fdd06d)
* community/exim: security upgrade to 4.90.1 (CVE-2018-6789)Valery Kartel2018-02-191-2/+4
| | | | | | Fixes #8505 Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
* main/irssi: security upgrade to 1.0.6Leonardo Arena2018-02-191-3/+13
| | | | | | | CVE-2018-5205, CVE-2018-5206, CVE-2018-5207, CVE-2018-5208, CVE-2018-7050, CVE-2018-7051, CVE-2018-7052, CVE-2018-7053, CVE-2018-7054 Fixes #8501
* community/icingaweb2-module-director: cherry-picked from edge to fix missing ↵Francesco Colista2018-02-171-1/+4
| | | | contrib dir
* main/quagga: security upgrade to 1.2.3Timo Teräs2018-02-161-2/+2
| | | | (cherry picked from commit 0ebf73b2c2c90ac66f1619b6104435d7ea730a3a)
* main/samba: upgrade to 4.7.4. Fixes #8485Leonardo Arena2018-02-151-2/+2
|
* main/chrony: update default configLeonardo Arena2018-02-152-5/+4
| | | | Fixes #8477
* main/uwsgi: security upgrade to 2.0.16 (CVE-2018-6758)Leonardo Arena2018-02-151-3/+8
|
* main/postgresql: security upgrade to 10.2Jakub Jirutka2018-02-092-4/+23
| | | | | | | | | | | This upgrade contains one incompatible change in contrib/cube (packaged in -contrib subpackage). Explanation from https://www.postgresql.org/docs/10/static/release-10-2.html: > This is an incompatible change, but since the point of the operator > was to be used in KNN searches, it seems rather useless as-is. After > installing this update, any expression indexes or materialized views > using this operator will need to be reindexed/refreshed.
* community/php7: upgrade to 7.1.14Andy Postnikov2018-02-081-3/+3
|
* main/tiff: security fix CVE-2017-18013Leonardo Arena2018-02-082-2/+40
| | | | Fixes #8461
* main/curl: security upgrade to 7.58.0Leonardo Arena2018-02-081-4/+5
| | | | | | CVE-2018-1000005, CVE-2018-1000007 Fixes #8439
* community/wireshark: security upgrade to 2.4.4Leonardo Arena2018-02-081-3/+7
| | | | | | CVE-2018-5334, CVE-2018-5335, CVE-2018-5336 Fixes #8434
* main/musl: backport 2 fixes from upstreamNatanael Copa2018-02-073-1/+168
| | | | | - use UTC instead of GMT when no timezone is specified - fix sysconf for initite rlimits
* main/bash: fix jobs againNatanael Copa2018-02-072-10/+23
| | | | | | | | previous fix didnt solve the problem for 32 bit architectures. We fix it by capping childmax to 8192. ref #8447
* main/bash: upgrade to 4.4.19Natanael Copa2018-02-071-3/+10
| | | | (cherry picked from commit 8756c780bda76051ece619cab28acf83c63a920f)
* community/mpv: security fix CVE-2018-6360Leonardo Arena2018-02-072-3/+115
|
* community/php7: disable checks on ppc64leLeonardo Arena2018-02-071-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | ===================================================================== FAILED TEST SUMMARY --------------------------------------------------------------------- Test for blowfish compatibility [ext/mcrypt/tests/blowfish.phpt] OO API [ext/tidy/tests/020.phpt] getConfig() method - basic test for getConfig() [ext/tidy/tests/030.phpt] ===================================================================== ===================================================================== FAILED TEST SUMMARY --------------------------------------------------------------------- Bug #65646 (re-enable CURLOPT_FOLLOWLOCATION with open_basedir or safe_mode): open_basedir disabled [ext/curl/tests/bug65646.phpt] OO API [ext/tidy/tests/020.phpt] getConfig() method - basic test for getConfig() [ext/tidy/tests/030.phpt] ===================================================================== ===================================================================== FAILED TEST SUMMARY --------------------------------------------------------------------- Test for bug 52013 about Phar::decompressFiles(). [ext/phar/tests/bug52013.phpt] Phar: test readfile() interception [ext/phar/tests/readfile.phpt] OO API [ext/tidy/tests/020.phpt] getConfig() method - basic test for getConfig() [ext/tidy/tests/030.phpt] =====================================================================
* main/php5: security upgrade to 5.6.33Andy Postnikov2018-02-061-3/+6
| | | | | | | | | - CVE-2018-5711 - CVE-2018-5712 Ref http://php.net/archive/2018.php#id2018-01-04-4 (cherry picked from commit 5e4dbc0d75238b02e3ad3bd55b5ac3a8b74bab3a)
* main/bind: Upgrade to 9.11.2-P1tcely2018-02-061-3/+5
| | | | (cherry picked from commit b3fd1eb4e8e0f578e1fbaf76d9903a9012274dee)
* community/php7: security upgrade to 7.1.13Andy Postnikov2018-02-062-35/+5
| | | | | | | - CVE-2018-5711 - CVE-2018-5712 Ref http://php.net/archive/2018.php#id2018-01-04-3
* main/mkinitfs: skip apk hooksHenrik Riomar2018-01-312-3/+35
| | | | | | Skip pre/post apk hooks on diskless initramfs installation. (cherry picked from commit 8c9aa20b2f1445d63a2923145fffca1b40f1470a)
* main/py-django-sorl-thumbnail: upgrade to 12.4.1Kaarle Ritvanen2018-01-301-4/+2
|
* main/busybox: make "source" work like bash again by searching current ↵William Pitcock2018-01-293-2/+54
| | | | | | directory for scripts See http://lists.busybox.net/pipermail/busybox/2018-January/086146.html for rationale.
* community/firefox-esr: security upgrade to 52.6.0Leonardo Arena2018-01-251-2/+19
| | | | | | CVE-2018-5089 CVE-2018-5091 CVE-2018-5095 CVE-2018-5096 CVE-2018-5097 CVE-2018-5098 CVE-2018-5099 CVE-2018-5102 CVE-2018-5103 CVE-2018-5104 CVE-2018-5117
* community/nextcloud: upgrade to 12.0.5Leonardo Arena2018-01-241-3/+3
|
* main/ncurses: security upgrade to 6.0-20171125 (CVE-2017-16879)Leonardo Arena2018-01-231-3/+5
| | | | Fixes #8392
* community/wireshark: enable RTP streams playbackLeonardo Arena2018-01-191-3/+7
| | | | | | Enable check() (cherry picked from commit 9e81be5f331abefc06aa5f2dec67f906d45e13d2)
* main/rsync: fix secfixes commentNatanael Copa2018-01-121-2/+1
| | | | need to use valid CVE identifiers or the parsers will get confused
* main/cyrus-sasl: add secfixes commentNatanael Copa2018-01-121-0/+4
|
* main/libxfont: fix secfixes commentNatanael Copa2018-01-121-1/+1
|
* main/lame: fix secfixes commentNatanael Copa2018-01-121-1/+1
|
* main/apk-tools: upgrade to 2.8.2Timo Teräs2018-01-092-189/+3
|
* community/firefox-esr: upgrade to 52.5.3Leonardo Arena2018-01-081-2/+2
|
* main/awstats: security fix (CVE-2017-1000501)Leonardo Arena2018-01-053-6/+149
| | | | Fixes #8372
* main/asterisk: add libtool to makedependsTimo Teräs2018-01-041-2/+2
| | | | | | This is a requirement to get res_odbc built. (cherry picked from commit bd3bc89b4abf4ea8817417f4d5594c8ebaf62749)
* main/heimdal: security fix (CVE-2017-17439)Leonardo Arena2017-12-292-2/+51
| | | | Fixes #8292
* community/bzr: security fix (CVE-2017-14176)Leonardo Arena2017-12-292-10/+177
| | | | Fixes #8298
* main/rsync: security fixesLeonardo Arena2017-12-295-2/+149
| | | | | | CVE-2017-16548, CVE-2017-17433, CVE-2017-17434 Fixes #8318
* main/asterisk: security upgrade to 15.1.5Timo Teräs2017-12-291-2/+2
| | | | | | fixes #8353 AST-2017-014 Crash in PJSIP resource when missing a contact header
* main/asterisk: upgrade to 15.1.4Timo Teräs2017-12-291-2/+2
| | | | | | ref #8353 AST-2017-012 Remote Crash Vulnerability in RTCP Stack
* main/asterisk: upgrade to 15.1.3Timo Teräs2017-12-291-2/+2
| | | | | | ref #8353 AST-2017-013 DOS Vulnerability in Asterisk chan_skinny
* main/lua-asn1: add missing dependencyKaarle Ritvanen2017-12-281-2/+2
|
* community/zabbix: upgrade to 3.4.5Leonardo Arena2017-12-281-2/+2
|
* main/libraw: security upgrade to 0.18.6 (CVE-2017-16910)Leonardo Arena2017-12-281-2/+4
| | | | Fixes #8339
* community/gimp: security fixesLeonardo Arena2017-12-287-3/+373
| | | | | | | | CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17789 Fixes #8351 CVE-2017-17788 applies only to >= v2.9.6
* community/webkit2gtk: security upgrade to 2.18.4Natanael Copa2017-12-261-2/+8
| | | | | | | | | | CVE-2017-7156 CVE-2017-7157 CVE-2017-13856 CVE-2017-13866 CVE-2017-13870 fixes #8334
* main/xen: security fixes for (XSA-248, XSA-249, XSA-250, XSA-251)Daniel Sabogal2017-12-185-1/+308
|
* community/wireshark: security upgrade to 2.4.3 (CVE-2017-17083, ↵Francesco Colista2017-12-171-3/+7
| | | | CVE-2017-17084, CVE-2017-17085). Fixes #8269