Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | main/bluez: fix CVE-2020-0556 | Leo | 2020-03-24 | 2 | -3/+196 | |
| | | | | see #11328 | |||||
* | community/tor: security upgrade to 0.3.5.10 | J0WI | 2020-03-18 | 1 | -6/+9 | |
| | ||||||
* | main/ansible: security upgrade to 2.8.9 | Leo | 2020-03-17 | 1 | -2/+5 | |
| | | | | see #11307 | |||||
* | main/lz4: fix CVE-2019-17543 | Leo | 2020-03-15 | 2 | -3/+87 | |
| | | | | see #10919 | |||||
* | main/gst-plugins-base: add secfixes | Leo | 2020-03-15 | 1 | -0/+4 | |
| | ||||||
* | main/iptables: restore lost init.d script for ebtables | Thomas Liske | 2020-03-14 | 3 | -2/+121 | |
| | ||||||
* | main/libarchive: fix CVE-2020-19221 and CVE-2020-9308 | Leo | 2020-03-11 | 1 | -2/+6 | |
| | ||||||
* | main/ppp: secfix for radius and EAP | Milan P. Stanić | 2020-03-10 | 4 | -1/+149 | |
| | | | | | | | | | backported security fixes from upstream: radius: Prevent buffer overflow in rc_mksid() pppd: Fix bounds check in EAP code pppd: Ignore received EAP messages when not doing EAP add 'secfixes' | |||||
* | main/py-django: security upgrade to 1.11.29 | Leo | 2020-03-10 | 1 | -2/+4 | |
| | | | | see #11288 | |||||
* | community/mpv: bump pkgrel due to live-media upgrade | Francesco Colista | 2020-03-06 | 1 | -1/+1 | |
| | ||||||
* | community/vlc: bump pkgrel due to live-media upgrade | Francesco Colista | 2020-03-06 | 1 | -1/+1 | |
| | ||||||
* | community/live-media: fixed symbol-not-found issue | Francesco Colista | 2020-03-06 | 5 | -6/+255 | |
| | | | | | | | | | | Disabled ssl support, since according with http://www.live555.com/liveMedia/ RTSP-over-TLS is sill in to-do list: * support for SRTP ('secure' RTP), and perhaps also RTSP-over-TLS. Cherry-picked from edge. Fixes: https://gitlab.alpinelinux.org/alpine/aports/issues/11273 | |||||
* | community/cesnet-tcs-cli: fix openssl command for generating EC key (again) | Jakub Jirutka | 2020-03-04 | 2 | -14/+4 | |
| | ||||||
* | community/cesnet-tcs-cli: fix openssl command for generating EC key | Jakub Jirutka | 2020-03-02 | 2 | -3/+30 | |
| | ||||||
* | main/librsvg: security upgrade to 2.40.21 | Rasmus Thomsen | 2020-02-26 | 1 | -3/+7 | |
| | ||||||
* | main/ncurses: move screen-256color to ncurses-terminfo-base | Leo | 2020-02-26 | 1 | -1/+2 | |
| | ||||||
* | {main,community,testing}: make terminals depend on ncurses-terminfo-base | Leo | 2020-02-26 | 3 | -11/+7 | |
| | ||||||
* | main/ncurses: re-arrange terminfo contents | Leo | 2020-02-26 | 1 | -6/+53 | |
| | | | | | | | | | | | | | | This re-arranges the contents of ncurses-terminfo-base so it contains all the terminfo entries for commonly used TERMs like xterm256-color. It also includes all terminfo entries for terminals we package like alacritty, gnome-terminal, konsole, kitty, st, etc. And a few others like putty, tmux and vte. The ncurses-terminfo-base packaged increased from 94.21 kB to 126.98 kB, a quite small increase when considering that now it is in the majority of cases the only package one has to install instead of having to rely on the massive ncurses-terminfo package. | |||||
* | main/cvs: security upgrade to 1.12.12 | TBK | 2020-02-25 | 16 | -53/+704 | |
| | | | | | | | | | Most distros uses 1.12.13 (https://repology.org/project/cvs/versions) but according to Gentoo it is usable, so following Gentoo (https://bugs.gentoo.org/124733) 1.12.12 is the way forward. CVEs: * CVE-2010-3846 - https://bugzilla.redhat.com/show_bug.cgi?id=642146 * CVE-2012-0804 - https://security-tracker.debian.org/tracker/CVE-2012-0804 * CVE-2017-12836 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871810#10 | |||||
* | community/xterm: depend on ncurses-terminfo | Leo | 2020-02-25 | 1 | -1/+2 | |
| | ||||||
* | main/putty: depend on ncurses-terminfo | Leo | 2020-02-25 | 1 | -4/+2 | |
| | ||||||
* | main/ncurses: fix automatic dependency due to symlinks | Leo | 2020-02-25 | 1 | -10/+8 | |
| | | | | | | | | | | | | | | | | | | | | The -libs subpackage depended on ncurses-terminfo when it shouldn't because when moving $pkgdir/usr/lib also moved /usr/lib/terminfo which is a symlink to /usr/share/terminfo which is part of ncurses-terminfo and thus a dependency would be automatically added by the prepare_symlink() function from APKBUILD. So make the libs() function grab only actual libraries by matching /usr/lib/*.so.* (this does not match libraries meant for -dev which would be *.so) so /usr/lib/terminfo isn't caught up. Also make the terminfo() function move /usr/lib/terminfo to it. In the meantime also do other cleanup like removing unnecessary 'cd "$builddir"' declarations and make libs() depend on the same $pkgver-r$pkgrel of the ncurses-terminfo-base. fixes #11250 | |||||
* | main/faac: fix secfixes | Leo | 2020-02-19 | 1 | -2/+2 | |
| | ||||||
* | main/dmvpn: various fixes | Kaarle Ritvanen | 2020-02-18 | 6 | -3/+196 | |
| | | | | | | define ciphers for better security and performance close inactive SAs fix race conditions | |||||
* | main/postgresql: security upgrade to 11.7 | J0WI | 2020-02-14 | 1 | -22/+24 | |
| | ||||||
* | main/nodejs: security upgrade to 10.19.0 | Jakub Jirutka | 2020-02-07 | 1 | -3/+15 | |
| | ||||||
* | main/openjpeg: secfixes (CVE-2020-6851,CVE-2020-8112) | Natanael Copa | 2020-02-05 | 3 | -4/+83 | |
| | | | | | | fixes #11189 (cherry picked from commit a60544e51180dade6c8e710f1bfd7060618ede11) | |||||
* | main/openjpeg: cleanup patches and update url | J0WI | 2020-02-05 | 6 | -286/+2 | |
| | | | | (cherry picked from commit 18df15dbb366dab8b2d3261d3758f99b8524906d) | |||||
* | main/openjpeg: fix path for cmake | prspkt | 2020-02-05 | 2 | -5/+17 | |
| | | | | (cherry picked from commit 1573948f7aaea2bda1ef5cbe9e8263f88658a028) | |||||
* | main/sudo: fix CVE-2019-18634 | Jakub Jirutka | 2020-02-05 | 2 | -2/+101 | |
| | ||||||
* | main/sudo: fix CVE-2019-14287 | Jakub Jirutka | 2020-02-05 | 2 | -2/+266 | |
| | ||||||
* | main/py-django: security upgrade to 1.11.28 | Kaarle Ritvanen | 2020-02-04 | 1 | -2/+4 | |
| | ||||||
* | community/openjdk8: security upgrade to 8.242.08 | J0WI | 2020-01-29 | 1 | -11/+19 | |
| | | | | fixes #11150 | |||||
* | community/openjdk8: update to IcedTea 3.14.0 / OpenJDK 8u232 | tony mancill | 2020-01-29 | 3 | -64/+33 | |
| | | | | | | | Update openjdk8 pacakge to 8.232.09 / icedtea 3.14.0 - drop icedtea-jdk-tls-nist-curves.patch (applied upstream) - refresh icedtea-hotspot-musl.patch to apply against 3.14.0 | |||||
* | community/php7: security upgrade to 7.3.14 (CVE-2020-7059 CVE-2020-7060) | J0WI | 2020-01-27 | 1 | -3/+6 | |
| | ||||||
* | community/wireshark: security upgrade to 3.0.8 (CVE-2020-7045) | Leonardo Arena | 2020-01-27 | 1 | -2/+4 | |
| | | | | ref #11156 | |||||
* | main/samba: security upgrade to 4.10.12 | Leonardo Arena | 2020-01-27 | 1 | -2/+6 | |
| | | | | | | CVE-2019-14902, CVE-2019-14907, CVE-2019-19344 ref #11155 | |||||
* | main/freeradius: fix segfault in process request_running() | Jakub Jirutka | 2020-01-26 | 2 | -2/+27 | |
| | ||||||
* | main/alpine-conf: unbreak lbu | Natanael Copa | 2020-01-24 | 2 | -2/+43 | |
| | | | | | | | fix regression in lbu that was introduced with commit commit 7ebf92cda21a (main/alpine-conf: fix lbu exit codes on error) ref https://gitlab.alpinelinux.org/alpine/alpine-conf/merge_requests/4 | |||||
* | ===== release 3.10.4 =====v3.10.4 | Natanael Copa | 2020-01-23 | 1 | -1/+1 | |
| | ||||||
* | main/zfs-vanilla: rebuild against kernel 4.19.98-r0 | Natanael Copa | 2020-01-23 | 1 | -1/+1 | |
| | ||||||
* | main/xtables-addons-vanilla: rebuild against kernel 4.19.98-r0 | Natanael Copa | 2020-01-23 | 1 | -1/+1 | |
| | ||||||
* | main/drbd-vanilla: rebuild against kernel 4.19.98-r0 | Natanael Copa | 2020-01-23 | 1 | -1/+1 | |
| | ||||||
* | main/devicemaster-linux-vanilla: rebuild against kernel 4.19.98-r0 | Natanael Copa | 2020-01-23 | 1 | -1/+1 | |
| | ||||||
* | main/dahdi-linux-vanilla: rebuild against kernel 4.19.98-r0 | Natanael Copa | 2020-01-23 | 1 | -1/+1 | |
| | ||||||
* | community/wireguard-vanilla: rebuild against kernel 4.19.98-r0 | Natanael Copa | 2020-01-23 | 1 | -1/+1 | |
| | ||||||
* | community/virtualbox-guest-modules-vanilla: rebuild against kernel 4.19.98-r0 | Natanael Copa | 2020-01-23 | 1 | -1/+1 | |
| | ||||||
* | main/linux-vanilla: upgrade to 4.19.98 | Natanael Copa | 2020-01-23 | 1 | -2/+2 | |
| | ||||||
* | community/wireguard-rpi: rebuild against kernel 4.19.98-r0 | Natanael Copa | 2020-01-23 | 1 | -1/+1 | |
| | ||||||
* | main/linux-rpi: upgrade to 4.19.98 | Natanael Copa | 2020-01-23 | 1 | -3/+3 | |
| |