Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | community/lua-hiredis | Nathan Angelacos | 2017-10-30 | 4 | -37/+31 | |
| | | | | | | APKBUILD: hiredis.so now loads correctly 0003-: spell compatibility correctly 0004-: add backward compatibility define for luaL_checkint for Lua 5.3+ | |||||
* | main/apk-tools: upgrade to 2.7.4 | Timo Teräs | 2017-10-27 | 1 | -2/+2 | |
| | ||||||
* | main/binutils: security fix (CVE-2017-9038) | Leonardo Arena | 2017-10-25 | 2 | -3/+40 | |
| | | | | partially fixes #7315 | |||||
* | community/libzip: security fixes (CVE-2017-14107, CVE-2017-12858) | Leonardo Arena | 2017-10-25 | 3 | -4/+78 | |
| | | | | fixes #7814 | |||||
* | community/php7: add secinfo | Leonardo Arena | 2017-10-25 | 1 | -0/+8 | |
| | ||||||
* | main/xen: security fixes | Leonardo Arena | 2017-10-25 | 5 | -2/+383 | |
| | | | | | | (CVE-2017-14316, CVE-2017-14317, CVE-2017-14318, CVE-2017-14319) fixes #7820 | |||||
* | main/gdk-pixbuf: security upgrade to 2.36.7 (CVE-2017-2862) | Leonardo Arena | 2017-10-25 | 1 | -3/+5 | |
| | | | | Fixes #7866 | |||||
* | main/newsbeuter: security fix (CVE-2017-14500) | Leonardo Arena | 2017-10-24 | 2 | -3/+47 | |
| | | | | fixes #7877 | |||||
* | community/go: security upgrade to 1.8.4 (CVE-2017-15041,CVE-2017-15042) | Natanael Copa | 2017-10-24 | 1 | -3/+3 | |
| | | | | fixes #8043 | |||||
* | main/curl: security upgrade to 7.56.1 (CVE-2017-1000257) | Natanael Copa | 2017-10-24 | 1 | -2/+4 | |
| | | | | fixes #8039 | |||||
* | main/samba: security upgrade to 4.6.8 | Leonardo Arena | 2017-10-24 | 2 | -49/+9 | |
| | | | | | | (CVE-2017-12150, CVE-2017-12151, CVE-2017-12163) fixes #7892 | |||||
* | main/musl: fix CVE-2017-15650 | Natanael Copa | 2017-10-23 | 2 | -1/+37 | |
| | | | | fixes #8031 | |||||
* | main/strongswan: security fix (CVE-2017-11185) | Leonardo Arena | 2017-10-23 | 2 | -1/+55 | |
| | | | | fixes #7903 | |||||
* | main/weechat: security fix (CVE-2017-14727) | Leonardo Arena | 2017-10-23 | 2 | -2/+158 | |
| | | | | fixes #7929 | |||||
* | community/one-context: upgrade to 0.5.3 | Jakub Jirutka | 2017-10-23 | 1 | -7/+2 | |
| | ||||||
* | community/wireshark: security upgrade to 2.2.10 | Leonardo Arena | 2017-10-23 | 1 | -6/+10 | |
| | | | | | | | (CVE-2017-15191, CVE-2017-15192, CVE-2017-15193) (CVE-2017-13765, CVE-2017-13766, CVE-2017-13767) fixes #8014 #7911 | |||||
* | main/nginx: upgrade to 1.12.2 (bug fixes) | Jakub Jirutka | 2017-10-23 | 1 | -2/+2 | |
| | ||||||
* | main/mutt: Upgrade to 1.8.3. | Przemyslaw Pawelczyk | 2017-10-20 | 1 | -3/+3 | |
| | | | | | | | | | "Mutt 1.8.3 was released on May 30, 2017. This is a bug-fix release, fixing a memory leak, a couple IMAP issues, and a few other small issues." -- mutt.org BTW license name in APKBUILD has been fixed to be conformant to SPDX, that we agreed to use back in June 2017 on #alpine-devel. | |||||
* | Revert "main/xen,community/rng-tools: remove unicode whitespace from APKBUILDs" | William Pitcock | 2017-10-19 | 2 | -3/+3 | |
| | | | | This reverts commit 94eec0c787af9a21f974d849af5a50a9e4969369. | |||||
* | main/xen,community/rng-tools: remove unicode whitespace from APKBUILDs | Andy Chu | 2017-10-19 | 2 | -3/+3 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix bugs in 2 packages by removing Unicode whitespace. I found these problems by parsing all APKBUILD scripts with my shell (http://www.oilshell.org/). The problem only occurs if 'make' fails. Here is an excerpt: $ od -c unicode-space.sh 0000000 m a k e | | 302 240 r e t u r n 0000020 1 \n 0000022 \302 \204 is a utf-8 whitespace. No shells accept this -- it's parsed as part of the 'return' word, which makes it an invalid command. $ busybox ash unicode-space.sh make: *** No targets specified and no makefile found. Stop. unicode-space.sh: line 1: return: not found $ bash unicode-space.sh make: *** No targets specified and no makefile found. Stop. unicode-space.sh: line 1: return: command not found $ dash unicode-space.sh make: *** No targets specified and no makefile found. Stop. unicode-space.sh: 1: unicode-space.sh: return: not found Remove '|| return 1' from lines that contained unicode whitespace. abuild now runs with 'set -e'. | |||||
* | Revert "main/gcr: update project url and modernize" | William Pitcock | 2017-10-19 | 1 | -8/+22 | |
| | | | | This reverts commit 7d3171a9ade7e7eba5469d25a350a2cc270bda68. | |||||
* | main/gcr: update project url and modernize | Roberto Oliveira | 2017-10-19 | 1 | -22/+8 | |
| | ||||||
* | main/automake: upgrade to 1.15.1 | André Klitzing | 2017-10-19 | 1 | -8/+6 | |
| | ||||||
* | main/awall: upgrade to 1.4.8 | Kaarle Ritvanen | 2017-10-18 | 1 | -2/+2 | |
| | ||||||
* | main/acf-dnsmasq: upgrade to 0.7.1 | Ted Trask | 2017-10-17 | 1 | -5/+3 | |
| | | | | (cherry picked from commit dad897776e7acc96e0965ded745980e2e19fd120) | |||||
* | community/zabbix: upgrade to 3.2.9 | Leonardo Arena | 2017-10-17 | 1 | -2/+2 | |
| | ||||||
* | main/hostapd: security fixes | Leonardo Arena | 2017-10-17 | 8 | -17/+993 | |
| | | | | | | | | | | | | | | | - CVE-2017-13077 - CVE-2017-13078 - CVE-2017-13079 - CVE-2017-13080 - CVE-2017-13081 - CVE-2017-13082 - CVE-2017-13084 (not applicable) - CVE-2017-13086 - CVE-2017-13087 - CVE-2017-13088 https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt | |||||
* | main/wpa_supplicant: security upgrade | Sören Tempel | 2017-10-16 | 9 | -15/+1038 | |
| | | | | | | | | | | | | | | CVE-2017-13077 CVE-2017-13078 CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-13082 CVE-2017-13086 CVE-2017-13087 CVE-2017-13088 See also: https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt | |||||
* | main/ncurses: security upgrade to 6.0_p20170930 | Natanael Copa | 2017-10-11 | 1 | -13/+18 | |
| | | | | | | | | | | | | | | - CVE-2017-11112 - CVE-2017-11113 - CVE-2017-13728 - CVE-2017-13729 - CVE-2017-13730 - CVE-2017-13731 - CVE-2017-13732 - CVE-2017-13733 - CVE-2017-13734 fixes #7967 | |||||
* | main/perl: use system zlib and bzip2 | Natanael Copa | 2017-10-11 | 1 | -2/+19 | |
| | | | | | | | | | | | The bundled zlib 1.2.8 is vulnerable to: - CVE-2016-9843 - CVE-2016-9841 - CVE-2016-9840 - CVE-2016-9842 Force building with system zlib, and while at it, also do that with bzip2 | |||||
* | main/ghostscript: security upgrade to 9.22. Fixes #7993 | Francesco Colista | 2017-10-11 | 1 | -8/+4 | |
| | ||||||
* | community/tor: security fix (CVE-2017-0380). Fixes #7989 | Francesco Colista | 2017-10-10 | 2 | -3/+58 | |
| | ||||||
* | community/miniupnpc: security fixes CVE-2017-8798. Fixes #7990 | Francesco Colista | 2017-10-10 | 2 | -7/+55 | |
| | ||||||
* | main/perl: security upgrade to 5.24.3 (CVE-2017-12837,CVE-2017-12883) | Natanael Copa | 2017-10-10 | 3 | -1610/+9 | |
| | | | | fixes #7898 | |||||
* | main/apk-tools: upgrade to 2.7.3 | Timo Teräs | 2017-10-06 | 2 | -39/+2 | |
| | ||||||
* | main/curl: security upgrade to 7.56.0 (CVE-2017-1000254) | Natanael Copa | 2017-10-04 | 2 | -40/+4 | |
| | | | | fixes #7962 | |||||
* | main/busybox: backport provides /bin/sh | Natanael Copa | 2017-10-04 | 1 | -1/+2 | |
| | | | | this makes it easier to mix edge repo with stable. | |||||
* | main/python3: split out wininst*.exe | Natanael Copa | 2017-10-02 | 1 | -2/+9 | |
| | | | | | | | | the wininst is only needed for creating binary distribution for windows and is rarely needed. The precompiled .exe files contains statically linked version of zlib 1.2.8 which is vulnerable. Remove them from main package and save a couple of MB. | |||||
* | main/php7: disable checks to unblock the builder | Natanael Copa | 2017-10-02 | 1 | -0/+1 | |
| | ||||||
* | main/sqlite: security upgrade to 3.20.1 (CVE-2017-10989) | Natanael Copa | 2017-10-02 | 1 | -2/+6 | |
| | | | | fixes #7950 | |||||
* | main/dnsmasq: backport patches for CVE-2017-14491..14496 | Jakub Jirutka | 2017-10-02 | 8 | -1/+554 | |
| | ||||||
* | main/php7: disable tests that fails to unblock the builder | Natanael Copa | 2017-10-02 | 2 | -1/+24 | |
| | ||||||
* | community/nextcloud: upgrade to 10.0.3 | Leonardo Arena | 2017-09-28 | 1 | -3/+3 | |
| | ||||||
* | community/zabbix: upgrade to 3.2.8 | Leonardo Arena | 2017-09-28 | 2 | -16/+4 | |
| | ||||||
* | community/emacs: security upgrade to 25.3. Fixes #7864 | Francesco Colista | 2017-09-25 | 1 | -2/+2 | |
| | ||||||
* | main/mkinitfs: fix Makefile to install btrfs.files | Jakub Jirutka | 2017-09-22 | 2 | -3/+16 | |
| | ||||||
* | main/mkinitfs: fix booting from Btrfs RAID | Jakub Jirutka | 2017-09-22 | 2 | -2/+46 | |
| | | | | See http://bugs.alpinelinux.org/issues/6903 | |||||
* | main/openjpeg: security upgrade to 2.2.0 and fixes | Francesco Colista | 2017-09-21 | 7 | -24/+309 | |
| | | | | | | | | | | | - CVE-2017-14040 - CVE-2017-14041 - CVE-2017-14151 - CVE-2017-14152 - CVE-2017-14164 Fixes partially #7826. Not yet fixed CVE-2017-14039 since patch is not available for 2.2.0 | |||||
* | main/apache2: fix CVE-2017-9798 aka Optionsbleed | Daniel Isaksen | 2017-09-21 | 2 | -1/+20 | |
| | ||||||
* | main/asterisk: security upgrade to 14.6.2 (CVE-2017-14099) | Timo Teräs | 2017-09-20 | 1 | -2/+2 | |
| | | | | AST-2017-008 (CVE-2017-14099): RTP/RTCP information leak |