Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | main/dropbear: backport security fix (CVE-2018-15599) | Natanael Copa | 2018-09-10 | 2 | -3/+232 | |
| | | | | fixes #9348 | |||||
* | main/dropbear: disable wtmp and lastlog support | nervo | 2018-09-10 | 1 | -2/+4 | |
| | | | | | | | | musl doesn't support neither wtmp nor lastlog. Fixes #5075 (cherry picked from commit 8717d9372bd86e76ee2da5e06ffc702c4ab7c7c2) | |||||
* | main/bind: add secfixes comment | Natanael Copa | 2018-09-10 | 1 | -0/+2 | |
| | ||||||
* | main/bind: security upgrade to 9.12.2_p1 (CVE-2018-5740) | Natanael Copa | 2018-09-10 | 2 | -56/+2 | |
| | | | | fixes #9358 | |||||
* | main/nginx: fix permissions of /var/tmp | Natanael Copa | 2018-09-10 | 1 | -1/+2 | |
| | | | | | | | | | | Permissions of /var/tmp should be 1777. Due to limitation in apk/abuild we need to explicitly set the permissions of intermediate directories that should not have default. ref #9364 (cherry picked from commit 7a6d59536dfe5ea1fbc343993d894d119c701ab1) | |||||
* | main/xen: clean up checksums | Natanael Copa | 2018-09-06 | 1 | -1/+0 | |
| | ||||||
* | main/ncurses: add /lib/terminfo to terminfo dirs | Natanael Copa | 2018-09-06 | 1 | -2/+2 | |
| | | | | | | | This is so statically compiled binaries works on distros where terminfo is installed in /lib/terminfo (like ubuntu) fixes #9363 | |||||
* | community/kodi: fix sound with new ffmpeg | Natanael Copa | 2018-09-06 | 2 | -2/+19 | |
| | | | | fixes #9387 | |||||
* | main/xen: backport various security fixes | Natanael Copa | 2018-09-06 | 8 | -761/+8564 | |
| | | | | fixes #9295 | |||||
* | community/docker: upgrade to 18.06.1, added openrc sub-package | Bernhard J. M. Gruen | 2018-09-05 | 1 | -13/+14 | |
| | | | | | | | | | | | | This change to APKBUILD for runc also fixes a warning that gets logged every 30 seconds while running dockerd: failed to retrieve docker-runc version: unknown output format: runc version spec: 1.0.0\n Reason: the way it was built before was partially wrong backported as requested: https://github.com/alpinelinux/aports/pull/5094#issuecomment-418086544 (cherry picked from commit 3b19bc6ba8109fc1fb681c265c51415bba6b4ee6) | |||||
* | main/pingu: create piddir on service start | Natanael Copa | 2018-09-04 | 2 | -6/+3 | |
| | | | | | | Create the directory for the pidfile in openrc init.d script. fixes #9369 | |||||
* | community/git-lfs: fix post-install, don't install lfs in local repo | Jakub Jirutka | 2018-09-04 | 2 | -2/+2 | |
| | | | | As suggested by Kapczuk Piotr. | |||||
* | main/grub: fix install on xfs | Natanael Copa | 2018-09-04 | 2 | -2/+64 | |
| | | | | fixes #9375 | |||||
* | community/nextcloud: upgrade to 13.0.6 | Leonardo Arena | 2018-09-04 | 1 | -2/+2 | |
| | ||||||
* | main/dovecot: upgrade to 2.3.2.1 | Natanael Copa | 2018-09-03 | 2 | -287/+5 | |
| | | | | fixes #9363 | |||||
* | main/ffmpeg: trigger rebuild | Natanael Copa | 2018-09-03 | 1 | -1/+1 | |
| | | | | | | | | armhf builder unintentionally built ffmpeg against edge version of libx265 due to misconfiguration of builder. To fix this we bump pkgerl to trigger a rebuild. fixes #9371 | |||||
* | community/zabbix: upgrade to 3.4.13 | Leonardo Arena | 2018-09-03 | 1 | -2/+2 | |
| | ||||||
* | community/ffmpeg: security upgrade to 3.4.4 | Natanael Copa | 2018-08-28 | 1 | -3/+13 | |
| | | | | | fixes #9116 fixes #9354 | |||||
* | main/postgrey: fix depends and add test | Natanael Copa | 2018-08-27 | 1 | -2/+10 | |
| | | | | | | fixes #9341 (cherry picked from commit c882e5da284007861f4192f7a5c7dfc97c030448) | |||||
* | main/libetpan: fix user cert | Natanael Copa | 2018-08-27 | 4 | -68/+33 | |
| | | | | | | | | fixes #9340 upstream report: https://github.com/dinhviethoa/libetpan/issues/288 (cherry picked from commit 173054f4f0fbc6d12b46bca5d476f76bf0a5d85f) | |||||
* | community/firefox-esr: upgrade to 52.9.0 | Natanael Copa | 2018-08-27 | 1 | -2/+2 | |
| | | | | | | fixes #9337 (cherry picked from commit acbd6624994984fe4b444cc793d6ea9b72845017) | |||||
* | main/python3: add secfixes comment | Natanael Copa | 2018-08-23 | 1 | -0/+5 | |
| | ||||||
* | main/python3: security upgrade to 3.6.6 (CVE-2018-1060,CVE-2018-1061) | Natanael Copa | 2018-08-23 | 4 | -264/+4 | |
| | ||||||
* | community/zutils: security fix (CVE-2018-1000637) | Natanael Copa | 2018-08-23 | 2 | -2/+22 | |
| | | | | fixes #9333 | |||||
* | main/libmspack: security upgrade to 0.7.1alpha | Natanael Copa | 2018-08-22 | 3 | -113/+12 | |
| | | | | fixes #9226 | |||||
* | main/amavisd-new: fix dependency for inet6 | Natanael Copa | 2018-08-22 | 1 | -1/+2 | |
| | | | | fixes #9323 | |||||
* | main/perl-io-socket-inet6: move from community due to amavisd-new | Natanael Copa | 2018-08-22 | 1 | -0/+0 | |
| | | | | needed by amavisd-new | |||||
* | main/myrepos: add secfixes comment | Natanael Copa | 2018-08-22 | 1 | -0/+4 | |
| | ||||||
* | main/myrepos: upgrade to 1.20180726 | Fabian Affolter | 2018-08-22 | 1 | -2/+2 | |
| | | | | | | fixes #9200 (cherry picked from commit 593b926a0233cbb19a47882bd2c22346cb7a5530) | |||||
* | community/php7-event: new package backport | Andy Postnikov | 2018-08-22 | 1 | -0/+40 | |
| | | | | fixes #9205 | |||||
* | main/openssh: backport security fix (CVE-2018-15473) | Natanael Copa | 2018-08-22 | 2 | -4/+154 | |
| | | | | fixes #9318 | |||||
* | community/mongodb: upgrade to 3.6.7 | Natanael Copa | 2018-08-22 | 2 | -26/+2 | |
| | | | | | | | MongoDB server version > 3.6.4 breaks replica set compatibility with 3.4 Fixed in version 3.6.7 https://jira.mongodb.org/browse/SERVER-35795 | |||||
* | main/unzip: fix various CVEs | Natanael Copa | 2018-08-22 | 8 | -2/+399 | |
| | | | | | | | | | | | | - CVE-2014-8139 - CVE-2014-8140 - CVE-2014-8141 - CVE-2014-9636 - CVE-2014-9913 - CVE-2016-9844 - CVE-2018-1000035 fixes #9287 | |||||
* | main/samba: security upgrade to 4.8.4 | Leonardo Arena | 2018-08-22 | 1 | -3/+9 | |
| | | | | | | CVE-2018-10858, CVE-2018-10918, CVE-2018-10919, CVE-2018-1139, CVE-2018-1140 Fixes #9250 | |||||
* | main/ldb: security upgrade to 1.3.5 (CVE-2018-1140) | Leonardo Arena | 2018-08-22 | 3 | -29/+387 | |
| | | | | Fixes #9256 | |||||
* | main/krb5: security upgrade to 1.15.3 ↵ | Natanael Copa | 2018-08-21 | 1 | -3/+9 | |
| | | | | | | (CVE-2017-15088,CVE-2018-5709,CVE-2018-5710) fixes #9301 | |||||
* | main/wpa_supplicant: bump pkgrel | Natanael Copa | 2018-08-21 | 1 | -1/+1 | |
| | ||||||
* | main/wpa_supplicant: security fix (CVE-2018-14526) | Natanael Copa | 2018-08-21 | 2 | -0/+48 | |
| | | | | fixes #9220 | |||||
* | main/ncurses: upgrade to 6.1_p20180818 | Natanael Copa | 2018-08-21 | 1 | -5/+7 | |
| | | | | fixes #9282 | |||||
* | main/apk-tools: backport fix for --no-network | Natanael Copa | 2018-08-21 | 2 | -3/+35 | |
| | | | | | prevent update repository index when --no-network is specified. fixes #9126 | |||||
* | main/apache2: security upgrade to 2.4.34 | Andy Postnikov | 2018-08-20 | 2 | -23/+27 | |
| | | | | fixes #9264 | |||||
* | community/php5: add missing secfixes | Andy Postnikov | 2018-08-17 | 1 | -0/+3 | |
| | ||||||
* | community/php7: add missing secfixes | Andy Postnikov | 2018-08-17 | 1 | -0/+7 | |
| | ||||||
* | main/apk-tools: don't update index on delete | Natanael Copa | 2018-08-17 | 2 | -3/+78 | |
| | | | | | | | | backport from upstream fixes #9063 (cherry picked from commit 09b110fc99a36f12c0b49e6029a231a231ce920d) | |||||
* | main/apk-tools: fix `apk list -i` segfault | Sören Tempel | 2018-08-17 | 2 | -3/+50 | |
| | | | | (cherry picked from commit 4dccdfb8689395565f47c661b1b1acea485f8530) | |||||
* | main/nodejs: security upgrade to 8.11.4 | Tim Brust | 2018-08-16 | 1 | -3/+5 | |
| | ||||||
* | main/gnupg1: security upgrade to 1.4.23 (CVE-2017-7526) | tcely | 2018-08-16 | 2 | -47/+6 | |
| | | | | (cherry picked from commit 6895452f9306041d563023e9fae6b77ac6c27dae) | |||||
* | main/python2: split out wininst*.exe | Natanael Copa | 2018-08-16 | 1 | -2/+10 | |
| | | | | | | | | | | | The wininst is only needed for creating binary distribution for windows and is rarely needed, if ever. The precompiled .exe files contains statically linked version of zlib 1.2.8 which is vulnerable. Remove them from main package and save a couple of MB, like we did with python3 (commit c3f535e2460f82e36facf515d906accf0a0a2f7b). (cherry picked from commit 9d42714569a43a815f04bddbfc4c5526a8bbac9a) | |||||
* | main/clamav: upgrade to 0.100.1 (CVE-2017-16932,CVE-2018-0360,CVE-2018-0361) | Carlo Landmeter | 2018-08-13 | 1 | -3/+7 | |
| | | | | fixes #9168 | |||||
* | community/mbedtls: security upgrade to 2.7.5 (CVE-2018-0497,CVE-2018-0498) | Natanael Copa | 2018-08-13 | 3 | -41/+5 | |
| | | | | fixes #9239 |