| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
| |
fixes #9314
(cherry picked from commit a062ffc9e8b823fecbae65d23dae5f9c4b72b7f9)
|
| |
|
|
|
|
| |
Fixes #9491 (https://bugs.alpinelinux.org/issues/9491)
|
|
|
|
| |
As suggested by Kapczuk Piotr.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
fixes #9038
|
| |
|
|
|
|
| |
requested by andypost
|
| |
|
|
|
|
| |
fixes #9036
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This commit updates $license variable in all APKBUILDs to comply with
short names specified by SPDX version 3.0 [1] where possible. It was
done using find-and-replace method on substrings inside $license
variables.
Only license names were updated, not "expressions" specifying relation
between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or
exceptions (e.g. "X with exceptions").
Many licenses have a version or multiple variants, e.g. MPL-2.0,
BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not
contain license version or variant. Since there's no way how to infer
this information just from abuild, it were left without the variant
suffix or version, i.e. non SPDX compliant.
GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They
exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later
(formerly e.g. GPL-2.0+). We did not systematically noted distinguish
between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean
GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g.
GPL2+) were left without the variant suffix, i.e. non SPDX compliant.
Note: This commit just fixes format of the license names, no
verification has been done if the specified license information is
actually correct!
[1]: https://spdx.org/licenses/
|
| |
|
|
|
|
|
| |
fixes #3678
ref https://github.com/alpinelinux/aports/pull/3678
|
|
|
|
|
|
|
| |
CVE-2018-11356, CVE-2018-11357, CVE-2018-11358,
CVE-2018-11359, CVE-2018-11360, CVE-2018-11362
Fixes #8932
|
| |
|
| |
|
| |
|
|
|
|
| |
fixes #8854
|
|
|
|
|
|
| |
(CVE-2018-1000178,CVE-2018-1000179)
fixes #8927
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
fixes #8892
CVE-2018-5150: Memory safety bugs
CVE-2018-5154: Use-after-free with SVG animations and clip paths
CVE-2018-5155: Use-after-free with SVG animations and text paths
CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files
CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer
CVE-2018-5159: Integer overflow and out-of-bounds write in Skia
CVE-2018-5168: Lightweight themes can be installed without user interaction
CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension
CVE-2018-5183: Backport critical security fixes in Skia
|
| |
|
|
|
|
|
| |
Support for SO_ORIGINAL_DST will be silently disabled if linux-headers
are missing at build time.
|
| |
|
|
|
|
| |
CVE-2018-5712
|
|
|
|
|
|
|
|
| |
CVE-2018-9256, CVE-2018-9257, CVE-2018-9258, CVE-2018-9260,
CVE-2018-9261, CVE-2018-9262, CVE-2018-9263, CVE-2018-9264,
CVE-2018-9267, CVE-2018-10194
Fixes #8822
|
|
|
|
| |
CVE-2018-5712
|
|
|
|
| |
CVE-2018-7602 https://www.drupal.org/SA-CORE-2018-004
|
| |
|
|
|
|
| |
Problem with iconv has been fixed in upstream: https://github.com/nextcloud/server/pull/8674.
|
| |
|
| |
|
|
|
|
|
|
| |
PHP lacks some functionality when zlib extension built dynamic.
Ref #8299 (https://bugs.alpinelinux.org/issues/8299)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
fixes #8702
CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR
52.7
CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
CVE-2018-5129: Out-of-bounds write with malformed IPC messages
CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption
CVE-2018-5131: Fetch API improperly returns cached copies of
no-store/no-cache resources
CVE-2018-5144: Integer overflow during Unicode conversion
CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7
|
|
|
|
|
|
| |
Fixes CVE-2017-3738, CVE-2018-0739, CVE-2018-0733
Rebuilds packages that link openssl statically.
|
| |
|
| |
|
| |
|
|
|
|
| |
CVE-2018-7600
|
|
|
|
| |
use mariadb-dev instead of mariadb-connector-c
|
|
|
|
|
|
| |
(CVE-2018-6532,CVE-2018-6534,CVE-2018-6535)
fixes #8716
|
|
|
|
| |
Fixes segfaults & random deadlock
|
|
|
|
| |
Fixes #8712
|
|
|
|
|
|
|
|
|
|
|
| |
CVE-2018-7320, CVE-2018-7321, CVE-2018-7322, CVE-2018-7323,
CVE-2018-7324, CVE-2018-7325, CVE-2018-7326, CVE-2018-7327,
CVE-2018-7328, CVE-2018-7329, CVE-2018-7330, CVE-2018-7331,
CVE-2018-7332, CVE-2018-7333, CVE-2018-7334, CVE-2018-7335,
CVE-2018-7336, CVE-2018-7337, CVE-2018-7417, CVE-2018-7418,
CVE-2018-7419, CVE-2018-7420
Fixes #8651
|
| |
|
| |
|