aboutsummaryrefslogtreecommitdiffstats
path: root/main
Commit message (Collapse)AuthorAgeFilesLines
...
* main/procmail: security fix (CVE-2014-3618)Natanael Copa2014-09-102-3/+28
| | | | | ref #3361 fixes #3364
* main/lsyncd: fix lpostcmdLeonardo Arena2014-09-092-1/+49
| | | | (cherry picked from commit a5b8e233b6a0c7de7ab544e741192422b46816bb)
* main/ltb-project-ssp: rewrite prepare() for patchingLeonardo Arena2014-09-051-2/+6
|
* main/mqtt-exec: allow to specify more command options into init.dLeonardo Arena2014-09-052-5/+5
| | | | | | | (cherry picked from commit a64488c597a09e86bdecfe83dbb1e9089f46ef3c) Conflicts: main/mqtt-exec/APKBUILD
* main/freeradius: fix segfault in rlm_unixNatanael Copa2014-09-052-1/+293
| | | | | | | | | | | | | | | | | | rlm_unix can segfault if you require group name lookup (eg user needs to be in a given system group) and 2 users are authenticating at the same time. Upstream has choosed to fix it differently and has added backport for v3.0.x, but has not cherry-picked it for v2.x.x branch. We use my proposed fix for v2.x. upstream bug is https://github.com/FreeRADIUS/freeradius-server/issues/767 (cherry picked from commit cd34a7d66f7efb60335bca5e0e87c0571a4d7a48) Conflicts: main/freeradius/APKBUILD
* main/ffmpeg: security fix (CVE-2014-5271,CVE-2014-5272)Natanael Copa2014-09-033-5/+101
| | | | fixes #3317
* main/phpmyadmin: security upgrade to 4.0.10.2 (CVE-2014-5273)Natanael Copa2014-09-031-4/+4
| | | | fixes #3337
* main/lua5.2: security upgrade to 5.2.3 (CVE-2014-5461)Natanael Copa2014-09-031-5/+5
| | | | fixes #3334
* main/django: upgrade to 1.5.10 for security bugfixEivind Uggedal2014-09-031-4/+4
|
* main/php: security upgrade to 5.5.16 ↵Natanael Copa2014-09-011-4/+4
| | | | | | (CVE-2014-3538,CVE-2014-3587,CVE-2014-2497,CVE-2014-5120,CVE-2014-3597) fixes #3342
* main/snort: enable non ether decoders for PPPoENatanael Copa2014-09-011-1/+2
| | | | | | fixes #3350 (cherry picked from commit 80b921fff9af9c990685e9a651bf476d3d772497)
* main/mqtt-exec: upgrade to 0.3Leonardo Arena2014-08-281-4/+4
|
* main/screen: remove suid bitNatanael Copa2014-08-271-8/+25
| | | | fixes #3319
* main/xen: upgrade to 4.3.2 and fix XSA-97 (CVE-2014-5146,CVE-2014-5149)Natanael Copa2014-08-254-173/+494
| | | | fixes #3293
* main/libgcrypt: security upgrade to 1.5.4 (CVE-2014-5270)Natanael Copa2014-08-211-4/+4
| | | | fixes #3289
* main/cacti: fix from upstream for incomplete and incorrect input parsingNatanael Copa2014-08-212-4/+36
| | | | | | | ref #3295 fixes #3298 http://svn.cacti.net/viewvc?view=rev&revision=7454
* main/cacti: security fix for CVE-2014-5025,CVE-2014-5026Natanael Copa2014-08-212-4/+161
| | | | fixes #3258
* main/py-django: security upgrade to 1.5.9 (multiple CVE)Eivind Uggedal2014-08-201-4/+4
|
* main/asterisk: upgrade to 11.12.0Timo Teräs2014-08-201-7/+4
|
* main/acf-provisioning: upgrade to 0.4.3Ted Trask2014-08-181-4/+4
|
* main/trac: fix install of filesNatanael Copa2014-08-181-2/+2
| | | | | | We need install files from package() (cherry picked from commit 7c1831bb34eba36856d3d5cdf3c6a7f687d7906e)
* main/freeradius3: fix openssl version checkLeonardo Arena2014-08-133-53/+16
| | | | | | | (cherry picked from commit a6fa7bfe705ba89b1b2e57f5d1fd358a53934050) Conflicts: main/freeradius3/APKBUILD
* main/freeradius3: install dictionaries in subpkg-libLeonardo Arena2014-08-131-2/+3
| | | | (cherry picked from commit 65dc2a5271041c361305be0cc3388d7334aa3ced)
* main/phpldapadmin: force crypt to use SSHA512 algorithmLeonardo Arena2014-08-122-4/+35
| | | | (cherry picked from commit bc12563552b622d46252ff825c96e271da232595)
* main/ltb-project-ssp: add option for algorythm selection for crypt hashesLeonardo Arena2014-08-122-4/+35
| | | | | http://tools.lsc-project.org/issues/719 (cherry picked from commit de7f8c196a9197877bde53f5cab4580765a32e8c)
* main/xtables-addons-grsec: rebuild against kernel 3.10.52-r0Natanael Copa2014-08-121-1/+1
|
* main/open-vm-tools-grsec: rebuild against kernel 3.10.52-r0Natanael Copa2014-08-121-1/+1
|
* main/flashcache-grsec: rebuild against kernel 3.10.52-r0Natanael Copa2014-08-121-1/+1
|
* main/dahdi-linux-grsec: rebuild against kernel 3.10.52-r0Natanael Copa2014-08-121-1/+1
|
* main/linux-grsec: upgrade to 3.10.52Natanael Copa2014-08-124-297/+321
|
* main/openipmi: backportedNatanael Copa2014-08-073-0/+107
|
* main/openssl: security ugprade to 1.0.1i (multiple CVE)Timo Teräs2014-08-072-686/+16
| | | | | | | | | | | | | | | | | | | CVE-2014-3508 Information leak in pretty printing functions CVE-2014-5139 Crash with SRP ciphersuite in Server Hello message CVE-2014-3509 Race condition in ssl_parse_serverhello_tlsext CVE-2014-3505 Double Free when processing DTLS packets CVE-2014-3506 DTLS memory exhaustion CVE-2014-3507 DTLS memory leak from zero-length fragments CVE-2014-3510 OpenSSL DTLS anonymous EC(DH) denial of service CVE-2014-3511 OpenSSL TLS protocol downgrade attack CVE-2014-3512 SRP buffer overrun (cherry picked from commit 9b2d3aa0289fc6e6f5fddca823337631d49cadf5) (cherry picked from commit d4f5d980c75fd5b13a60637aafa549f1407a85c8) (cherry picked from commit 7c34cd9c948a7bd20f05a136eaa9bec33c479849) Conflicts: main/openssl/APKBUILD
* main/cups: fix previous cups commitNatanael Copa2014-07-301-16/+0
|
* main/fprobe-ulogd: fix setre[ug]id usageTimo Teräs2014-07-302-2/+59
| | | | add uclibc specific hack
* main/cups: security upgrade to 1.7.4 (CVE-2014-5029/5030/5031)Natanael Copa2014-07-293-51/+31
| | | | fixes #3253
* main/ansible: security upgrade to 1.6.7 (CVE-2014-4966,CVE-2014-4967)Natanael Copa2014-07-291-4/+4
| | | | fixes #3248
* main/quagga: remove -dbg subpkgTimo Teräs2014-07-291-1/+1
| | | | not supported on 2.7-stable
* main/quagga: upgrade to 0.99.23 (from edge)Timo Teräs2014-07-2922-6622/+635
| | | | fixes #3246
* main/aaudit: fix commit without notification, add some error messagesTimo Teräs2014-07-253-10/+12
| | | | (cherry picked from commit d21e2c60f86b88b519534e4a7bbbe6502db5e279)
* main/lzo: security upgrade to 2.08 (CVE-2014-4607)Natanael Copa2014-07-251-4/+5
| | | | fixes #3111
* main/rt4: upgrade to 4.0.21Leonardo Arena2014-07-231-4/+5
|
* main/gnupg: security upgrade to 2.0.24 (CVE-2014-4617)Natanael Copa2014-07-221-4/+4
| | | | fixes #3095
* main/phpmyadmin: security upgrade to 4.0.10.1 (CVE-2014-4986,CVE-2014-4955)Natanael Copa2014-07-221-5/+5
| | | | fixes #3200
* main/krb5: security fix for CVE-2014-4341,CVE-2014-4342Natanael Copa2014-07-222-1/+174
| | | | fixes #3211
* main/libxml2: rebuild due to iconv dependencyNatanael Copa2014-07-221-1/+1
| | | | | Seems like libxml2 was built with iconv support on x86_64. rebuild to get reid of that.
* main/apache2: security upgrade to 2.4.10 ↵Natanael Copa2014-07-221-5/+5
| | | | | | (CVE-2014-0117,CVE-2014-0118,CVE-2014-0226,CVE-2014-0231) fixes #3206
* main/file: security upgrade to 5.19 (CVE-2014-3538)Natanael Copa2014-07-211-4/+4
| | | | fixes #3226
* main/clamav: upgrade to 0.98.4Natanael Copa2014-07-211-6/+6
| | | | fixes #3197
* main/mysql: security upgrade to 5.5.38 (CVE-2014-4258,CVE-2014-4260)Natanael Copa2014-07-211-4/+4
| | | | fixes #3187
* main/perl-email-address: security upgrade to 1.905 (CVE-2014-0477,CVE-2014-4720)Natanael Copa2014-07-211-4/+4
| | | | fixes #3193