Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | main/procmail: security fix (CVE-2014-3618) | Natanael Copa | 2014-09-10 | 2 | -3/+28 | |
| | | | | | ref #3361 fixes #3364 | |||||
* | main/lsyncd: fix lpostcmd | Leonardo Arena | 2014-09-09 | 2 | -1/+49 | |
| | | | | (cherry picked from commit a5b8e233b6a0c7de7ab544e741192422b46816bb) | |||||
* | main/ltb-project-ssp: rewrite prepare() for patching | Leonardo Arena | 2014-09-05 | 1 | -2/+6 | |
| | ||||||
* | main/mqtt-exec: allow to specify more command options into init.d | Leonardo Arena | 2014-09-05 | 2 | -5/+5 | |
| | | | | | | | (cherry picked from commit a64488c597a09e86bdecfe83dbb1e9089f46ef3c) Conflicts: main/mqtt-exec/APKBUILD | |||||
* | main/freeradius: fix segfault in rlm_unix | Natanael Copa | 2014-09-05 | 2 | -1/+293 | |
| | | | | | | | | | | | | | | | | | | rlm_unix can segfault if you require group name lookup (eg user needs to be in a given system group) and 2 users are authenticating at the same time. Upstream has choosed to fix it differently and has added backport for v3.0.x, but has not cherry-picked it for v2.x.x branch. We use my proposed fix for v2.x. upstream bug is https://github.com/FreeRADIUS/freeradius-server/issues/767 (cherry picked from commit cd34a7d66f7efb60335bca5e0e87c0571a4d7a48) Conflicts: main/freeradius/APKBUILD | |||||
* | main/ffmpeg: security fix (CVE-2014-5271,CVE-2014-5272) | Natanael Copa | 2014-09-03 | 3 | -5/+101 | |
| | | | | fixes #3317 | |||||
* | main/phpmyadmin: security upgrade to 4.0.10.2 (CVE-2014-5273) | Natanael Copa | 2014-09-03 | 1 | -4/+4 | |
| | | | | fixes #3337 | |||||
* | main/lua5.2: security upgrade to 5.2.3 (CVE-2014-5461) | Natanael Copa | 2014-09-03 | 1 | -5/+5 | |
| | | | | fixes #3334 | |||||
* | main/django: upgrade to 1.5.10 for security bugfix | Eivind Uggedal | 2014-09-03 | 1 | -4/+4 | |
| | ||||||
* | main/php: security upgrade to 5.5.16 ↵ | Natanael Copa | 2014-09-01 | 1 | -4/+4 | |
| | | | | | | (CVE-2014-3538,CVE-2014-3587,CVE-2014-2497,CVE-2014-5120,CVE-2014-3597) fixes #3342 | |||||
* | main/snort: enable non ether decoders for PPPoE | Natanael Copa | 2014-09-01 | 1 | -1/+2 | |
| | | | | | | fixes #3350 (cherry picked from commit 80b921fff9af9c990685e9a651bf476d3d772497) | |||||
* | main/mqtt-exec: upgrade to 0.3 | Leonardo Arena | 2014-08-28 | 1 | -4/+4 | |
| | ||||||
* | main/screen: remove suid bit | Natanael Copa | 2014-08-27 | 1 | -8/+25 | |
| | | | | fixes #3319 | |||||
* | main/xen: upgrade to 4.3.2 and fix XSA-97 (CVE-2014-5146,CVE-2014-5149) | Natanael Copa | 2014-08-25 | 4 | -173/+494 | |
| | | | | fixes #3293 | |||||
* | main/libgcrypt: security upgrade to 1.5.4 (CVE-2014-5270) | Natanael Copa | 2014-08-21 | 1 | -4/+4 | |
| | | | | fixes #3289 | |||||
* | main/cacti: fix from upstream for incomplete and incorrect input parsing | Natanael Copa | 2014-08-21 | 2 | -4/+36 | |
| | | | | | | | ref #3295 fixes #3298 http://svn.cacti.net/viewvc?view=rev&revision=7454 | |||||
* | main/cacti: security fix for CVE-2014-5025,CVE-2014-5026 | Natanael Copa | 2014-08-21 | 2 | -4/+161 | |
| | | | | fixes #3258 | |||||
* | main/py-django: security upgrade to 1.5.9 (multiple CVE) | Eivind Uggedal | 2014-08-20 | 1 | -4/+4 | |
| | ||||||
* | main/asterisk: upgrade to 11.12.0 | Timo Teräs | 2014-08-20 | 1 | -7/+4 | |
| | ||||||
* | main/acf-provisioning: upgrade to 0.4.3 | Ted Trask | 2014-08-18 | 1 | -4/+4 | |
| | ||||||
* | main/trac: fix install of files | Natanael Copa | 2014-08-18 | 1 | -2/+2 | |
| | | | | | | We need install files from package() (cherry picked from commit 7c1831bb34eba36856d3d5cdf3c6a7f687d7906e) | |||||
* | main/freeradius3: fix openssl version check | Leonardo Arena | 2014-08-13 | 3 | -53/+16 | |
| | | | | | | | (cherry picked from commit a6fa7bfe705ba89b1b2e57f5d1fd358a53934050) Conflicts: main/freeradius3/APKBUILD | |||||
* | main/freeradius3: install dictionaries in subpkg-lib | Leonardo Arena | 2014-08-13 | 1 | -2/+3 | |
| | | | | (cherry picked from commit 65dc2a5271041c361305be0cc3388d7334aa3ced) | |||||
* | main/phpldapadmin: force crypt to use SSHA512 algorithm | Leonardo Arena | 2014-08-12 | 2 | -4/+35 | |
| | | | | (cherry picked from commit bc12563552b622d46252ff825c96e271da232595) | |||||
* | main/ltb-project-ssp: add option for algorythm selection for crypt hashes | Leonardo Arena | 2014-08-12 | 2 | -4/+35 | |
| | | | | | http://tools.lsc-project.org/issues/719 (cherry picked from commit de7f8c196a9197877bde53f5cab4580765a32e8c) | |||||
* | main/xtables-addons-grsec: rebuild against kernel 3.10.52-r0 | Natanael Copa | 2014-08-12 | 1 | -1/+1 | |
| | ||||||
* | main/open-vm-tools-grsec: rebuild against kernel 3.10.52-r0 | Natanael Copa | 2014-08-12 | 1 | -1/+1 | |
| | ||||||
* | main/flashcache-grsec: rebuild against kernel 3.10.52-r0 | Natanael Copa | 2014-08-12 | 1 | -1/+1 | |
| | ||||||
* | main/dahdi-linux-grsec: rebuild against kernel 3.10.52-r0 | Natanael Copa | 2014-08-12 | 1 | -1/+1 | |
| | ||||||
* | main/linux-grsec: upgrade to 3.10.52 | Natanael Copa | 2014-08-12 | 4 | -297/+321 | |
| | ||||||
* | main/openipmi: backported | Natanael Copa | 2014-08-07 | 3 | -0/+107 | |
| | ||||||
* | main/openssl: security ugprade to 1.0.1i (multiple CVE) | Timo Teräs | 2014-08-07 | 2 | -686/+16 | |
| | | | | | | | | | | | | | | | | | | | CVE-2014-3508 Information leak in pretty printing functions CVE-2014-5139 Crash with SRP ciphersuite in Server Hello message CVE-2014-3509 Race condition in ssl_parse_serverhello_tlsext CVE-2014-3505 Double Free when processing DTLS packets CVE-2014-3506 DTLS memory exhaustion CVE-2014-3507 DTLS memory leak from zero-length fragments CVE-2014-3510 OpenSSL DTLS anonymous EC(DH) denial of service CVE-2014-3511 OpenSSL TLS protocol downgrade attack CVE-2014-3512 SRP buffer overrun (cherry picked from commit 9b2d3aa0289fc6e6f5fddca823337631d49cadf5) (cherry picked from commit d4f5d980c75fd5b13a60637aafa549f1407a85c8) (cherry picked from commit 7c34cd9c948a7bd20f05a136eaa9bec33c479849) Conflicts: main/openssl/APKBUILD | |||||
* | main/cups: fix previous cups commit | Natanael Copa | 2014-07-30 | 1 | -16/+0 | |
| | ||||||
* | main/fprobe-ulogd: fix setre[ug]id usage | Timo Teräs | 2014-07-30 | 2 | -2/+59 | |
| | | | | add uclibc specific hack | |||||
* | main/cups: security upgrade to 1.7.4 (CVE-2014-5029/5030/5031) | Natanael Copa | 2014-07-29 | 3 | -51/+31 | |
| | | | | fixes #3253 | |||||
* | main/ansible: security upgrade to 1.6.7 (CVE-2014-4966,CVE-2014-4967) | Natanael Copa | 2014-07-29 | 1 | -4/+4 | |
| | | | | fixes #3248 | |||||
* | main/quagga: remove -dbg subpkg | Timo Teräs | 2014-07-29 | 1 | -1/+1 | |
| | | | | not supported on 2.7-stable | |||||
* | main/quagga: upgrade to 0.99.23 (from edge) | Timo Teräs | 2014-07-29 | 22 | -6622/+635 | |
| | | | | fixes #3246 | |||||
* | main/aaudit: fix commit without notification, add some error messages | Timo Teräs | 2014-07-25 | 3 | -10/+12 | |
| | | | | (cherry picked from commit d21e2c60f86b88b519534e4a7bbbe6502db5e279) | |||||
* | main/lzo: security upgrade to 2.08 (CVE-2014-4607) | Natanael Copa | 2014-07-25 | 1 | -4/+5 | |
| | | | | fixes #3111 | |||||
* | main/rt4: upgrade to 4.0.21 | Leonardo Arena | 2014-07-23 | 1 | -4/+5 | |
| | ||||||
* | main/gnupg: security upgrade to 2.0.24 (CVE-2014-4617) | Natanael Copa | 2014-07-22 | 1 | -4/+4 | |
| | | | | fixes #3095 | |||||
* | main/phpmyadmin: security upgrade to 4.0.10.1 (CVE-2014-4986,CVE-2014-4955) | Natanael Copa | 2014-07-22 | 1 | -5/+5 | |
| | | | | fixes #3200 | |||||
* | main/krb5: security fix for CVE-2014-4341,CVE-2014-4342 | Natanael Copa | 2014-07-22 | 2 | -1/+174 | |
| | | | | fixes #3211 | |||||
* | main/libxml2: rebuild due to iconv dependency | Natanael Copa | 2014-07-22 | 1 | -1/+1 | |
| | | | | | Seems like libxml2 was built with iconv support on x86_64. rebuild to get reid of that. | |||||
* | main/apache2: security upgrade to 2.4.10 ↵ | Natanael Copa | 2014-07-22 | 1 | -5/+5 | |
| | | | | | | (CVE-2014-0117,CVE-2014-0118,CVE-2014-0226,CVE-2014-0231) fixes #3206 | |||||
* | main/file: security upgrade to 5.19 (CVE-2014-3538) | Natanael Copa | 2014-07-21 | 1 | -4/+4 | |
| | | | | fixes #3226 | |||||
* | main/clamav: upgrade to 0.98.4 | Natanael Copa | 2014-07-21 | 1 | -6/+6 | |
| | | | | fixes #3197 | |||||
* | main/mysql: security upgrade to 5.5.38 (CVE-2014-4258,CVE-2014-4260) | Natanael Copa | 2014-07-21 | 1 | -4/+4 | |
| | | | | fixes #3187 | |||||
* | main/perl-email-address: security upgrade to 1.905 (CVE-2014-0477,CVE-2014-4720) | Natanael Copa | 2014-07-21 | 1 | -4/+4 | |
| | | | | fixes #3193 |