aboutsummaryrefslogtreecommitdiffstats
path: root/main
Commit message (Collapse)AuthorAgeFilesLines
...
* main/wireshark: security upgrade to 1.12.13. Fixes #6053Leonardo Arena2016-09-121-5/+15
| | | | CVE-2016-6505, CVE-2016-6506, CVE-2016-6508, CVE-2016-6509, CVE-2016-6510, CVE-2016-6511
* main/openssl: fix for CVE-2016-2180Daniel Sabogal2016-09-092-4/+46
| | | | | | fixes #6118 (cherry picked from commit ecfc04f3961ec4ffa2c972bd72253ba1a03a3c1e)
* main/php5: Upgrade to 5.6.25Andy Postnikov2016-08-231-4/+4
|
* main/postgresql: security upgrade to 9.4.9 (CVE-2016-5423,CVE-2016-5424)Natanael Copa2016-08-171-4/+4
| | | | fixes #6047
* main/openssh: security fix for CVE-2016-6515Natanael Copa2016-08-172-1/+53
| | | | fixes #6042
* main/fontconfig: security fix (CVE-2016-5384). Fixes #6026Leonardo Arena2016-08-152-5/+175
| | | | (cherry picked from commit 99e120348e7b8d8f1146915eb4df9a17691514fe)
* main/xen: security upgrade to 4.5.3. Fixes #6019Leonardo Arena2016-08-1223-1651/+334
| | | | (CVE-2016-5242, CVE-2016-6258, CVE-2016-6259, CVE-2016-5403)
* main/curl: security fixes (CVE-2016-5419, CVE-2016-5420, CVE-2016-5421)Leonardo Arena2016-08-124-5/+174
| | | | | | Fixes #6006 (cherry picked from commit 773b3cce8cf0ef9f65aa00ac6985aaba3f582b2c)
* main/dropbear: security upgrade to 2016.74. Fixes #5997Leonardo Arena2016-08-121-7/+15
|
* main/owncloud: upgrade to 8.1.9Leonardo Arena2016-08-111-11/+11
|
* main/owncloud: install htaccessLeonardo Arena2016-08-111-1/+2
|
* main/libarchive: security fixes. Fixes #5973Leonardo Arena2016-08-085-4/+203
| | | | | | | | | CVE-2016-4302 CVE-2016-4809 CVE-2016-5844 CVE-2016-6250 (cherry picked from commit 9d0f5e1e02079c44a9c58169c8b78c743edaf7b8)
* main/libidn: security upgrade to 1.33. Fixes #5968Leonardo Arena2016-08-051-2/+18
| | | | | | (CVE-2016-6263, CVE-2015-8948, CVE-2016-6262, CVE-2016-6261) (cherry picked from commit 87698baa9ec19d0554e5233954b6f266efe8b5cd)
* main/cacti: security fix (CVE-2016-3172). Fixes #5942Leonardo Arena2016-08-052-4/+24
| | | | (cherry picked from commit a32d5ff12f834f60c89513108384ddd3526d086b)
* main/openssh: security fix (CVE-2016-6210). Fixes #5928Leonardo Arena2016-08-053-2/+233
| | | | (cherry picked from commit 1a6c29da7c4a7e3d05009f4ea2b940878b57ac81)
* main/libvirt: security fix (CVE-2016-5008). Fixes #5877Leonardo Arena2016-08-012-4/+80
| | | | (cherry picked from commit fe21e87ffd9382eed66543f8c2d0f740878849d7)
* main/squid: security upgrade to 3.5.18. Fixes #5889Leonardo Arena2016-07-291-4/+4
| | | | | | | | CVE-2016-4553: Cache poisoning issue in HTTP Request handling CVE-2016-4554: Header smuggling issue in HTTP Request processing CVE-2016-4555, CVE-2016-4556: Multiple Denial of Service issues in ESI Response processing (cherry picked from commit a414d1483216a531e8a7271cd858b3500aad9625)
* main/php5: Upgrade to 5.6.24Andy Postnikov2016-07-271-4/+4
| | | | fixes #5958
* main/bind: security upgrade to 9.10.4_p2 (CVE-2016-2775)Natanael Copa2016-07-251-4/+4
| | | | fixes #5954
* main/apache2: security fix for CVE-2016-5387Natanael Copa2016-07-252-4/+25
| | | | fixes #5938
* main/samba: security upgrade to 4.2.14 (CVE-2016-2119)Natanael Copa2016-07-221-4/+4
| | | | fixes #5947
* main/tevent: upgrade to 0.9.28Natanael Copa2016-07-221-4/+4
|
* main/gimp: security upgrade to 2.8.18 (CVE-2016-4994)Natanael Copa2016-07-201-5/+5
| | | | fixes #5861
* main/py-django: fix download urlNatanael Copa2016-07-191-1/+1
|
* main/py-django: security upgrade to 1.8.14 (CVE-2016-6186)Natanael Copa2016-07-191-4/+4
| | | | fixes #5915
* main/acf-freeswitch-vmail: upgrade to 0.6.2Ted Trask2016-07-151-4/+4
| | | | (cherry picked from commit b117bf08c5cb8e96b78c679d10bc030321c9cbf5)
* main/mini_httpd: security upgrade to 1.23 (CVE-2015-1548)Natanael Copa2016-07-141-4/+4
| | | | fixes #5903
* main/wget: security upgrade to 1.18 (CVE-2016-4971)Bartłomiej Piotrowski2016-07-141-4/+4
| | | | fixes #5866
* main/acf-provisioning: upgrade to 0.8.13Ted Trask2016-07-081-4/+4
| | | | (cherry picked from commit 244f854f915b8251ebdb0cd797b42093a8d6824a)
* main/phpmyadmin: security upgrade to 4.4.15.7Leonardo Arena2016-07-051-4/+4
| | | | | | | | | | | | | | CVE-2016-5701 CVE-2016-5703 CVE-2016-5705 CVE-2016-5706 CVE-2016-5730 CVE-2016-5731 CVE-2016-5733 CVE-2016-5734 CVE-2016-5739 Fixes #5837
* main/tiff: remove unneeded patchesLeonardo Arena2016-07-048-1115/+0
|
* main/tiff: security fixes. Fixes #5826Leonardo Arena2016-07-044-4/+349
| | | | | | | | | | | CVE-2015-8665 CVE-2015-8683 CVE-2015-8781 CVE-2015-8782 CVE-2015-8784 (cherry picked from commit 7f2845dc97725af0dc4230433d9cb42a76c552db) (cherry picked from commit df6ff3e3449ac74fc39165229f9764d968aa58f4)
* main/tiff: upgrade to 4.0.6Leonardo Arena2016-07-041-37/+5
|
* main/jansson: security fix for CVE-2016-4425Natanael Copa2016-07-042-6/+148
| | | | | | fixes #5793 (cherry picked from commit 36ab20a1ac9047916d193fc1aae1cf8be6b0ee23)
* main/libksba: security upgrade to 1.3.4. Fixes #5782Leonardo Arena2016-07-041-4/+4
|
* main/python: security upgrade to 2.7.12Natanael Copa2016-06-291-5/+5
| | | | | | | | CVE-2016-0772: smtplib StartTLS stripping attack. CVE-2016-5636: Heap overflow in zipimporter module . CVE-2016-5699: HTTP header injection in urrlib2/urllib/httplib/http.client. fixes #5802
* main/giflib: security fix (CVE-2015-7555). Fixes #5660Leonardo Arena2016-06-242-1/+31
| | | | (cherry picked from commit e923ae18b6f5631e1c3a468d33471a559aa06ac4)
* main/xen: security fixes. Fixes #5777Leonardo Arena2016-06-2434-1/+2590
| | | | | | | | | | | CVE-2016-4962, XSA-175: Unsanitised guest input in libxl device handling code http://xenbits.xen.org/xsa/advisory-175.html CVE-2016-4480, XSA-176: x86 software guest page walk PS bit handling flaw http://xenbits.xen.org/xsa/advisory-176.html CVE-2016-4963, XSA-178: Unsanitised driver domain input in libxl device handling http://xenbits.xen.org/xsa/advisory-178.html
* main/libxslt: security upgrade to 1.1.29 (CVE-2015-7995, CVE-2016-1683, ↵Leonardo Arena2016-06-241-6/+6
| | | | CVE-2016-1684). Fixes #5755
* main/vlc: security upgrade to 2.2.4 (CVE-2016-5108). Fixes #5717Leonardo Arena2016-06-231-9/+5
|
* main/nginx: security fix (CVE-2016-4450). Fixes #5677Leonardo Arena2016-06-232-4/+23
| | | | (cherry picked from commit 6123c2137e443bed33d0c3aa9f520199843021e3)
* main/librsvg: security upgrade to 2.40.12 (CVE-2015-7558). Fixes #5668Leonardo Arena2016-06-231-5/+5
|
* main/openssl: security fix for CVE-2016-2177, CVE-2016-2178Natanael Copa2016-06-223-4/+395
|
* main/hostapd: security fix for CVE-2016-4476Natanael Copa2016-06-222-1/+87
| | | | fixes #5647
* main/curl: security upgrade to 7.49.1 (CVE-2016-3739)Natanael Copa2016-06-221-4/+4
| | | | fixes #5652
* main/wpa_supplicant: security fix for CVE-2016-4476, CVE-2016-4477Natanael Copa2016-06-216-1/+348
| | | | | | fixes #5640 (cherry picked from commit a2dcdd15792e8717e6b73abca56c08bd165e93ab)
* main/jq: security fix (CVE-2015-8863). Fixes #5634Leonardo Arena2016-06-212-5/+56
| | | | (cherry picked from commit f4aef6abc16e3493bb74daee8195fd163a17e518)
* main/wireshark: security upgrade to 1.12.12. Fixes #5625Leonardo Arena2016-06-211-4/+4
| | | | | | | | | | CVE-2016-4006 CVE-2016-4078 CVE-2016-4079 CVE-2016-4080 CVE-2016-4081 CVE-2016-4082 CVE-2016-4085
* main/gd: security fix (CVE-2016-3074). Fixes #5611Leonardo Arena2016-06-213-5/+100
| | | | (cherry picked from commit 03a7b7c153735bbd740e554845de18f3f5e7f4f5)
* main/expat: security fix (CVE-2016-0718). Fixes #5598Leonardo Arena2016-06-212-5/+766
| | | | (cherry picked from commit f178e940198d9adce71ee406dfcf6d71f2530629)