aboutsummaryrefslogtreecommitdiffstats
path: root/main
Commit message (Collapse)AuthorAgeFilesLines
...
* main/vim: backport fix for CVE-2019-12735Natanael Copa2019-06-222-2/+66
| | | | fixes #10562
* main/zfs-vanilla: rebuild against kernel 4.9.182-r0Natanael Copa2019-06-181-1/+1
|
* main/spl-vanilla: rebuild against kernel 4.9.182-r0Natanael Copa2019-06-181-1/+1
|
* main/linux-vanilla: upgrade to 4.9.182Natanael Copa2019-06-187-22/+24
|
* main/dbus: upgrade to 1.10.28 (CVE-2019-12749)Natanael Copa2019-06-171-2/+6
| | | | fixes #10571
* main/glib: security fix for CVE-2019-12450Natanael Copa2019-06-172-2/+61
| | | | fixes #10578
* main/mariadb: security upgrade to 10.1.40J0WI2019-06-121-4/+7
|
* main/vim: security fix for CVE-2019-12735Kevin Daudt2019-06-052-2/+64
| | | | | | | Arbitrary code execution has been found in vim modelines. Upstream patch has been applied: https://github.com/vim/vim/commit/53575521406739cf20bbe4e384d88e7dca11f040.patch
* main/monit: upgrade to 5.25.2, security fixesLeonardo Arena2019-06-053-3/+90
| | | | | | CVE-2019-11454, CVE-2019-11455 Fixes #10494
* main/perl-email-address: security upgrade to 1.912 (CVE-2018-12558)Leonardo Arena2019-06-051-5/+6
| | | | Fixes #10435
* main/hostapd: security fix (CVE-2019-9496)Leonardo Arena2019-06-052-1/+62
| | | | Fixes #10335
* main/hostapd: security fix (CVE-2019-11555)Leonardo Arena2019-06-053-2/+97
| | | | Fixes #10412
* main/wpa_supplicant: security fix (CVE-2019-11555)Leonardo Arena2019-06-053-1/+97
| | | | Fixes #10417
* main/heimdal: security fix (CVE-2018-16860)Leonardo Arena2019-06-042-3/+154
| | | | | | Fixes #10514 Clarify license
* main/py-cryptography: upgrade to 2.1.4Leonardo Arena2019-06-031-3/+3
| | | | Required by certbot-0.19
* main/ca-certificates: upgrade to 20190108Natanael Copa2019-05-272-34/+3
| | | | fixes #9935
* main/ca-certificates: upgrade to 20180924Natanael Copa2019-05-272-3/+34
|
* main/xen: XSA-297Henrik Riomar2019-05-179-1/+1216
| | | | | | | | | CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
* main/postgresql: security upgrade to 10.8Jakub Jirutka2019-05-121-2/+5
|
* main/ruby: upgrade to 2.4.6Natanael Copa2019-05-061-2/+9
| | | | | | | | | | | - CVE-2019-8320 - CVE-2019-8321 - CVE-2019-8322 - CVE-2019-8323 - CVE-2019-8324 - CVE-2019-8325 fixes #10289
* main/lua5.3: fix linenoise patchNatanael Copa2019-05-062-9/+9
| | | | | | fixes #9644 (cherry picked from commit cde8024d0da937f5f7b0b9b329c1f27c14b00308)
* main/lua5.3: upgrade to 5.3.5 and sec fix CVE-2019-6706Natanael Copa2019-05-062-12/+34
| | | | fixes #10255
* main/libpng: upgrade to 1.6.37Leo2019-05-061-10/+14
| | | | | | | | | | - Add secfixes CVE-2019-7317 CVE-2018-14048 CVE-2018-14550 - Remove pkg-config detected depends_dev fixes #10364
* main/bind: make sure all patches are appliedNatanael Copa2019-05-033-36/+34
| | | | This fixes builds on non-x86
* main/bind: security upgrade to 9.11.6_p1 (CVE-2018-5743,CVE-2019-6467)Natanael Copa2019-05-032-6/+174
| | | | | | | | | | | | | | | | | This release introduced 3 new tools with python dependency (dnssec-checkdns, dnssec-coverage and dnssec-keymgr). Move those tools to a subpackage, bind-dnssec-tools, to avoid unexpectedly pull in python as dependency for stable upgraders. There are other tools in bind-tools that belongs to bind-dnssec-tools, but we dont move those in a stable branch to avoid breaking things for current users. Include patch to fix build on non-x86: https://gitlab.isc.org/isc-projects/bind9/commit/d72f436b7d7c697b262968c48c2d7643069ab17f https://lists.isc.org/pipermail/bind-users/2019-April/101673.html fixes #10370
* main/py3-ply: new aporttcely2019-05-021-0/+39
| | | | | | | https://www.dabeaz.com/ply/ Python Lex & Yacc needed by bind
* main/tzdata: upgrade to 2019aJ0WI2019-04-301-4/+4
| | | | ref #10202
* main/tzdata: upgrade to 2018iAndy Postnikov2019-04-301-5/+5
|
* main/tzdata: upgrade tzcode to 2018gSören Tempel2019-04-301-3/+3
|
* main/tzdata: upgrade to 2018gPedro Filipe2019-04-301-8/+9
|
* main/tzdata: upgrade to 2018fNatanael Copa2019-04-301-3/+3
|
* main/tzdata: add patch to fix implicit declaration compiler warningsSören Tempel2019-04-303-8/+39
| | | | | Not strictly needed but since this is code written by us, fixing it seems to be a good idea.
* main/tzdata: upgrade to 2018dSören Tempel2019-04-301-4/+4
|
* main/freeradius: security fixes (CVE-2019-11234, CVE-2019-11235)Leonardo Arena2019-04-252-4/+100
| | | | Fixes #10327
* main/python3: security upgrade to 3.6.8Natanael Copa2019-04-223-16/+160
| | | | | | | | - CVE-2018-14647 - CVE-2018-20406 - CVE-2019-9636 fixes #10299
* main/clamav: security upgrade to 0.100.3Leonardo Arena2019-04-171-2/+6
| | | | | | CVE-2019-1787, CVE-2019-1788, CVE-2019-1789 Fixes #10265
* main/samba: security fix (CVE-2019-3880)Stefan Reiff2019-04-172-1/+156
| | | | | | Fixes #10249 Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
* main/libxslt: security fix for CVE-2019-11068Natanael Copa2019-04-172-4/+129
| | | | fixes #10280
* main/bind: security upgrade to 9.11.5_p4tcely2019-04-121-3/+8
| | | | | | | | | | | | | | | | | | https://ftp.isc.org/isc/bind9/9.11.5-P4/RELEASE-NOTES-bind-9.11.5-P4.html - CVE-2019-6465 - CVE-2018-5745 - CVE-2018-5744 - CVE-2018-5740 - CVE-2018-5738 Fixes #10168 With the release of BIND 9.11.0, ISC changed to the open source license for BIND from the ISC license to the Mozilla Public License (MPL 2.0). BIND 9.11 (Extended Support Version) will be supported until at least December, 2021.
* main/gd: disable tests for more archesLeonardo Arena2019-04-081-2/+2
| | | | | FAIL: gdimagecopyresampled/bug00201 FAIL: gdimagegrayscale/basic
* main/gd: modernize and add security patchesJ0WI2019-04-085-46/+310
| | | | | | CVE-2018-5711, CVE-2019-6977, CVE-2019-6978 Fixes #10086
* main/putty: on arm* and aarch64 needs linux-headersLeonardo Arena2019-04-081-1/+2
|
* main/putty: security upgrade to 0.71Leonardo Arena2019-04-082-4/+27
| | | | | | | | CVE-2019-9894, CVE-2019-9895, CVE-2019-9897, CVE-2019-9898 Fixes #10196 Update license, disable check
* main/wget: security upgrade to 1.20.3 (CVE-2019-5953)Leonardo Arena2019-04-081-2/+2
| | | | Fixes #10213
* main/ghostscript: security fixes (CVE-2019-3835, CVE-2019-3838, CVE-2019-6116)J0WI2019-04-044-1/+1452
|
* main/apache2: security upgrade to 2.4.39J0WI2019-04-031-3/+10
| | | | fixes #10189
* main/postgresql: upgrade to 10.7Leonardo Arena2019-04-031-2/+2
|
* main/dovecot: security upgrade to 2.2.36.3J0WI2019-04-011-2/+4
|
* main/libssh2: upgrade to 1.8.2Natanael Copa2019-03-271-7/+2
| | | | | | | fixes a regression introduced by the security update 1.8.1. upstream issue: https://github.com/libssh2/libssh2/issues/336 downstream issue: https://github.com/gliderlabs/docker-alpine/issues/507
* main/libssh2: security upgrade to 1.8.1Francesco Colista2019-03-191-3/+15
| | | | | | | | | | | | | | - CVE-2019-3855 - CVE-2019-3856 - CVE-2019-3857 - CVE-2019-3858 - CVE-2019-3859 - CVE-2019-3860 - CVE-2019-3861 - CVE-2019-3862 - CVE-2019-3863 Fixes #10131