aboutsummaryrefslogtreecommitdiffstats
path: root/main
Commit message (Collapse)AuthorAgeFilesLines
...
* main/linux-rpi: upgrade to 4.14.54Natanael Copa2018-09-101-2/+2
| | | | (cherry picked from commit d2c523eceb53ec4bcdd769b3e80a51b2867010f5)
* main/ghostscript: security upgrade to 9.24Andy Postnikov2018-09-101-11/+10
| | | | | | | | | CVE-2018-15908, CVE-2018-15909, CVE-2018-15910, CVE-2018-15911 CVE-2018-10194 fixes #9383 (cherry picked from commit c13758613f3110e14c2e9eda818406f235d996c1)
* main/curl: security upgrade to 7.61.1 (CVE-2018-14618)Natanael Copa2018-09-101-2/+4
| | | | fixes #9394
* main/apk-tools: security upgrade to 2.10.1Timo Teräs2018-09-104-157/+3
| | | | (cherry picked from commit 42f4d8068243fe9b4a24ea239bbf19bc8ad40880)
* main/dropbear: backport security fix (CVE-2018-15599)Natanael Copa2018-09-102-3/+232
| | | | fixes #9348
* main/dropbear: disable wtmp and lastlog supportnervo2018-09-101-2/+4
| | | | | | | | musl doesn't support neither wtmp nor lastlog. Fixes #5075 (cherry picked from commit 8717d9372bd86e76ee2da5e06ffc702c4ab7c7c2)
* main/bind: add secfixes commentNatanael Copa2018-09-101-0/+2
|
* main/bind: security upgrade to 9.12.2_p1 (CVE-2018-5740)Natanael Copa2018-09-102-56/+2
| | | | fixes #9358
* main/nginx: fix permissions of /var/tmpNatanael Copa2018-09-101-1/+2
| | | | | | | | | | Permissions of /var/tmp should be 1777. Due to limitation in apk/abuild we need to explicitly set the permissions of intermediate directories that should not have default. ref #9364 (cherry picked from commit 7a6d59536dfe5ea1fbc343993d894d119c701ab1)
* main/xen: clean up checksumsNatanael Copa2018-09-061-1/+0
|
* main/ncurses: add /lib/terminfo to terminfo dirsNatanael Copa2018-09-061-2/+2
| | | | | | | This is so statically compiled binaries works on distros where terminfo is installed in /lib/terminfo (like ubuntu) fixes #9363
* main/xen: backport various security fixesNatanael Copa2018-09-068-761/+8564
| | | | fixes #9295
* main/pingu: create piddir on service startNatanael Copa2018-09-042-6/+3
| | | | | | Create the directory for the pidfile in openrc init.d script. fixes #9369
* main/grub: fix install on xfsNatanael Copa2018-09-042-2/+64
| | | | fixes #9375
* main/dovecot: upgrade to 2.3.2.1Natanael Copa2018-09-032-287/+5
| | | | fixes #9363
* main/postgrey: fix depends and add testNatanael Copa2018-08-271-2/+10
| | | | | | fixes #9341 (cherry picked from commit c882e5da284007861f4192f7a5c7dfc97c030448)
* main/libetpan: fix user certNatanael Copa2018-08-274-68/+33
| | | | | | | | fixes #9340 upstream report: https://github.com/dinhviethoa/libetpan/issues/288 (cherry picked from commit 173054f4f0fbc6d12b46bca5d476f76bf0a5d85f)
* main/python3: add secfixes commentNatanael Copa2018-08-231-0/+5
|
* main/python3: security upgrade to 3.6.6 (CVE-2018-1060,CVE-2018-1061)Natanael Copa2018-08-234-264/+4
|
* main/libmspack: security upgrade to 0.7.1alphaNatanael Copa2018-08-223-113/+12
| | | | fixes #9226
* main/amavisd-new: fix dependency for inet6Natanael Copa2018-08-221-1/+2
| | | | fixes #9323
* main/perl-io-socket-inet6: move from community due to amavisd-newNatanael Copa2018-08-221-0/+39
| | | | needed by amavisd-new
* main/myrepos: add secfixes commentNatanael Copa2018-08-221-0/+4
|
* main/myrepos: upgrade to 1.20180726Fabian Affolter2018-08-221-2/+2
| | | | | | fixes #9200 (cherry picked from commit 593b926a0233cbb19a47882bd2c22346cb7a5530)
* main/openssh: backport security fix (CVE-2018-15473)Natanael Copa2018-08-222-4/+154
| | | | fixes #9318
* main/unzip: fix various CVEsNatanael Copa2018-08-228-2/+399
| | | | | | | | | | | | - CVE-2014-8139 - CVE-2014-8140 - CVE-2014-8141 - CVE-2014-9636 - CVE-2014-9913 - CVE-2016-9844 - CVE-2018-1000035 fixes #9287
* main/samba: security upgrade to 4.8.4Leonardo Arena2018-08-221-3/+9
| | | | | | CVE-2018-10858, CVE-2018-10918, CVE-2018-10919, CVE-2018-1139, CVE-2018-1140 Fixes #9250
* main/ldb: security upgrade to 1.3.5 (CVE-2018-1140)Leonardo Arena2018-08-223-29/+387
| | | | Fixes #9256
* main/krb5: security upgrade to 1.15.3 ↵Natanael Copa2018-08-211-3/+9
| | | | | | (CVE-2017-15088,CVE-2018-5709,CVE-2018-5710) fixes #9301
* main/wpa_supplicant: bump pkgrelNatanael Copa2018-08-211-1/+1
|
* main/wpa_supplicant: security fix (CVE-2018-14526)Natanael Copa2018-08-212-0/+48
| | | | fixes #9220
* main/ncurses: upgrade to 6.1_p20180818Natanael Copa2018-08-211-5/+7
| | | | fixes #9282
* main/apk-tools: backport fix for --no-networkNatanael Copa2018-08-212-3/+35
| | | | | prevent update repository index when --no-network is specified. fixes #9126
* main/apache2: security upgrade to 2.4.34Andy Postnikov2018-08-202-23/+27
| | | | fixes #9264
* main/apk-tools: don't update index on deleteNatanael Copa2018-08-172-3/+78
| | | | | | | | backport from upstream fixes #9063 (cherry picked from commit 09b110fc99a36f12c0b49e6029a231a231ce920d)
* main/apk-tools: fix `apk list -i` segfaultSören Tempel2018-08-172-3/+50
| | | | (cherry picked from commit 4dccdfb8689395565f47c661b1b1acea485f8530)
* main/nodejs: security upgrade to 8.11.4Tim Brust2018-08-161-3/+5
|
* main/gnupg1: security upgrade to 1.4.23 (CVE-2017-7526)tcely2018-08-162-47/+6
| | | | (cherry picked from commit 6895452f9306041d563023e9fae6b77ac6c27dae)
* main/python2: split out wininst*.exeNatanael Copa2018-08-161-2/+10
| | | | | | | | | | | The wininst is only needed for creating binary distribution for windows and is rarely needed, if ever. The precompiled .exe files contains statically linked version of zlib 1.2.8 which is vulnerable. Remove them from main package and save a couple of MB, like we did with python3 (commit c3f535e2460f82e36facf515d906accf0a0a2f7b). (cherry picked from commit 9d42714569a43a815f04bddbfc4c5526a8bbac9a)
* main/clamav: upgrade to 0.100.1 (CVE-2017-16932,CVE-2018-0360,CVE-2018-0361)Carlo Landmeter2018-08-131-3/+7
| | | | fixes #9168
* main/redis: upgrade to 4.0.11Andy Postnikov2018-08-101-3/+3
|
* main/postgresql: security upgrade to 10.5Andy Postnikov2018-08-101-2/+5
| | | | CVE-2018-10915 CVE-2018-10925
* main/ruby-bundler: fix missing dependency on ruby-etcJakub Jirutka2018-08-091-2/+2
| | | | Fixes #9216 <https://bugs.alpinelinux.org/issues/9216>
* main/mini_httpd: Fix cgi bug breaking ACF logonTed Trask2018-08-082-2/+15
| | | | (cherry picked from commit 22b198e7f8bbdf04f28682bf286a89921d4c3a44)
* main/mupdf: upgrade to 1.13.0prspkt2018-08-082-22/+19
| | | | | | | | add secfixes comments fixes #8580 (cherry picked from commit 831d2ee24986330048dfa488c8bb5017656e8efd)
* main/p7zip: security fixes (CVE-2018-5996, CVE-2018-10115)Natanael Copa2018-08-083-5/+545
| | | | fixes #8532
* main/lxc: fix CVE-2018-6556Jakub Jirutka2018-08-062-2/+129
|
* main/py-django: security upgrade to 1.11.15 (CVE-2018-14574)Natanael Copa2018-08-061-2/+4
| | | | fixes #9175
* main/cgit: fix secfixes commentNatanael Copa2018-08-041-2/+2
|
* main/cgit: fix CVE-2018-14912Natanael Copa2018-08-042-2/+70
|