| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
(cherry picked from commit 1acebd080f9b9681277319f4f80bafdbf3867615)
|
|
|
|
|
|
|
|
| |
found in Lenovo IdeaPad
fixes #10147
(cherry picked from commit bcc823517a30cc3c742f66bbc8bedf24bf50507b)
|
|
|
|
|
|
|
|
|
| |
also enable CONFIG_RANDOM_TRUST_CPU
https://askubuntu.com/questions/1070433/will-ubuntu-enable-random-trust-cpu-in-the-kernel-and-what-would-be-the-effect/1071196#1071196
fixes #9960
(cherry picked from commit e67c2f8bcb163695a5917e059a2c7ba46726ee89)
|
|
|
|
|
|
| |
The config option is required for busybox's mdev to work, or we'll get ".../lib/rc/sh/openrc-run.sh: line 21: can't create /proc/sys/kernel/hotplug: nonexistent directory" on boot.
(cherry picked from commit 3c109eb5f41acef557f1d4dc2e8b90e4ba610ac9)
|
|
|
|
|
|
|
|
|
| |
CONFIG_KERNEL_NOBP should be off if CONFIG_EXPOLINE_AUTO is selected
NOBP has been the first line of defense and is basically outdated by
now
(cherry picked from commit 212401a4ca0b7294979c648980da1fa20438fff9)
|
|
|
|
| |
(cherry picked from commit 17f4278ce5180eb5214e370594ee72fc3b2e9179)
|
|
|
|
| |
(cherry picked from commit affc173481ca6bc814aa1e89b0ef54fd741207a5)
|
|
|
|
|
|
| |
Fixes #10388
Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
|
|
|
|
|
|
|
|
|
|
| |
haveged does not require any network connectivity to function, and this
errant dependency can cause the daemon to not start properly at boot.
This also adds urandom / localmount, bringing the init script in sync
with those from rng-tools and jitterentropy-rngd.
(cherry picked from commit caec29f551955d6a6392943708652db0f8bc4a17)
|
|
|
|
|
|
|
|
|
|
|
| |
- Add secfixes
CVE-2019-7317
CVE-2018-14048
CVE-2018-14550
- Remove pkg-config detected depends_dev
- Split $pkgname-static
fixes #10362
|
| |
|
|
|
|
|
|
|
|
|
|
| |
fixes build error on various architectures:
/usr/lib/gcc/s390x-alpine-linux-musl/8.3.0/../../../../s390x-alpine-linux-musl/bin/ld:
../../lib/ns/.libs/libns.so: undefined reference to `isc_atomic_xadd'
https://lists.isc.org/pipermail/bind-users/2019-April/101673.html
https://gitlab.isc.org/isc-projects/bind9/commit/d72f436b7d7c697b262968c48c2d7643069ab17f
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This release introduced 3 new tools with python dependency
(dnssec-checkdns, dnssec-coverage and dnssec-keymgr). Move those tools
to a subpackage, bind-dnssec-tools, to avoid unexpectedly pull in python
as dependency for stable upgraders.
There are other tools in bind-tools that belongs to bind-dnssec-tools,
but we dont move those in a stable branch to avoid breaking things for
current users.
fixes #10368
|
|
|
|
|
|
|
| |
https://www.dabeaz.com/ply/
Python Lex & Yacc
needed by bind
|
|
|
|
| |
Fixes #10325
|
|
|
|
| |
missing in last change
|
|
|
|
| |
(cherry picked from commit a858616e75eeaa241581db413c2f750611e938d3)
|
|
|
|
| |
(cherry picked from commit db18b4c886bd03a942e1c7bdbcf4e2e5d30fed7f)
|
|
|
|
|
|
|
|
|
| |
Decrease the probability of a failing Chi-Square test by doubling the
sample size used.
While at it add openrc subpkg
(cherry picked from commit 65662ceedf9c895da8e96d9cdba7a68f9cfe8740)
|
|
|
|
|
|
| |
haveged provides entropy
(cherry picked from commit c79b99c2f4aba28da0149805ecba283590cd9265)
|
|
|
|
|
|
|
| |
named-checkconf needs entropy to start, or else it will take
up to a minute to start at boot.
(cherry picked from commit 62bda4345a9fc41bf290b11abcc58e31408e4e49)
|
|
|
|
|
|
| |
CVE-2019-1787, CVE-2019-1788, CVE-2019-1789
Fixes #10263
|
|
|
|
|
|
| |
CVE-2019-9494, CVE-2019-9495, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499
Fixes #10242
|
|
|
|
| |
wpa_supplicant needs entropy
|
|
|
|
| |
fixes #10278
|
| |
|
|
|
|
| |
https://bugzilla.samba.org/show_bug.cgi?id=12147
|
|
|
|
|
|
|
|
| |
CVE-2018-14629, CVE-2019-3880
Fixes #10247
Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
|
| |
|
| |
|
|
|
|
| |
CVE-2019-9956, CVE-2019-10649, CVE-2019-10650
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
https://ftp.isc.org/isc/bind9/9.12.3-P4/RELEASE-NOTES-bind-9.12.3-P4.html
- CVE-2019-6465
- CVE-2018-5745
- CVE-2018-5744
- CVE-2018-5740
- CVE-2018-5738
- CVE-2018-5737
- CVE-2018-5736
Fixes #10166
BIND is open source software licenced under the terms of the Mozilla
Public License, version 2.0 (see the LICENSE file for the full text).
BIND 9.12 will be supported until at least May, 2019.
|
|
|
|
| |
This reverts commit a72d66cd67f20dec8e4eb3d6f2b387a11a0bfbf8.
|
|
|
|
|
|
|
|
| |
The CVE-2018-19758.patch is now a merge of relevant bits from two upstream commits:
42132c543358cee9f7c3e9e9b15bb6c1063a608e
6d7ce94c020cc720a6b28719d1a7879181790008
Fixes #10107
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
- CVE-2019-6465
- CVE-2018-5745
- CVE-2018-5744
Fixes #10166
|
|
|
|
|
|
| |
ref #9549
(cherry picked from commit 96bda76be60e16d17e26feb82e7686a865b6695c)
|
|
|
|
|
|
|
|
|
|
| |
* update rpi wifi firmware, use better source
* update rpi bluetooth firmware
* purge additional source code files
ref #9549
(cherry picked from commit 0a01a2870e96c61b8bf6ecb2d98f4acb629c36d8)
|
| |
|
|
|
|
|
|
|
| |
Rebuilding python with gcc 8.3.0 fixes segfault with aarch64 build on
rpi3.
fixes #9981
|
|
|
|
|
|
|
|
| |
rebuilding gcc 8.3.0 seems to fix aarch64 python3 running on rpi3.
ref #9981
(cherry picked from commit d51e013bca5601e50443c35b9c23a26ec744f73b)
|
|
|
|
| |
(cherry picked from commit 16904a10088355ac3782ef554727aaa3d2895973)
|
| |
|
| |
|
| |
|
| |
|