aboutsummaryrefslogtreecommitdiffstats
path: root/main
Commit message (Collapse)AuthorAgeFilesLines
...
* main/linux-vserver: upgrade to 3.6.10-vs2.3.4.6Natanael Copa2012-12-185-51514/+12
| | | | | ref #1525 (cherry picked from commit 55308616857799c744cd6ba246e2ba4d1806a07f)
* xen: update to 4.2.1Roger Pau Monne2012-12-1813-1130/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Excerpt from release notes: This fixes the following critical vulnerabilities: * CVE-2012-4535 / XSA-20: Timer overflow DoS vulnerability * CVE-2012-4537 / XSA-22: Memory mapping failure DoS vulnerability * CVE-2012-4538 / XSA-23: Unhooking empty PAE entries DoS vulnerability * CVE-2012-4539 / XSA-24: Grant table hypercall infinite loop DoS vulnerability * CVE-2012-4544,CVE-2012-2625 / XSA-25: Xen domain builder Out-of-memory due to malicious kernel/ramdisk * CVE-2012-5510 / XSA-26: Grant table version switch list corruption vulnerability * CVE-2012-5511 / XSA-27: several HVM operations do not validate the range of their inputs * CVE-2012-5513 / XSA-29: XENMEM_exchange may overwrite hypervisor memory * CVE-2012-5514 / XSA-30: Broken error handling in guest_physmap_mark_populate_on_demand() * CVE-2012-5515 / XSA-31: Several memory hypercall operations allow invalid extent order values * CVE-2012-5525 / XSA-32: several hypercalls do not validate input GFNs We recommend all users of the 4.2.0 code base to update to this point release. Among many bug fixes and improvements (around 100 since Xen 4.2.0): * A fix for a long standing time management issue * Bug fixes for S3 (suspend to RAM) handling * Bug fixes for other low level system state handling * Bug fixes and improvements to the libxl tool stack * Bug fixes to nested virtualization (cherry picked from commit 119185999980a6a6a78506a6b49e1a70ab55ad03)
* main/qemu: upgrade to 1.2.2Natanael Copa2012-12-181-2/+2
|
* main/qemu: upgrade to 1.2.1Natanael Copa2012-12-182-125/+5
| | | | (cherry picked from commit cb77e89c85b1bb1a9a64a61645e6f069211d6534)
* main/debootstrap: sync pkgdetails.c from bootstrap-base-udeb in debian sidWilliam Pitcock2012-12-182-30/+169
| | | | | Conflicts: main/debootstrap/APKBUILD
* main/acf-apk-tools: upgrade to 0.7.4Ted Trask2012-12-131-2/+2
| | | | (cherry picked from commit e796416ff54ba8245da9909b91ac65d6a317b543)
* main/squid: upgrade to 3.2.5Natanael Copa2012-12-121-2/+2
| | | | | | | (cherry picked from commit a961d7672edfda15ce80bb85e36d5e36504bbce1) Conflicts: main/squid/APKBUILD
* main/asterisk: upgrade to 11.1.0Timo Teräs2012-12-111-2/+2
| | | | (cherry picked from commit 80aa523c971b108d5f472ca5ac576e7deda46240)
* main/asterisk: upgrade to 11.0.2Timo Teräs2012-12-111-2/+2
| | | | (cherry picked from commit 429bcc16248a39abd26ba6a03f739804734521b5)
* main/acf-alpine-baselayout: upgrade to 0.9.3Ted Trask2012-12-071-2/+2
| | | | (cherry picked from commit e0e8b01f39acbb2a02e35f7372f157ef96506b99)
* main/libxml2: fix CVE-2012-5134Natanael Copa2012-12-072-2/+25
| | | | fixes #1488
* main/tiff: fix depsNatanael Copa2012-12-071-1/+1
|
* main/libssh: security upgrade to 0.5.3 ↵Natanael Copa2012-12-071-4/+4
| | | | | | (CVE-2012-4559,CVE-2012-4561,CVE-2012-4562) fixes #1493
* main/tiff: security upgrade to 4.0.3 (CVE-2012-4447,CVE-2012-4564)Natanael Copa2012-12-072-17/+4
| | | | fixes #1502
* main/libproxy: security upgrade to 0.4.9 (CVE-2012-4504)Natanael Copa2012-12-071-3/+3
| | | | fixes #1507
* main/tinyproxy: fix CVE-2012-3505Natanael Copa2012-12-072-1/+54
| | | | fixes #1516
* main/bind: upgrade to 9.9.2_p1Natanael Copa2012-12-071-2/+2
|
* main/owncloud: upgrade to 4.5.4Leonardo Arena2012-12-061-3/+3
| | | | (cherry picked from commit c46796750567cd3fa8c7cae8b61aa7a7e61c1803)
* main/owncloud: fix mysql dependsLeonardo Arena2012-12-061-5/+2
| | | | (cherry picked from commit ea5a40b3aff7ef89d011aacea0031a9de6e237b4)
* main/acf-lib: upgrade to 0.4.2Ted Trask2012-12-041-2/+2
| | | | (cherry picked from commit 7a7541409db0d9d98931fa18fd4a91b5bb422895)
* main/nfs-utils: fix previous patchNatanael Copa2012-12-042-7/+7
| | | | | | fixes #1486 (cherry picked from commit 84ad0cd074a4f7e337d0f4f0d4b1fea5a24bea5f)
* main/nfs-utils: fix for wrong getaddrinfo assumptionsNatanael Copa2012-12-042-2/+31
| | | | | | | | | | | | | The nfs-utils assumes getaddrinfo(AI_NUMERICHOST) never fills in ai_canonname, but it appears to do on uclibc. It also assumes that if it filled in, it will be allocated separately and that freeaddrinfo() will free it. This is not what uclibc does. This patch should fix a potensial memleak on nfs server and probably it will fix nfs server on x86_64 ref #1486 (cherry picked from commit 95e73982d6b68780a74a677f0fada23e6392e2fc)
* xen: security fixesRoger Pau Monne2012-12-047-1/+431
| | | | | | | | | | | | This covers: XSA-26 (CVE-2012-5510) XSA-27 (CVE-2012-5511) XSA-29 (CVE-2012-5513) XSA-30 (CVE-2012-5514) XSA-31 (CVE-2012-5515) XSA-32 (CVE-2012-5525) (cherry picked from commit 02c9cf16cb335a73de4a175a8f9a451a4a19a1ed)
* xen: add screen as a run time dependencyRoger Pau Monne2012-12-041-2/+2
| | | | | screen is needed by xendomains init script. Also bump pkgrel. (cherry picked from commit 9dcb820d809f104dd8d04314d3ab175334a7470f)
* xen: fix xendomains init scriptRoger Pau Monne2012-12-042-4/+4
| | | | (cherry picked from commit a5cfc78fea7ba38a87393901d33cffd50c089e0f)
* testing/multisort: move to mainLeonardo Arena2012-12-042-0/+325
| | | | (cherry picked from commit 3ff51d6080e33bb08c705a7faa197a0eac6e3efd)
* main/linux-grsec: fix build on x86_64Natanael Copa2012-11-282-2/+3
| | | | (cherry picked from commit e83f9273a6712fddf7c2a1a940fbf23fe330123f)
* main/xtables-addons-grsec: rebuild against kernel 3.6.8-r1Natanael Copa2012-11-281-2/+2
| | | | (cherry picked from commit 82cd3b6de0c480b046ba9e84e165bd03b79115ca)
* main/open-vm-tools-grsec: rebuild against 3.6.8 kernelNatanael Copa2012-11-282-21/+19
| | | | (cherry picked from commit b7902a63ac30cff6562a32162ef856409bbcc455)
* main/dahdi-linux-grsec: rebuild against kernel 3.6.8-r1Natanael Copa2012-11-281-2/+2
| | | | (cherry picked from commit feed29bcdc750a57b2adc065eb8ca04a98f28f08)
* main/linux-grsec: upgrade to 3.6.8Natanael Copa2012-11-282-242/+420
| | | | (cherry picked from commit d7882b418f925a699a9616958bb91c7c3d1133c7)
* main/xtables-addons-grsec: rebuild against kernel 3.6.7-r0Natanael Copa2012-11-281-2/+2
| | | | (cherry picked from commit d5e0d3acd9bebf56545dd176be14add6cb7768cb)
* main/open-vm-tools-grsec: rebuild against kernel 3.6.7-r0Natanael Copa2012-11-281-2/+2
| | | | (cherry picked from commit 75836d52daac3782e50a56a02122491c6ad997c8)
* main/dahdi-linux-grsec: rebuild against kernel 3.6.7-r0Natanael Copa2012-11-281-2/+2
| | | | (cherry picked from commit 914d5147ee9281253bbc1693d754970c8b5c1987)
* main/linux-grsec: upgrade to 3.6.7 kernelNatanael Copa2012-11-282-527/+550
| | | | (cherry picked from commit 41a35763c0368d6db691f8289906d0d28375f0b2)
* main/xtables-addons-grsec: rebuild against kernel 3.6.6-r2Natanael Copa2012-11-281-1/+1
| | | | (cherry picked from commit 99119b12af21396f54f8f8514c2f6e0c441d9096)
* main/open-vm-tools-grsec: rebuild against kernel 3.6.6-r2Natanael Copa2012-11-281-1/+1
| | | | (cherry picked from commit 5552049a4534d5782d5422e97c86de3892ee5c78)
* main/dahdi-linux-grsec: rebuild against kernel 3.6.6-r2Natanael Copa2012-11-281-1/+1
| | | | (cherry picked from commit 302e72b5c99a7cf5191d8ee0b77ec63d8cb054ee)
* main/linux-grsec: enable analog TV and upgrade to ↵Natanael Copa2012-11-283-31/+130
| | | | | | grsecurity-2.9.1-3.6.6-201211122213 (cherry picked from commit 7f54fb99e478b38a77c221867ce348da26c7309c)
* xen: prevent xenstore from being restaredRoger Pau Monne2012-11-282-6/+7
| | | | | | | xenstore should not be restarted. If it is restarted watches are lost, and several key components like kernel backend drivers will cease to work. (cherry picked from commit 2e34c29e4382c24c2438fd1a9419a68ba5f39d46)
* xen: bump pkgrelRoger Pau Monne2012-11-281-1/+1
| | | | (cherry picked from commit df4538c72764998f2b643d1cfa5b4083bae7e582)
* xen: fix misuse of einfo in xenstore.initdRoger Pau Monne2012-11-282-2/+2
| | | | | Signed-off-by: Roger Pau Monne <roger.pau@citrix.com> (cherry picked from commit 9b20bafcd48738a6ddcf6e7f39744eb117b41e82)
* xen: add a bunch of security fixesRoger Pau Monne2012-11-285-0/+144
| | | | | | | | | | | This covers: XSA-20 XSA-22 XSA-23 XSA-24 Signed-off-by: Roger Pau Monne <roger.pau@citrix.com> (cherry picked from commit 22809ecb412e53ecc84ef1213fcdfc3afa124909)
* xen: prevent qemu daemon from screwing the consoleRoger Pau Monne2012-11-282-2/+5
| | | | | | | | Qemu when launched with -nographic and -monitor screws the console badly. Use nohup to prevent that. Signed-off-by: Roger Pau Monné <roger.pau@citrix.com> (cherry picked from commit 1bba205542b00512cc50c8a4807b358f0b2697c5)
* main/owncloud: upgrade to 4.5.3Leonardo Arena2012-11-272-18/+5
| | | | (cherry picked from commit 7625ff614def2e776635653bd47b3999ddfabb6d)
* main/acf-weblog: upgrade to 0.7.4Ted Trask2012-11-241-2/+2
| | | | (cherry picked from commit 6534d47613c05e43af5c509c6ee0b7c00b9990b1)
* main/bacula-client: bump pkgrelLeonardo Arena2012-11-231-1/+1
| | | | (cherry picked from commit 4441b11cc97bd233851d6255d45abd9e93f52864)
* main/bacula: move default archive dir to /var/lib/baculaLeonardo Arena2012-11-231-2/+2
| | | | (cherry picked from commit 48b558b2c5d057cb6b63012029009cbc51bb6670)
* main/bacula-client: align client's revision to serverLeonardo Arena2012-11-231-8/+5
| | | | (cherry picked from commit 2b3b91a8c356e98d7af2b4db34cc786710032f88)
* main/bacula: ignore libaccats.soLeonardo Arena2012-11-231-4/+6
| | | | (cherry picked from commit a35c83d0624a0383545f6bd26fceaecff16e8d1e)