Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | main/wavpack: security fixes | Leonardo Arena | 2018-06-11 | 4 | -14/+231 | |
| | | | | | | CVE-2018-6767, CVE-2018-7253, CVE-2018-7254 Fixes #8594 | |||||
* | main/sdl2_image: security fixes. Fixes #8942 | Francesco Colista | 2018-06-06 | 11 | -4/+347 | |
| | | | | | | | | | | | | | | | Security fiexes for the following CVEs: CVE-2017-2887 CVE-2017-12122 CVE-2017-14440 CVE-2017-14441 CVE-2017-14442 CVE-2017-14448 CVE-2017-14450 CVE-2018-3837 CVE-2018-3838 CVE-2018-3839 | |||||
* | main/xfsprogs: fix owner of files | Natanael Copa | 2018-06-06 | 1 | -7/+4 | |
| | | | | fixes #8968 | |||||
* | main/git: security upgrade to 2.13.7 (CVE-2018-11233,CVE-2018-11235) | Natanael Copa | 2018-05-30 | 1 | -2/+5 | |
| | | | | fixes #8948 | |||||
* | main/binutils: backport fix for ppc64le | Natanael Copa | 2018-05-30 | 2 | -1/+96 | |
| | | | | | | | | | | This fixes clang testsuite. Patch was taken from upstream binutils-2_30-branch https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=shortlog;h=refs/heads/binutils-2_30-branch Upstream report: https://sourceware.org/ml/binutils/2018-03/msg00183.html | |||||
* | main/binutils: upgrade to 2.30 | Natanael Copa | 2018-05-30 | 2 | -94/+4 | |
| | | | | | fixes #7315 fixes #8881 | |||||
* | main/binutils: add mips support | Nils Andreas Svee | 2018-05-30 | 4 | -35/+399 | |
| | | | | | | * Remove hash-style-gnu.patch in favor of the patch adding a configure flag for it from upstream * Add gold-mips.patch from Debian, which makes gold configure correctly for MIPS64 targets * Use CTARGET_ARCH instead of CARCH to correctly determine whether to enable the x86_64-pep target or not | |||||
* | main/libressl: bump pkgrel due to revert | Natanael Copa | 2018-05-30 | 1 | -1/+1 | |
| | ||||||
* | Revert "main/libressl: add options -verify_{hostname,ip} to s_client" | Natanael Copa | 2018-05-30 | 3 | -111/+3 | |
| | | | | | | fixes #8939 This reverts commit 1fae29db4daf9eb7f4e39aab7ce3bd37d18cc74e. | |||||
* | main/busybox: properly fix wget https support | Natanael Copa | 2018-05-30 | 7 | -87/+341 | |
| | | | | | | | | | | | | | fix busybox wget https support by using an external ssl_client helper for https. Disable the use of external openssl. This was fixed to check certificates as a temporary solution. openssl can not produce any useful error messages on certificate errors. It is big. So we simply disable its use. We auto-install ssl_client if both libssl and busybox are installed. This is to keep backwards compatibility. | |||||
* | main/busybox: wget: verify certificate when openssl helper is used | Jakub Jirutka | 2018-05-29 | 2 | -0/+73 | |
| | ||||||
* | main/busybox: wget: print warning when internal TLS code is used | Jakub Jirutka | 2018-05-29 | 2 | -1/+89 | |
| | ||||||
* | main/libressl: add options -verify_{hostname,ip} to s_client | Jakub Jirutka | 2018-05-29 | 3 | -3/+111 | |
| | ||||||
* | main/curl: fix crashes due to LibreSSL/OpenSSL engines conflicts | Jakub Jirutka | 2018-05-25 | 2 | -2/+47 | |
| | ||||||
* | main/bind: security upgrade to 9.11.3 | Jakub Jirutka | 2018-05-24 | 1 | -2/+8 | |
| | ||||||
* | main/tiff: fix CVE-2018-8905 | prspkt | 2018-05-24 | 2 | -2/+57 | |
| | ||||||
* | main/tiff: fix CVE-2018-7456 | prspkt | 2018-05-24 | 2 | -2/+176 | |
| | ||||||
* | main/sqlite: fix CVE-2018-8740 | Jakub Jirutka | 2018-05-21 | 2 | -1/+40 | |
| | ||||||
* | main/curl: security upgrade to 7.60.0 | prspkt | 2018-05-20 | 1 | -3/+6 | |
| | ||||||
* | main/postgresql: fix license and maintainer | Jakub Jirutka | 2018-05-14 | 1 | -2/+2 | |
| | ||||||
* | main/postgresql: security upgrade to 9.6.9 | Jakub Jirutka | 2018-05-14 | 1 | -9/+11 | |
| | | | | | Fixes CVE-2018-1115 See https://www.postgresql.org/about/news/1851/ | |||||
* | main/wget: security upgrade to 1.19.5 | Andy Postnikov | 2018-05-10 | 1 | -4/+5 | |
| | ||||||
* | main/jq: security fix (CVE-2016-4074). Fixes #8809 | Leonardo Arena | 2018-04-30 | 2 | -7/+45 | |
| | ||||||
* | main/clamav: security upgrade 0.99.4 | Leonardo Arena | 2018-04-11 | 2 | -40/+8 | |
| | | | | | | CVE-2018-0202, CVE-2018-1000085 Fixes #8695 | |||||
* | main/mariadb: security upgrade to 10.1.32 | Leonardo Arena | 2018-04-11 | 1 | -2/+12 | |
| | | | | | | | CVE-2017-10268, CVE-2017-10378, CVE-2017-15365, CVE-2018-2562 CVE-2018-2612, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668 Fixes #8689 | |||||
* | main/tiff: fix CVE-2018-5784 | prspkt | 2018-04-02 | 3 | -3/+135 | |
| | | | | fixes #8702 | |||||
* | main/openssl: security upgrade to 1.0.2o and rebuild depending pkgs | Andy Postnikov | 2018-04-01 | 2 | -3/+7 | |
| | | | | | | Fixes CVE-2017-3738, CVE-2018-0739, CVE-2018-0733 Rebuilds packages that link openssl statically. | |||||
* | main/zsh: fix CVE-2018-1071, CVE-2018-1083 | Jakub Jirutka | 2018-03-31 | 3 | -6/+85 | |
| | ||||||
* | main/ruby: security upgrade to 2.4.4 | Natanael Copa | 2018-03-29 | 1 | -2/+9 | |
| | | | | | | | | | | | | | | | | | | | CVE-2017-17742: HTTP response splitting in WEBrick CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir CVE-2018-8777: DoS by large request in WEBrick CVE-2018-8778: Buffer under-read in String#unpack CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir fixes #8748 | |||||
* | main/uwsgi: security upgrade to 2.0.17 (CVE-2018-6758,CVE-2018-7490) | Natanael Copa | 2018-03-27 | 1 | -3/+10 | |
| | | | | fixes #8735 | |||||
* | main/apache2: security upgrade to 2.4.33 | Kaarle Ritvanen | 2018-03-27 | 3 | -257/+11 | |
| | | | | fixes #8730 | |||||
* | main/kamailio: add secinfo | Leonardo Arena | 2018-03-23 | 1 | -1/+3 | |
| | | | | Fixes #8719 | |||||
* | main/rsync: security upgrade to 3.1.3 (CVE-2018-5764) | Natanael Copa | 2018-03-20 | 5 | -144/+6 | |
| | | | | fixes #8677 | |||||
* | main/kamailio: lcr - fixed checking if there is more uris available for next_gw | Leonardo Arena | 2018-03-20 | 2 | -1/+29 | |
| | ||||||
* | main/kamailio: tmx - allocate space to store ending 0 for branch value | Leonardo Arena | 2018-03-20 | 2 | -1/+26 | |
| | ||||||
* | main/curl: upgrade to 7.59.0 | prspkt | 2018-03-19 | 1 | -3/+7 | |
| | | | | fixes #8645 | |||||
* | main/xen: upgrade to 4.8.3 | Henrik Riomar | 2018-03-19 | 40 | -4349/+4 | |
| | | | | | | | https://www.xenproject.org/downloads/xen-archives/xen-project-48-series/xen-483.html Also remove some patches that has been dropped from APKBUILD (earlier) but still included as files. | |||||
* | main/samba: security upgrade to 4.6.14 | Jakub Jirutka | 2018-03-15 | 1 | -2/+5 | |
| | ||||||
* | main/ruby-bundler: upgrade to 1.15.4 | Jakub Jirutka | 2018-03-14 | 1 | -2/+2 | |
| | ||||||
* | main/py-django: security upgrade to 1.11.11 | Leonardo Arena | 2018-03-12 | 1 | -3/+7 | |
| | | | | | | CVE-2018-7536, CVE-2018-7537 Fixes #8638 | |||||
* | main/xen: security fixes | Leonardo Arena | 2018-03-12 | 5 | -1/+396 | |
| | | | | | | CVE-2018-7540, CVE-2018-7541, CVE-2018-7542 Fixes #8615 | |||||
* | main/mosquitto: security upgrade to 1.4.15 | Daniel Sabogal | 2018-03-04 | 1 | -2/+6 | |
| | ||||||
* | main/postgresql: upgrade to 9.6.8 | Jakub Jirutka | 2018-03-02 | 1 | -2/+4 | |
| | ||||||
* | main/patch: security fix (CVE-2016-10713) | Leonardo Arena | 2018-02-28 | 2 | -1/+18 | |
| | | | | Partially fixes #8564 | |||||
* | main/patch: security fix (CVE-2018-6951) | Leonardo Arena | 2018-02-28 | 2 | -5/+40 | |
| | | | | | | | Partially fixes #8564 Patch for CVE-2018-6952 not yet available: https://savannah.gnu.org/bugs/index.php?53133 | |||||
* | main/squid: security upgrade to 3.5.27 | Leonardo Arena | 2018-02-28 | 2 | -20/+13 | |
| | | | | | | CVE-2018-1000024, CVE-2018-1000027 Fixes #8552 | |||||
* | main/libtasn1: security fix (CVE-2018-6003) | Leonardo Arena | 2018-02-28 | 2 | -2/+70 | |
| | | | | Fixes #8528 | |||||
* | main/xen: security fixes | Leonardo Arena | 2018-02-27 | 5 | -1/+306 | |
| | | | | | | | | | CVE-2017-17566, XSA-248 CVE-2017-17563, XSA-249 CVE-2017-17564, XSA-250 CVE-2017-17565, XSA-251 Fixes #8521 | |||||
* | main/libvorbis: security fixes (CVE-2017-14632, CVE-2017-14633) | dai9ah | 2018-02-27 | 3 | -2/+31 | |
| | | | | Fixes #8516 | |||||
* | main/curl: re-enable ssh support | Natanael Copa | 2018-02-27 | 1 | -1/+2 | |
| | | | | | | This was unintentionally disabled with the 7.58 upgrade. fixes #8575 |