aboutsummaryrefslogtreecommitdiffstats
path: root/main
Commit message (Collapse)AuthorAgeFilesLines
...
* main/wavpack: security fixesLeonardo Arena2018-06-114-14/+231
| | | | | | CVE-2018-6767, CVE-2018-7253, CVE-2018-7254 Fixes #8594
* main/sdl2_image: security fixes. Fixes #8942Francesco Colista2018-06-0611-4/+347
| | | | | | | | | | | | | | | Security fiexes for the following CVEs: CVE-2017-2887 CVE-2017-12122 CVE-2017-14440 CVE-2017-14441 CVE-2017-14442 CVE-2017-14448 CVE-2017-14450 CVE-2018-3837 CVE-2018-3838 CVE-2018-3839
* main/xfsprogs: fix owner of filesNatanael Copa2018-06-061-7/+4
| | | | fixes #8968
* main/git: security upgrade to 2.13.7 (CVE-2018-11233,CVE-2018-11235)Natanael Copa2018-05-301-2/+5
| | | | fixes #8948
* main/binutils: backport fix for ppc64leNatanael Copa2018-05-302-1/+96
| | | | | | | | | | This fixes clang testsuite. Patch was taken from upstream binutils-2_30-branch https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=shortlog;h=refs/heads/binutils-2_30-branch Upstream report: https://sourceware.org/ml/binutils/2018-03/msg00183.html
* main/binutils: upgrade to 2.30Natanael Copa2018-05-302-94/+4
| | | | | fixes #7315 fixes #8881
* main/binutils: add mips supportNils Andreas Svee2018-05-304-35/+399
| | | | | | * Remove hash-style-gnu.patch in favor of the patch adding a configure flag for it from upstream * Add gold-mips.patch from Debian, which makes gold configure correctly for MIPS64 targets * Use CTARGET_ARCH instead of CARCH to correctly determine whether to enable the x86_64-pep target or not
* main/libressl: bump pkgrel due to revertNatanael Copa2018-05-301-1/+1
|
* Revert "main/libressl: add options -verify_{hostname,ip} to s_client"Natanael Copa2018-05-303-111/+3
| | | | | | fixes #8939 This reverts commit 1fae29db4daf9eb7f4e39aab7ce3bd37d18cc74e.
* main/busybox: properly fix wget https supportNatanael Copa2018-05-307-87/+341
| | | | | | | | | | | | | fix busybox wget https support by using an external ssl_client helper for https. Disable the use of external openssl. This was fixed to check certificates as a temporary solution. openssl can not produce any useful error messages on certificate errors. It is big. So we simply disable its use. We auto-install ssl_client if both libssl and busybox are installed. This is to keep backwards compatibility.
* main/busybox: wget: verify certificate when openssl helper is usedJakub Jirutka2018-05-292-0/+73
|
* main/busybox: wget: print warning when internal TLS code is usedJakub Jirutka2018-05-292-1/+89
|
* main/libressl: add options -verify_{hostname,ip} to s_clientJakub Jirutka2018-05-293-3/+111
|
* main/curl: fix crashes due to LibreSSL/OpenSSL engines conflictsJakub Jirutka2018-05-252-2/+47
|
* main/bind: security upgrade to 9.11.3Jakub Jirutka2018-05-241-2/+8
|
* main/tiff: fix CVE-2018-8905prspkt2018-05-242-2/+57
|
* main/tiff: fix CVE-2018-7456prspkt2018-05-242-2/+176
|
* main/sqlite: fix CVE-2018-8740Jakub Jirutka2018-05-212-1/+40
|
* main/curl: security upgrade to 7.60.0prspkt2018-05-201-3/+6
|
* main/postgresql: fix license and maintainerJakub Jirutka2018-05-141-2/+2
|
* main/postgresql: security upgrade to 9.6.9Jakub Jirutka2018-05-141-9/+11
| | | | | Fixes CVE-2018-1115 See https://www.postgresql.org/about/news/1851/
* main/wget: security upgrade to 1.19.5Andy Postnikov2018-05-101-4/+5
|
* main/jq: security fix (CVE-2016-4074). Fixes #8809Leonardo Arena2018-04-302-7/+45
|
* main/clamav: security upgrade 0.99.4Leonardo Arena2018-04-112-40/+8
| | | | | | CVE-2018-0202, CVE-2018-1000085 Fixes #8695
* main/mariadb: security upgrade to 10.1.32Leonardo Arena2018-04-111-2/+12
| | | | | | | CVE-2017-10268, CVE-2017-10378, CVE-2017-15365, CVE-2018-2562 CVE-2018-2612, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668 Fixes #8689
* main/tiff: fix CVE-2018-5784prspkt2018-04-023-3/+135
| | | | fixes #8702
* main/openssl: security upgrade to 1.0.2o and rebuild depending pkgsAndy Postnikov2018-04-012-3/+7
| | | | | | Fixes CVE-2017-3738, CVE-2018-0739, CVE-2018-0733 Rebuilds packages that link openssl statically.
* main/zsh: fix CVE-2018-1071, CVE-2018-1083Jakub Jirutka2018-03-313-6/+85
|
* main/ruby: security upgrade to 2.4.4Natanael Copa2018-03-291-2/+9
| | | | | | | | | | | | | | | | | | | CVE-2017-17742: HTTP response splitting in WEBrick CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir CVE-2018-8777: DoS by large request in WEBrick CVE-2018-8778: Buffer under-read in String#unpack CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir fixes #8748
* main/uwsgi: security upgrade to 2.0.17 (CVE-2018-6758,CVE-2018-7490)Natanael Copa2018-03-271-3/+10
| | | | fixes #8735
* main/apache2: security upgrade to 2.4.33Kaarle Ritvanen2018-03-273-257/+11
| | | | fixes #8730
* main/kamailio: add secinfoLeonardo Arena2018-03-231-1/+3
| | | | Fixes #8719
* main/rsync: security upgrade to 3.1.3 (CVE-2018-5764)Natanael Copa2018-03-205-144/+6
| | | | fixes #8677
* main/kamailio: lcr - fixed checking if there is more uris available for next_gwLeonardo Arena2018-03-202-1/+29
|
* main/kamailio: tmx - allocate space to store ending 0 for branch valueLeonardo Arena2018-03-202-1/+26
|
* main/curl: upgrade to 7.59.0prspkt2018-03-191-3/+7
| | | | fixes #8645
* main/xen: upgrade to 4.8.3Henrik Riomar2018-03-1940-4349/+4
| | | | | | | https://www.xenproject.org/downloads/xen-archives/xen-project-48-series/xen-483.html Also remove some patches that has been dropped from APKBUILD (earlier) but still included as files.
* main/samba: security upgrade to 4.6.14Jakub Jirutka2018-03-151-2/+5
|
* main/ruby-bundler: upgrade to 1.15.4Jakub Jirutka2018-03-141-2/+2
|
* main/py-django: security upgrade to 1.11.11Leonardo Arena2018-03-121-3/+7
| | | | | | CVE-2018-7536, CVE-2018-7537 Fixes #8638
* main/xen: security fixesLeonardo Arena2018-03-125-1/+396
| | | | | | CVE-2018-7540, CVE-2018-7541, CVE-2018-7542 Fixes #8615
* main/mosquitto: security upgrade to 1.4.15Daniel Sabogal2018-03-041-2/+6
|
* main/postgresql: upgrade to 9.6.8Jakub Jirutka2018-03-021-2/+4
|
* main/patch: security fix (CVE-2016-10713)Leonardo Arena2018-02-282-1/+18
| | | | Partially fixes #8564
* main/patch: security fix (CVE-2018-6951)Leonardo Arena2018-02-282-5/+40
| | | | | | | Partially fixes #8564 Patch for CVE-2018-6952 not yet available: https://savannah.gnu.org/bugs/index.php?53133
* main/squid: security upgrade to 3.5.27Leonardo Arena2018-02-282-20/+13
| | | | | | CVE-2018-1000024, CVE-2018-1000027 Fixes #8552
* main/libtasn1: security fix (CVE-2018-6003)Leonardo Arena2018-02-282-2/+70
| | | | Fixes #8528
* main/xen: security fixesLeonardo Arena2018-02-275-1/+306
| | | | | | | | | CVE-2017-17566, XSA-248 CVE-2017-17563, XSA-249 CVE-2017-17564, XSA-250 CVE-2017-17565, XSA-251 Fixes #8521
* main/libvorbis: security fixes (CVE-2017-14632, CVE-2017-14633)dai9ah2018-02-273-2/+31
| | | | Fixes #8516
* main/curl: re-enable ssh supportNatanael Copa2018-02-271-1/+2
| | | | | | This was unintentionally disabled with the 7.58 upgrade. fixes #8575