Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | main/py-cryptography: fix missing dependencies | Jakub Jirutka | 2017-08-29 | 1 | -3/+3 | |
| | ||||||
* | main/py-packaging: move from community (needed for py-cryptography) | Jakub Jirutka | 2017-08-29 | 1 | -0/+49 | |
| | ||||||
* | main/libmspack: fix for CVE-2017-6419, CVE-2017-11423. Fixes #7757 | Francesco Colista | 2017-08-28 | 3 | -5/+117 | |
| | ||||||
* | main/openjpeg: fixed patch for CVE-2017-12982 | Francesco Colista | 2017-08-23 | 2 | -24/+14 | |
| | ||||||
* | main/openjpeg: security fix for CVE-2017-12982. Fixes #7713 | Francesco Colista | 2017-08-23 | 2 | -5/+36 | |
| | ||||||
* | main/kamailio: backport TLS mod patches for LibreSSL from OpenBSD | Sergey Safarov | 2017-08-23 | 3 | -1/+136 | |
| | | | | (cherry picked from commit 29b8e946b311e0f2712874bb73891477f8a74eaf) | |||||
* | main/kamailio: Updated package version to 5.0.2. Added kazoo module. | Sergey Safarov | 2017-08-23 | 6 | -268/+25 | |
| | | | | (cherry picked from commit ae11ee328c2d7ab250ccebff866c8c120c14775a) | |||||
* | main/lxterminal: security fix for CVE-2016-10369 | Daniel Sabogal | 2017-08-22 | 2 | -3/+35 | |
| | ||||||
* | main/newsbeuter: security fix for CVE-2017-12904 | Natanael Copa | 2017-08-22 | 2 | -2/+44 | |
| | | | | fixes #7727 | |||||
* | main/augeas: add secfix comment | Natanael Copa | 2017-08-22 | 1 | -0/+4 | |
| | ||||||
* | main/augeas: security upgrade to 1.8.1 (CVE-2017-7555) | Natanael Copa | 2017-08-22 | 1 | -2/+2 | |
| | | | | fixes #7720 | |||||
* | main/mariadb: security upgrade to 10.1.26 | Natanael Copa | 2017-08-19 | 1 | -3/+13 | |
| | | | | | | | | | | | | | fixes #7705 CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-3308 CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464 | |||||
* | main/mercurial: security upgrade to 4.3.1 | Natanael Copa | 2017-08-18 | 1 | -2/+6 | |
| | | | | | | | fixes #7692 CVE-2017-1000115 CVE-2017-1000116 | |||||
* | main/pcre: security upgrade to 8.41 | Natanael Copa | 2017-08-18 | 2 | -63/+8 | |
| | | | | | | CVE-2017-7244 CVE-2017-7245 CVE-2017-7246 | |||||
* | main/supervisor: security upgrade to 3.2.4 (CVE-2017-11610). Fixes #7686 | Francesco Colista | 2017-08-17 | 1 | -5/+10 | |
| | ||||||
* | main/goaccess: re-enable geoip | Natanael Copa | 2017-08-15 | 1 | -2/+2 | |
| | | | | | | fixes #7587 (cherry picked from commit 79289613b08a2dc8e54e52e92844ad900cb97dc1) | |||||
* | main/mkinitfs: fix crc32 module deps for ext4 | Natanael Copa | 2017-08-14 | 2 | -2/+37 | |
| | | | | | | fixes #7611 (cherry picked from commit 32dd6f16bf1645ffdf1f6019575fc130702fa047) | |||||
* | main/c-ares: fix for CVE-2017-1000381. Fixes #7526 | Francesco Colista | 2017-08-14 | 2 | -5/+52 | |
| | ||||||
* | main/subversion: security upgrade to 1.9.7. Fixes #7668 | Francesco Colista | 2017-08-14 | 1 | -4/+9 | |
| | ||||||
* | main/libressl: upgrade to 2.5.5 | Ole-Martin Bratteng | 2017-08-14 | 1 | -2/+2 | |
| | | | | fixes #7683 | |||||
* | main/postgresql: security upgrade to 9.6.4 ↵ | Natanael Copa | 2017-08-14 | 1 | -2/+6 | |
| | | | | | | (CVE-2017-7546,CVE-2017-7547,CVE-2017-7548) fixes #7661 | |||||
* | main/libsoup: security upgrade to 2.58.2 | Francesco Colista | 2017-08-14 | 2 | -2/+63 | |
| | | | | | | CVE-2017-2885 Fixes #7677 | |||||
* | main/lame: fix secfixes comment | Natanael Copa | 2017-08-14 | 1 | -1/+1 | |
| | ||||||
* | main/curl: security upgrade to 7.55.0 | Natanael Copa | 2017-08-14 | 3 | -199/+44 | |
| | | | | | | | | CVE-2017-1000099 CVE-2017-1000100 CVE-2017-1000101 fixes #7654 | |||||
* | main/git: update to 2.13.5 (CVE-2017-1000117) | Shiz | 2017-08-11 | 1 | -2/+6 | |
| | ||||||
* | main/spamassassin: sa-update needs curl or gnu wget. Fixes #7610 | Francesco Colista | 2017-08-09 | 1 | -12/+2 | |
| | ||||||
* | main/samba: fix for CVE-2017-11103. Fixes #7533 | Francesco Colista | 2017-08-09 | 2 | -3/+48 | |
| | ||||||
* | main/memcached: fix for CVE-2017-9951. Fixes #7641 | Francesco Colista | 2017-08-09 | 2 | -3/+51 | |
| | ||||||
* | main/libsndfile: fix for CVE-2017-12562. Fixes #7647 | Francesco Colista | 2017-08-09 | 2 | -2/+102 | |
| | ||||||
* | main/libmtp: security fix to 1.1.13 | Francesco Colista | 2017-08-09 | 1 | -4/+10 | |
| | | | | | | CVE-2017-9831 CVE-2017-9832 Fixes #7551 | |||||
* | main/spice: fix for CVE-2017-7506 | Francesco Colista | 2017-08-08 | 2 | -3/+163 | |
| | | | | | | | | | | | There's no reference to bugs.alpinelinux.org for this alpine version (3.6). Still, it's vulnerable. Backported patches from gentoo: * https://gitweb.gentoo.org/repo/gentoo.git/tree/app-emulation/spice/files/spice-0.13.3-reds-Disconnect-when-receiving-overly-big-ClientMoni.patch * https://gitweb.gentoo.org/repo/gentoo.git/tree/app-emulation/spice/files/spice-0.13.3-reds-Avoid-integer-overflows-handling-monitor-config.patch * https://gitweb.gentoo.org/repo/gentoo.git/tree/app-emulation/spice/files/spice-0.13.3-reds-Avoid-buffer-overflows-handling-monitor-configu.patch | |||||
* | main/mpg123: security upgrade to 1.25.4 (CVE-2017-9545,CVE-2017-11126) | Natanael Copa | 2017-08-07 | 1 | -2/+7 | |
| | | | | fixes #7595 | |||||
* | main/ncurses: fix for CVE-2017-10684 and CVE-2017-10685. Fixes #7564 | Francesco Colista | 2017-08-07 | 2 | -5/+215 | |
| | ||||||
* | main/bind: fix for CVE-2017-3142 and CVE-2017-3143. Fixes #7497 | Francesco Colista | 2017-08-07 | 1 | -2/+2 | |
| | ||||||
* | main/bind: fix for CVE-2017-3142 and CVE-2017-3143. Fixes #7497 | Francesco Colista | 2017-08-07 | 2 | -2/+291 | |
| | ||||||
* | main/jasper: security fix CVE-2017-1000050. Fixes #7573 | Francesco Colista | 2017-08-07 | 2 | -11/+24 | |
| | ||||||
* | main/tiff: security upgrade to 4.0.8. Fixes #7482 | Francesco Colista | 2017-08-07 | 3 | -42/+138 | |
| | ||||||
* | main/varnish: security fix CVE-2017-12425 | Francesco Colista | 2017-08-07 | 2 | -4/+121 | |
| | ||||||
* | main/tcpdump: security update to 4.9.1. Fixes #7634 | Francesco Colista | 2017-08-07 | 1 | -6/+51 | |
| | ||||||
* | main/lame: security fixes: | Francesco Colista | 2017-08-07 | 4 | -5/+74 | |
| | | | | | | | | | | * CVE-2015-9099 * CVE-2015-9100 * CVE-2017-9410 * CVE-2017-9411 * CVE-2017-9412 * CVE-2017-11720 Fixes #7627 | |||||
* | main/libtasn1: fix CVE-2017-10790. Fixes #7602 | Francesco Colista | 2017-08-03 | 2 | -5/+64 | |
| | ||||||
* | main/busybox: Fixed segfault in microcom | Marian Buschsieweke | 2017-08-03 | 2 | -1/+34 | |
| | | | | | | | | microcom does not check if required parameter "TTY" is present. Thus, bb_basename() is called with a NULL pointer, if microcom is started without any parameter. This in turn calls strlen() on this NULL pointer, resulting in a segfault. The supplied patch adds a check for the missing TTY parameter and prints usage when it is missing. | |||||
* | main/ffmpeg: upgrade to 3.2.6 | Timo Teräs | 2017-07-28 | 1 | -3/+3 | |
| | ||||||
* | main/openssh: fix secfixes comment | Natanael Copa | 2017-07-20 | 1 | -1/+0 | |
| | | | | (cherry picked from commit d9b200e3dd0b2a723993f2e6d625bdd54e96a041) | |||||
* | main/libidn: fix secfixes comment | Natanael Copa | 2017-07-20 | 1 | -4/+4 | |
| | | | | (cherry picked from commit 8a25e031b07b773c4abdabe2f55faf44b187ea5a) | |||||
* | main/lcms2: fix indentation of secfixes comment | Natanael Copa | 2017-07-20 | 1 | -2/+2 | |
| | | | | (cherry picked from commit 514646bd5fbeb993692f17edac8c7e62dd6366a7) | |||||
* | abuild: backport sanitycheck of secfixes comment | Natanael Copa | 2017-07-20 | 2 | -2/+57 | |
| | ||||||
* | main/bacula: move client init scripts into client subpkg | Leonardo Arena | 2017-07-20 | 1 | -2/+6 | |
| | | | | (cherry picked from commit 2ec19441452ea5fc8cdc7432709ebc0d2f917b85) | |||||
* | main/heimdal: security fix CVE-2017-11103 | Leonardo Arena | 2017-07-18 | 2 | -14/+40 | |
| | | | | Fixes #7539 | |||||
* | main/apache2: security upgrade to 2.4.27 | Kaarle Ritvanen | 2017-07-16 | 1 | -2/+4 | |
| |