Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | main/ldb: security upgrade to 1.3.5 (CVE-2018-1140) | Leonardo Arena | 2018-08-22 | 3 | -29/+387 | |
| | | | | Fixes #9256 | |||||
* | main/krb5: security upgrade to 1.15.3 ↵ | Natanael Copa | 2018-08-21 | 1 | -3/+9 | |
| | | | | | | (CVE-2017-15088,CVE-2018-5709,CVE-2018-5710) fixes #9301 | |||||
* | main/wpa_supplicant: bump pkgrel | Natanael Copa | 2018-08-21 | 1 | -1/+1 | |
| | ||||||
* | main/wpa_supplicant: security fix (CVE-2018-14526) | Natanael Copa | 2018-08-21 | 2 | -0/+48 | |
| | | | | fixes #9220 | |||||
* | main/ncurses: upgrade to 6.1_p20180818 | Natanael Copa | 2018-08-21 | 1 | -5/+7 | |
| | | | | fixes #9282 | |||||
* | main/apk-tools: backport fix for --no-network | Natanael Copa | 2018-08-21 | 2 | -3/+35 | |
| | | | | | prevent update repository index when --no-network is specified. fixes #9126 | |||||
* | main/apache2: security upgrade to 2.4.34 | Andy Postnikov | 2018-08-20 | 2 | -23/+27 | |
| | | | | fixes #9264 | |||||
* | main/apk-tools: don't update index on delete | Natanael Copa | 2018-08-17 | 2 | -3/+78 | |
| | | | | | | | | backport from upstream fixes #9063 (cherry picked from commit 09b110fc99a36f12c0b49e6029a231a231ce920d) | |||||
* | main/apk-tools: fix `apk list -i` segfault | Sören Tempel | 2018-08-17 | 2 | -3/+50 | |
| | | | | (cherry picked from commit 4dccdfb8689395565f47c661b1b1acea485f8530) | |||||
* | main/nodejs: security upgrade to 8.11.4 | Tim Brust | 2018-08-16 | 1 | -3/+5 | |
| | ||||||
* | main/gnupg1: security upgrade to 1.4.23 (CVE-2017-7526) | tcely | 2018-08-16 | 2 | -47/+6 | |
| | | | | (cherry picked from commit 6895452f9306041d563023e9fae6b77ac6c27dae) | |||||
* | main/python2: split out wininst*.exe | Natanael Copa | 2018-08-16 | 1 | -2/+10 | |
| | | | | | | | | | | | The wininst is only needed for creating binary distribution for windows and is rarely needed, if ever. The precompiled .exe files contains statically linked version of zlib 1.2.8 which is vulnerable. Remove them from main package and save a couple of MB, like we did with python3 (commit c3f535e2460f82e36facf515d906accf0a0a2f7b). (cherry picked from commit 9d42714569a43a815f04bddbfc4c5526a8bbac9a) | |||||
* | main/clamav: upgrade to 0.100.1 (CVE-2017-16932,CVE-2018-0360,CVE-2018-0361) | Carlo Landmeter | 2018-08-13 | 1 | -3/+7 | |
| | | | | fixes #9168 | |||||
* | main/redis: upgrade to 4.0.11 | Andy Postnikov | 2018-08-10 | 1 | -3/+3 | |
| | ||||||
* | main/postgresql: security upgrade to 10.5 | Andy Postnikov | 2018-08-10 | 1 | -2/+5 | |
| | | | | CVE-2018-10915 CVE-2018-10925 | |||||
* | main/ruby-bundler: fix missing dependency on ruby-etc | Jakub Jirutka | 2018-08-09 | 1 | -2/+2 | |
| | | | | Fixes #9216 <https://bugs.alpinelinux.org/issues/9216> | |||||
* | main/mini_httpd: Fix cgi bug breaking ACF logon | Ted Trask | 2018-08-08 | 2 | -2/+15 | |
| | | | | (cherry picked from commit 22b198e7f8bbdf04f28682bf286a89921d4c3a44) | |||||
* | main/mupdf: upgrade to 1.13.0 | prspkt | 2018-08-08 | 2 | -22/+19 | |
| | | | | | | | | add secfixes comments fixes #8580 (cherry picked from commit 831d2ee24986330048dfa488c8bb5017656e8efd) | |||||
* | main/p7zip: security fixes (CVE-2018-5996, CVE-2018-10115) | Natanael Copa | 2018-08-08 | 3 | -5/+545 | |
| | | | | fixes #8532 | |||||
* | main/lxc: fix CVE-2018-6556 | Jakub Jirutka | 2018-08-06 | 2 | -2/+129 | |
| | ||||||
* | main/py-django: security upgrade to 1.11.15 (CVE-2018-14574) | Natanael Copa | 2018-08-06 | 1 | -2/+4 | |
| | | | | fixes #9175 | |||||
* | main/cgit: fix secfixes comment | Natanael Copa | 2018-08-04 | 1 | -2/+2 | |
| | ||||||
* | main/cgit: fix CVE-2018-14912 | Natanael Copa | 2018-08-04 | 2 | -2/+70 | |
| | ||||||
* | main/kamailio: add secfixes comment | Natanael Copa | 2018-08-02 | 1 | -0/+4 | |
| | ||||||
* | main/tiff: various security fixes | Natanael Copa | 2018-08-01 | 5 | -2/+283 | |
| | | | | | | | | | | - CVE-2017-9935 - CVE-2017-11613 - CVE-2017-17095 - CVE-2018-10963 fixes #8240 fixes #9163 | |||||
* | main/redis: create /run/redis if OpenRC is not present | Jakub Jirutka | 2018-07-30 | 2 | -2/+13 | |
| | | | | | Fixes #9146 <https://bugs.alpinelinux.org/issues/9146> Fixes #9113 <https://bugs.alpinelinux.org/issues/9113> | |||||
* | main/dhcpcd: upgrade to 7.0.7 | Natanael Copa | 2018-07-30 | 1 | -2/+2 | |
| | | | | fixes #9030 | |||||
* | main/fuse: security upgrade to 2.9.8 (CVE-2018-10906) | Natanael Copa | 2018-07-30 | 1 | -3/+7 | |
| | | | | fixes #9152 | |||||
* | main/kamailio: upgrade to 5.1.4 | Leonardo Arena | 2018-07-30 | 1 | -2/+2 | |
| | ||||||
* | main/libvorbis: security fix for CVE-2018-10392 | Natanael Copa | 2018-07-30 | 2 | -3/+33 | |
| | | | | fixes #9141 | |||||
* | main/pkgconf: upgrade to 1.5.3 (security fix, CVE pending) | William Pitcock | 2018-07-28 | 1 | -2/+2 | |
| | ||||||
* | main/zip: add unzip to depends | Natanael Copa | 2018-07-27 | 1 | -2/+2 | |
| | | | | | | unzip is needed by `zip -T` fixes #8003 | |||||
* | main/mutt: security upgrade to 1.10.1 | Natanael Copa | 2018-07-24 | 1 | -2/+17 | |
| | | | | | | | | CVE-2018-14349, CVE-2018-14350, CVE-2018-14351, CVE-2018-14352, CVE-2018-14353, CVE-2018-14354, CVE-2018-14355, CVE-2018-14356, CVE-2018-14357, CVE-2018-14358, CVE-2018-14359, CVE-2018-14362 fixes #9129 | |||||
* | main/libxfont: fix secfixes comment | Natanael Copa | 2018-07-24 | 1 | -1/+1 | |
| | ||||||
* | main/lame: fix secfixes comment | Natanael Copa | 2018-07-24 | 1 | -1/+1 | |
| | ||||||
* | main/dovecot: fix init script to not print irrelevant error | Jakub Jirutka | 2018-07-23 | 2 | -3/+3 | |
| | | | | doveconf: Error: t_readlink(/run/dovecot/dovecot.conf) failed: readlink() failed: No such file or directory | |||||
* | main/opensmtpd: fix segfault in crypt_checkpass | Jakub Jirutka | 2018-07-22 | 2 | -2/+48 | |
| | ||||||
* | main/mqtt-exec: backport password auth support | Natanael Copa | 2018-07-18 | 3 | -78/+92 | |
| | | | | and remove unused patch | |||||
* | main/znc: security upgrade to 1.7.1 (CVE-2018-14055,CVE-2018-14056) | Natanael Copa | 2018-07-18 | 1 | -2/+7 | |
| | | | | fixes #9101 | |||||
* | main/openssl: cherry-pick fix for CVE-2018-0737 | Timo Teräs | 2018-07-18 | 2 | -2/+34 | |
| | | | | fixes #8813 | |||||
* | main/asterisk: security upgrade to 15.5.0 | Timo Teräs | 2018-07-18 | 1 | -3/+3 | |
| | | | | | | AST-2018-007: Infinite loop when reading iostreams AST-2018-008: PJSIP endpoint presence disclosure when using ACL (cherry picked from commit 40fd8ce8d8419d7627964e69c29ea7c30b65a953) | |||||
* | main/busybox: fix deinstall script for busybox-extras | Natanael Copa | 2018-07-17 | 2 | -2/+2 | |
| | | | | | | fixes #9037 (cherry picked from commit 9e52fe232d0904c340f2d0f03b7ed71158dbc624) | |||||
* | main/varnish: fix stack overflow in waiter epoll | Natanael Copa | 2018-07-17 | 2 | -1/+41 | |
| | | | | | | fixes #9094 (cherry picked from commit c6d52d062a5bbe29c59b6b49a4e823a423212581) | |||||
* | main/py-sphinx_rtd_theme: upgrade to 0.4.0 | André Klitzing | 2018-07-16 | 1 | -5/+11 | |
| | ||||||
* | main/libgit2: security upgrade to 0.27.3 | prspkt | 2018-07-14 | 1 | -2/+5 | |
| | | | | Fixes CVE-2018-10887, CVE-2018-10888 | |||||
* | main/duplicity: fix dependencies and add check | Jean-Louis Fuchs | 2018-07-13 | 1 | -1/+9 | |
| | ||||||
* | main/py2-fasteners: new aport | Jean-Louis Fuchs | 2018-07-13 | 1 | -0/+30 | |
| | | | | needed by duplicity | |||||
* | main/py2-monotonic: new aport | Jean-Louis Fuchs | 2018-07-13 | 1 | -0/+29 | |
| | | | | needed by duplicity | |||||
* | main/curl: upgrade to 7.61.0, add secfixes comment | prspkt | 2018-07-13 | 1 | -3/+5 | |
| | ||||||
* | main/strongswan: fix libressl compatibility | Kaarle Ritvanen | 2018-07-11 | 2 | -1/+59 | |
| | | | | | fixes #8919 fixes #9070 |