aboutsummaryrefslogtreecommitdiffstats
path: root/main
Commit message (Collapse)AuthorAgeFilesLines
...
* main/haveged: rework init dependenciesMatt Merhar2019-05-062-3/+4
| | | | | | | | | | haveged does not require any network connectivity to function, and this errant dependency can cause the daemon to not start properly at boot. This also adds urandom / localmount, bringing the init script in sync with those from rng-tools and jitterentropy-rngd. (cherry picked from commit caec29f551955d6a6392943708652db0f8bc4a17)
* main/libpng: upgrade to 1.6.37Leo2019-05-061-7/+19
| | | | | | | | | | | - Add secfixes CVE-2019-7317 CVE-2018-14048 CVE-2018-14550 - Remove pkg-config detected depends_dev - Split $pkgname-static fixes #10362
* main/imagemagick: security upgrade to 7.0.8-44J0WI2019-05-061-2/+6
|
* main/bind: fix build on non-x86Natanael Copa2019-05-022-1/+136
| | | | | | | | | | fixes build error on various architectures: /usr/lib/gcc/s390x-alpine-linux-musl/8.3.0/../../../../s390x-alpine-linux-musl/bin/ld: ../../lib/ns/.libs/libns.so: undefined reference to `isc_atomic_xadd' https://lists.isc.org/pipermail/bind-users/2019-April/101673.html https://gitlab.isc.org/isc-projects/bind9/commit/d72f436b7d7c697b262968c48c2d7643069ab17f
* main/bind: security upgrade to 9.12.4_p1 (CVE-2018-5743,CVE-2019-6467)Natanael Copa2019-05-021-6/+40
| | | | | | | | | | | | | This release introduced 3 new tools with python dependency (dnssec-checkdns, dnssec-coverage and dnssec-keymgr). Move those tools to a subpackage, bind-dnssec-tools, to avoid unexpectedly pull in python as dependency for stable upgraders. There are other tools in bind-tools that belongs to bind-dnssec-tools, but we dont move those in a stable branch to avoid breaking things for current users. fixes #10368
* main/py3-ply: new aporttcely2019-04-301-0/+36
| | | | | | | https://www.dabeaz.com/ply/ Python Lex & Yacc needed by bind
* main/freeradius: security fixes (CVE-2019-11234, CVE-2019-11235)Leonardo Arena2019-04-252-3/+99
| | | | Fixes #10325
* main/bind: bump pkgrelHenrik Riomar2019-04-231-1/+1
| | | | missing in last change
* main/openssh: after entropyHenrik Riomar2019-04-232-2/+3
| | | | (cherry picked from commit a858616e75eeaa241581db413c2f750611e938d3)
* main/unbound: after entropyHenrik Riomar2019-04-222-3/+3
| | | | (cherry picked from commit db18b4c886bd03a942e1c7bdbcf4e2e5d30fed7f)
* main/haveged: more samples in check()Henrik Riomar2019-04-222-3/+34
| | | | | | | | | Decrease the probability of a failing Chi-Square test by doubling the sample size used. While at it add openrc subpkg (cherry picked from commit 65662ceedf9c895da8e96d9cdba7a68f9cfe8740)
* main/haveged: add missing provideHenrik Riomar2019-04-222-2/+3
| | | | | | haveged provides entropy (cherry picked from commit c79b99c2f4aba28da0149805ecba283590cd9265)
* main/bind: fix slow startHenrik Riomar2019-04-222-2/+2
| | | | | | | named-checkconf needs entropy to start, or else it will take up to a minute to start at boot. (cherry picked from commit 62bda4345a9fc41bf290b11abcc58e31408e4e49)
* main/clamav: security upgrade to 0.100.3Leonardo Arena2019-04-171-2/+6
| | | | | | CVE-2019-1787, CVE-2019-1788, CVE-2019-1789 Fixes #10263
* main/wpa_supplicant: security fixesLeonardo Arena2019-04-1714-1/+1962
| | | | | | CVE-2019-9494, CVE-2019-9495, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499 Fixes #10242
* main/wpa_supplicant: fix slow startHenrik Riomar2019-04-172-3/+3
| | | | wpa_supplicant needs entropy
* main/libxslt: security fix for CVE-2019-11068Natanael Copa2019-04-172-4/+129
| | | | fixes #10278
* main/libxslt: upgrade to 1.1.33Natanael Copa2019-04-171-2/+2
|
* main/samba: attempt to fix build on armv7Leonardo Arena2019-04-152-1/+41
| | | | https://bugzilla.samba.org/show_bug.cgi?id=12147
* main/samba: security upgrade to 4.8.11J0WI2019-04-151-3/+6
| | | | | | | | CVE-2018-14629, CVE-2019-3880 Fixes #10247 Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
* main/ldb: upgrade to 1.3.8J0WI2019-04-153-33/+26
|
* main/imagemagick: use the upstream source, not a mirrorLeonardo Arena2019-04-151-1/+1
|
* main/imagemagick: security upgrade to 7.0.8.38J0WI2019-04-151-3/+9
| | | | CVE-2019-9956, CVE-2019-10649, CVE-2019-10650
* main/tzdata: upgrade to 2019aJ0WI2019-04-151-4/+4
|
* main/bind: bump pkgrel for reverted committcely2019-04-151-1/+1
|
* main/bind: security upgrade to 9.12.3_p4tcely2019-04-151-4/+9
| | | | | | | | | | | | | | | | | | | https://ftp.isc.org/isc/bind9/9.12.3-P4/RELEASE-NOTES-bind-9.12.3-P4.html - CVE-2019-6465 - CVE-2018-5745 - CVE-2018-5744 - CVE-2018-5740 - CVE-2018-5738 - CVE-2018-5737 - CVE-2018-5736 Fixes #10166 BIND is open source software licenced under the terms of the Mozilla Public License, version 2.0 (see the LICENSE file for the full text). BIND 9.12 will be supported until at least May, 2019.
* Revert "main/bind: security upgrade to 9.12.3-P4"tcely2019-04-151-6/+2
| | | | This reverts commit a72d66cd67f20dec8e4eb3d6f2b387a11a0bfbf8.
* main/libsndfile: update CVE-2018-19758 fix from upstreamalpine-mips-patches2019-04-122-20/+13
| | | | | | | | The CVE-2018-19758.patch is now a merge of relevant bits from two upstream commits: 42132c543358cee9f7c3e9e9b15bb6c1063a608e 6d7ce94c020cc720a6b28719d1a7879181790008 Fixes #10107
* main/gnutls: security upgrade to 3.6.7J0WI2019-04-121-2/+5
|
* main/gnutls: upgrade to 3.6.6J0WI2019-04-122-11/+10
|
* main/gnutls: upgrade to 3.6.5J0WI2019-04-121-3/+3
|
* main/bind: security upgrade to 9.12.3-P4tcely2019-04-121-2/+6
| | | | | | | | - CVE-2019-6465 - CVE-2018-5745 - CVE-2018-5744 Fixes #10166
* main/alpine-conf: include associated firmware files to modloopTimo Teräs2019-04-112-2/+38
| | | | | | ref #9549 (cherry picked from commit 96bda76be60e16d17e26feb82e7686a865b6695c)
* main/linux-firmware: upgrade to 20190322, update rpi firmwaresTimo Teräs2019-04-111-32/+35
| | | | | | | | | | * update rpi wifi firmware, use better source * update rpi bluetooth firmware * purge additional source code files ref #9549 (cherry picked from commit 0a01a2870e96c61b8bf6ecb2d98f4acb629c36d8)
* ==== release 3.9.3 ====v3.9.3Natanael Copa2019-04-081-1/+1
|
* main/python3: rebuild with gcc 8.3.0Natanael Copa2019-04-081-1/+1
| | | | | | | Rebuilding python with gcc 8.3.0 fixes segfault with aarch64 build on rpi3. fixes #9981
* main/gcc: upgrade to 8.3.0Natanael Copa2019-04-081-3/+3
| | | | | | | | rebuilding gcc 8.3.0 seems to fix aarch64 python3 running on rpi3. ref #9981 (cherry picked from commit d51e013bca5601e50443c35b9c23a26ec744f73b)
* main/linux-rpi: upgrade to 4.19.34Natanael Copa2019-04-081-3/+3
| | | | (cherry picked from commit 16904a10088355ac3782ef554727aaa3d2895973)
* main/zfs-vanilla: rebuild against kernel 4.19.34-r0Natanael Copa2019-04-081-1/+1
|
* main/xtables-addons-vanilla: rebuild against kernel 4.19.34-r0Natanael Copa2019-04-081-1/+1
|
* main/spl-vanilla: rebuild against kernel 4.19.34-r0Natanael Copa2019-04-081-1/+1
|
* main/drbd9-vanilla: rebuild against kernel 4.19.34-r0Natanael Copa2019-04-081-1/+1
|
* main/devicemaster-linux-vanilla: rebuild against kernel 4.19.34-r0Natanael Copa2019-04-081-1/+1
|
* main/dahdi-linux-vanilla: rebuild against kernel 4.19.34-r0Natanael Copa2019-04-081-1/+1
|
* main/linux-vanilla: upgrade to 4.19.34Natanael Copa2019-04-081-2/+2
|
* main/gd: disable tests for more archesLeonardo Arena2019-04-081-2/+2
| | | | | FAIL: gdimagecopyresampled/bug00201 FAIL: gdimagegrayscale/basic
* main/gd: modernize and add security patchesJ0WI2019-04-085-46/+310
| | | | | | CVE-2018-5711, CVE-2019-6977, CVE-2019-6978 Fixes #10084
* main/putty: on arm* and aarch64 needs linux-headersLeonardo Arena2019-04-081-1/+2
|
* main/putty: security upgrade to 0.71Leonardo Arena2019-04-082-8/+18
| | | | | | | | CVE-2019-9894, CVE-2019-9895, CVE-2019-9897, CVE-2019-9898 Fixes #10194 Update license, disable check
* main/wget: security upgrade to 1.20.3 (CVE-2019-5953)Leonardo Arena2019-04-081-2/+2
| | | | Fixes #10211