Commits · 2.5-stable · alpine / aports

23 Oct, 2014 1 commit

main/xen: security upgrade to 4.2.5 and patches · 9cba7900

Natanael Copa authored Oct 23, 2014

The 4.2.5 release fixes:
CVE-2014-2599 / XSA-89 HVMOP_set_mem_access is not preemptible
CVE-2014-3124 / XSA-92 HVMOP_set_mem_type allows invalid P2M entries to be
                       created
CVE-2014-3967,CVE-2014-3968 / XSA-96 Vulnerabilities in HVM MSI injection
CVE-2014-4021 / XSA-100 Hypervisor heap contents leaked to guests

In addition we add patches for:
CVE-2014-7154 / XSA-104 Race condition in HVMOP_track_dirty_vram
CVE-2014-7155 / XSA-105 Missing privilege level checks in x86 HLT, LGDT,
                        LIDT, and LMSW emulation
CVE-2014-7156 / XSA-106 Missing privilege level checks in x86 emulation of
                        software interrupts
CVE-2014-7188 / XSA-108 Improper MSR range used for x2APIC emulation

fixes #3412
fixes #3457

9cba7900

22 Oct, 2014 2 commits
- main/dbus: security upgrade to 1.6.24... · 256f4e7e
  Natanael Copa authored Oct 22, 2014
```
main/dbus: security upgrade to 1.6.24 (CVE-2014-3635,CVE-2014-3636,CVE-2014-3637,CVE-2014-3638,CVE-2014-3639)

fixes #3449
```
  256f4e7e
- main/python: security upgrade to 2.7.8 (CVE-2014-7185) · 66f1812a
  Natanael Copa authored Oct 22, 2014
```
fixes #3462
```
  66f1812a
16 Oct, 2014 1 commit
- main/openssl: security upgrade to 1.0.1j (CVE-2014-3513,CVE-2014-3567,CVE-2014-3568) · f09cdaa2
  Natanael Copa authored Oct 16, 2014
```
fixes #3434
```
  f09cdaa2
02 Oct, 2014 1 commit
- main/bash: security upgrade to 4.2.051 (CVE-2014-7186,CVE-2014-7187) · c5620781
  Natanael Copa authored Oct 02, 2014
```
fixes #3408
```
  c5620781
01 Oct, 2014 2 commits
- main/sqiod: fix CVE-2014-6270, CVE-2014-7141 and CVE-2014-7142 · 9776eb2b
  Natanael Copa authored Oct 01, 2014
```
fixes #3388
```
  9776eb2b
- main/squid: security fix for CVE-2014-3609 · 9eecaa8c
  Natanael Copa authored Oct 01, 2014
```
fixes #3384
```
  9eecaa8c
30 Sep, 2014 4 commits
- main/perl-plack: security upgrade to 1.0031 (CVE-2014-5269) · 3e3e6984
  Natanael Copa authored Sep 30, 2014
```
fixes #3327
```
  3e3e6984
- main/perl-file-sharedir-install: new aport · 72783b11
  Natanael Copa authored Sep 30, 2014
```
Install shared files
http://search.cpan.org/dist/File-ShareDir-Install/
(cherry picked from commit 6861ecf0)
```
  72783b11
- main/bash: security upgrade to 4.2.50 (CVE-2014-7169) · 8e27e51f
  Natanael Copa authored Sep 30, 2014
```
fixes #3403
```
  8e27e51f
- main/mysql: upgrade to 5.5.40 · 1b31bef8
  Natanael Copa authored Sep 30, 2014
```
fixes #3393
```
  1b31bef8
27 Sep, 2014 1 commit
- main/bash: upgrade to 4.2.049 fixes CVE-2014-6271 for good · 24e6b409
  Leonardo Arena authored Sep 27, 2014
  
  24e6b409
25 Sep, 2014 1 commit
- main/bash: upgrade to 4.2.048 fixes CVE-2014-6271 · ad7e76b7
  Carlo Landmeter authored Sep 24, 2014 and Natanael Copa committed Sep 25, 2014
```
https://marc.info/?l=oss-security&m=141157106132018&w=2%20[marc.info]
```
  ad7e76b7
24 Sep, 2014 1 commit
- main/net-snmp: fix CVE-2014-3565 · 9b367343
  Natanael Copa authored Sep 24, 2014
```
fixes #3352
```
  9b367343
12 Sep, 2014 1 commit
- main/dhcpcd: fix CVE-2014-6060 · 6bdb184b
  Natanael Copa authored Sep 12, 2014
```
fixes #3357
```
  6bdb184b
10 Sep, 2014 1 commit
- main/procmail: security fix (CVE-2014-3618) · a697949d
  Natanael Copa authored Sep 10, 2014
```
ref #3361
fixes #3362
```
  a697949d
03 Sep, 2014 1 commit
- main/ffmpeg: security upgrade to 1.1.14 (CVE-2014-5271,CVE-2014-5272) · b8346d08
  Natanael Copa authored Sep 03, 2014
```
fixes #3315
```
  b8346d08
01 Sep, 2014 1 commit
- main/php: security upgrade to php-5.3.29 · 2e58e09c
  Natanael Copa authored Sep 01, 2014
```
fixes #3340
```
  2e58e09c
27 Aug, 2014 2 commits
- main/screen: remove suid bit · d6b832ad
  Natanael Copa authored Aug 27, 2014
```
fixes #3321
```
  d6b832ad
- main/screen: install default configuration files · beb4fc71
  Bartłomiej Piotrowski authored Dec 19, 2012 and Natanael Copa committed Aug 27, 2014
```
(cherry picked from commit b280db58)
```
  beb4fc71
26 Aug, 2014 1 commit
- main/xen: upgrade to 4.2.4 and fix XSA-97 (CVE-2014-5146,CVE-2014-5149) · 34cd3222
  Natanael Copa authored Aug 26, 2014
```
fixes #3291
```
  34cd3222
21 Aug, 2014 4 commits
- main/cups: security fix (CVE-2014-3537,CVE-2014-5029,5030,5031) · e2856516
  Natanael Copa authored Aug 21, 2014
```
fixes #3251
```
  e2856516
- main/libgcrypt: security upgrade to 1.5.4 (CVE-2014-5270) · 8009421a
  Natanael Copa authored Aug 21, 2014
```
fixes #3287
```
  8009421a
- main/cacti: fix from upstream for incomplete and incorrect input parsing · 1121624a
  Natanael Copa authored Aug 21, 2014
```
ref #3295
fixes #3296

http://svn.cacti.net/viewvc?view=rev&revision=7454
```
  1121624a
- main/cacti: security fix for CVE-2014-5025,CVE-2014-5026 · 4eef8e02
  Natanael Copa authored Jul 30, 2014
```
fixes #3256
```
  4eef8e02
07 Aug, 2014 1 commit

main/openssl: security ugprade to 1.0.1i (multiple CVE) · fca2b4fd

Timo Teräs authored Aug 07, 2014

CVE-2014-3508 Information leak in pretty printing functions
CVE-2014-5139 Crash with SRP ciphersuite in Server Hello message
CVE-2014-3509 Race condition in ssl_parse_serverhello_tlsext
CVE-2014-3505 Double Free when processing DTLS packets
CVE-2014-3506 DTLS memory exhaustion
CVE-2014-3507 DTLS memory leak from zero-length fragments
CVE-2014-3510 OpenSSL DTLS anonymous EC(DH) denial of service
CVE-2014-3511 OpenSSL TLS protocol downgrade attack
CVE-2014-3512 SRP buffer overrun

(cherry picked from commit a662e7df)

Conflicts:
	main/openssl/APKBUILD

fca2b4fd

25 Jul, 2014 1 commit
- main/lzo: security upgrade to 2.08 (CVE-2014-4607) · 690b96bd
  Natanael Copa authored Jul 25, 2014
```
fixes #3109
```
  690b96bd
22 Jul, 2014 2 commits
- main/gnupg: security upgrade to 2.0.24 (CVE-2014-4617) · c2e6588b
  Natanael Copa authored Jul 22, 2014
```
fixes #3093
```
  c2e6588b
- main/apache2: security upgrade to 2.4.10 (CVE-2014-0117,CVE-2014-0118,CVE-2014-0226,CVE-2014-0231) · 4de2cfda
  Natanael Copa authored Jul 22, 2014
```
fixes #3204
```
  4de2cfda
21 Jul, 2014 4 commits
- main/file: security upgrade to 5.19 (CVE-2014-3538) · 1b61a767
  Natanael Copa authored Jul 21, 2014
```
fixes #3224
```
  1b61a767
- main/mysql: security upgrade to 5.5.38 (CVE-2014-4258,CVE-2014-4260) · a138c157
  Natanael Copa authored Jul 21, 2014
```
fixes #3185
```
  a138c157
- main/perl-email-address: security upgrade to 1.905 (CVE-2014-0477,CVE-2014-4720) · 980b4d3a
  Natanael Copa authored Jul 21, 2014
```
fixes #3191
```
  980b4d3a
- main/transmission: security upgrade to 2.84 (CVE-2014-4909) · 070e5a66
  Natanael Copa authored Jul 21, 2014
```
fixes  #3180
```
  070e5a66
18 Jul, 2014 1 commit
- main/php: fix CVE-2014-4721 · ca28f9f2
  Natanael Copa authored Jul 18, 2014
```
fixes #3165
```
  ca28f9f2
16 Jul, 2014 4 commits
- main/audacious-plugins: rebuild against ffmpeg-1.1 · 82bdcb26
  Natanael Copa authored Jul 16, 2014
  
  82bdcb26
- main/freerdp: rebuild against ffmpeg-1.1 · a2189900
  Natanael Copa authored Jul 16, 2014
  
  a2189900
- main/vlc: upgrade to 2.0.9 · 441c8d9f
  Natanael Copa authored Jul 16, 2014
  
  441c8d9f
- main/ffmpeg: security upgrade to 1.1.12 (CVE-2014-4609,CVE-2014-4610) · 7d04d396
  Natanael Copa authored Jul 16, 2014
```
fixes #3120
```
  7d04d396
07 Jul, 2014 2 commits
- main/dbus: security upgrade to 1.6.22 (CVE-2014-3532,CVE-2014-3533) · 4e5e63df
  Natanael Copa authored Jul 07, 2014
```
fixes #3145
```
  4e5e63df
- main/cacti: security fix for various CVEs · f6419b1a
  Natanael Copa authored Jul 07, 2014
```
CVE-2014-2326
CVE-2014-2327
CVE-2014-2328
CVE-2014-2708
CVE-2014-2709
CVE-2014-4002

fixes #3126

(cherry picked from commit 151b7f5b)
```
  f6419b1a