Commits · 3.2-stable · alpine / aports

07 Jun, 2021 1 commit
- main/weechat: fix secfixes data for CVE-2017-8073 · 95b875ef
  Ariadne Conill authored Jun 07, 2021
  
  95b875ef
18 Dec, 2020 1 commit
- main/openssh: security fix for CVE-2016-1907 and CVE-2015-8325 · a5504c22
  Francesco Colista authored Dec 18, 2020
  
  a5504c22
21 Feb, 2020 4 commits
- main/libbsd: fix secfixes yml · e388cdee
  Carlo Landmeter authored Feb 21, 2020
  
  e388cdee
- main/tiff: fix secfixes ident · ea14bc78
  Carlo Landmeter authored Feb 21, 2020
  
  ea14bc78
- main/phpmyadmin: fix secfixes ident · e3226bf7
  Carlo Landmeter authored Feb 21, 2020
  
  e3226bf7
- main/curl: fix secfixes ident · 7079fe21
  Carlo Landmeter authored Feb 21, 2020
  
  7079fe21
06 Nov, 2018 1 commit
- main/icecast: security upgrade to 2.4.4 (CVE-2018-18820) · 10ee65fe
  Andy Postnikov authored Nov 05, 2018 and Francesco Colista committed Nov 06, 2018
  
  10ee65fe
10 Sep, 2018 1 commit
- main/apk-tools: security upgrade to 2.6.10 · d26415e8
  Timo Teräs authored Sep 10, 2018
  
  d26415e8
01 Aug, 2018 1 commit
- main/kamailio: security fix · bc87f726
  Leonardo Arena authored Aug 01, 2018
```
https://skalatan.de/blog/advisory-hw-2018-05
```
  bc87f726
15 Apr, 2018 2 commits
- main/busybox: add /etc/securetty · 2ef5366e
  Natanael Copa authored Dec 15, 2015 and Kaarle Ritvanen committed Apr 15, 2018
  
  2ef5366e
- main/busybox: add patch for /etc/securetty support in su · e722fd49
  Natanael Copa authored Dec 07, 2015 and Kaarle Ritvanen committed Apr 15, 2018
```
This makes it possible to have blank root passwords in container setups.
```
  e722fd49
29 Nov, 2017 1 commit
- main/kamailio: cherry-pick two mtree fixes from upstream · 29d4f7a7
  Timo Teräs authored Nov 29, 2017
  
  29d4f7a7
23 Oct, 2017 1 commit
- main/musl: fix CVE-2017-15650 · 4e5130b4
  Natanael Copa authored Oct 23, 2017
```
fixes #8035
```
  4e5130b4
05 Sep, 2017 1 commit
- main/ffmpeg: security upgrade to 2.6.9 · 5706cf04
  Timo Teräs authored Sep 05, 2017
```
fixes #6873 (to the extent possible)
```
  5706cf04
28 Aug, 2017 1 commit
- main/expat: fix for CVE-2012-6702, CVE-2016-5300 by upgrade to 2.2.0 · 3398d0dd
  Francesco Colista authored Aug 28, 2017
```
fixes #6892
```
  3398d0dd
07 Jul, 2017 1 commit
- main/captagent: rebuild · c2a1a890
  Kaarle Ritvanen authored Jul 07, 2017
  
  c2a1a890
06 Jul, 2017 1 commit
- community/captagent: backport from v3.3 · 21c087d3
  Kaarle Ritvanen authored Jul 06, 2017
  
  21c087d3
23 Jun, 2017 1 commit
- main/apk-tools: security upgrade to 2.6.9 · 3a06b955
  Timo Teräs authored Jun 23, 2017
```
CVE-2017-9669, CVE-2017-9671
```
  3a06b955
16 Jun, 2017 5 commits
- main/libxml2: fix for CVE-2017-5969 · 23378989
  Natanael Copa authored Jun 16, 2017
```
fixes #6856
```
  23378989
- main/xen: security fixes #6919 (XSA-207, CVE-2017-2615, CVE-2017-2620) · 108d798f
  Leonardo Arena authored Jun 16, 2017
  
  108d798f
- main/gdk-pixbuf: security fix (CVE-2017-6314) · 3fcc32c9
  Leonardo Arena authored Jun 16, 2017
```
Partially fixes #6958

CVE-2017-6311-2: patches don't apply
CVE-2017-6313: fix N/A, https://bugzilla.gnome.org/show_bug.cgi?id=779016
```
  3fcc32c9
- main/putty: security upgrade to 0.68 (CVE-2017-6542) · 40b12caf
  Leonardo Arena authored Jun 16, 2017
```
Fixes #7077
```
  40b12caf
- main/libsamplerate: security upgrade to 0.1.9 (CVE-2017-7697) · 5fec09c7
  Leonardo Arena authored Jun 16, 2017
```
Fixes #7166
```
  5fec09c7
15 Jun, 2017 3 commits
- main/freetype: security fixes #7270 · e4bb22b9
  Leonardo Arena authored Jun 15, 2017
```
CVE-2016-10244, CVE-2017-8105, CVE-2017-8287
```
  e4bb22b9
- main/xen: security fixes #7292 · 379c5299
  Leonardo Arena authored Jun 15, 2017
```
CVE-2017-8903, CVE-2017-8904, CVE-2017-8905
```
  379c5299
- main/strongswan: security fixes (CVE-2017-9022, CVE-2017-9023) · 73c141f3
  Leonardo Arena authored Jun 15, 2017
  
  73c141f3
13 Jun, 2017 1 commit
- main/dropbear: security upgrade to 2017.75 (CVE-2017-9078, CVE-2017-9079) · 9ee60284
  Leonardo Arena authored Jun 13, 2017
```
Fixes #7302
```
  9ee60284
07 Jun, 2017 1 commit
- main/acf-provisioning: upgrade to 0.8.16 · 391c3e82
  Ted Trask authored Jun 07, 2017
```
(cherry picked from commit 232f8d08)
```
  391c3e82
30 May, 2017 1 commit
- main/ghostscript: security upgrade (CVE-2017-5951, CVE-2017-7207, CVE-2017-8291). Fixes #7313 · 84d9d1ac
  Francesco Colista authored May 30, 2017
  
  84d9d1ac
19 May, 2017 1 commit

main/libsndfile: security upgrade to 1.0.28 - fixes #7153 · 6916b57a

Francesco Colista authored May 19, 2017

CVE-2017-7585: Stack-based buffer overflow in flac_buffer_copy()
CVE-2017-7741: invalid memory WRITE
CVE-2017-7742: invalid memory READ

6916b57a

02 May, 2017 2 commits
- main/samba: security fixes #7054 (CVE-2017-2619) · c25c75b8
  Leonardo Arena authored May 02, 2017
  
  c25c75b8
- main/pidgin: security fixes #7004 (CVE-2017-2640) · 87a89a21
  Leonardo Arena authored May 02, 2017
  
  87a89a21
28 Apr, 2017 2 commits
- main/roundcubemail: security upgrade to 1.1.9 (CVE-2017-8114) · de51ff3d
  Leonardo Arena authored Apr 28, 2017
  
  de51ff3d
- main/xen: security fixes #7116 (CVE-2016-9603, CVE-2017-7228) · aa5f8776
  Leonardo Arena authored Apr 28, 2017
  
  aa5f8776
27 Apr, 2017 1 commit
- main/rtpproxy: cherry-pick upstream fix for possible packet flood issue · 84d501bd
  Timo Teräs authored Apr 27, 2017
  
  84d501bd
26 Apr, 2017 2 commits

main/libxslt: security fixes #7060 (CVE-2017-5029) · cc932aa5
Leonardo Arena authored Apr 26, 2017
```
Remove unneeded patches
```
cc932aa5

main/tiff: security fixes #7122 · b39c44a5

Leonardo Arena authored Apr 25, 2017

CVE-2017-7592, CVE-2017-7593, CVE-2017-7594, CVE-2017-7595, CVE-2017-7596,
CVE-2017-7598, CVE-2017-7601, CVE-2017-7602

CVE-2017-7597, CVE-2017-7599, CVE-2017-7600 are already included in upstream release

b39c44a5

25 Apr, 2017 3 commits
- main/bind: security upgrade to 9.10.4-P8 - fixes #7145 · e1c82f92
  Leonardo Arena authored Apr 25, 2017
```
CVE-2017-3136
CVE-2017-3137
CVE-2017-3138
```
  e1c82f92
- main/curl: security fixes #7177,#7137,#7081 (CVE-2017-7468, CVE-2017-7407, CVE-2017-2629) · 02d24191
  Leonardo Arena authored Apr 25, 2017
  
  02d24191
- main/icu: security fixes #7193 (CVE-2017-7867, CVE-2017-7868) · 1caeb82f
  Leonardo Arena authored Apr 25, 2017
  
  1caeb82f