Commits · 3.3-stable · alpine / aports

07 Jun, 2021 1 commit
- main/weechat: fix secfixes data for CVE-2017-8073 · 74d5d2e7
  Ariadne Conill authored Jun 07, 2021
  
  74d5d2e7
20 Oct, 2020 1 commit
- main/openssl: clean up duplicate CVE entry in secfixes comment · fdbb0da2
  Natanael Copa authored Oct 20, 2020
```
CVE-2017-3738 was fixed in commit 69941fbb (main/openssl: security
upgrade to 1.0.2n)
```
  fdbb0da2
22 Nov, 2018 5 commits
- main/openssl: security upgrade to 1.0.2q - CVE-2018-0734 - CVE-2018-5407 · 20644e27
  J0WI authored Nov 20, 2018 and Natanael Copa committed Nov 22, 2018
  
  20644e27
- main/openssl: upgrade to 1.0.2p · 4e11a542
  Natanael Copa authored Aug 21, 2018
  
  4e11a542
- main/openssl: fix CVE-2018-0732 and CVE-2018-0737 · 8318a0b0
  Timo Teräs authored Jul 18, 2018 and Natanael Copa committed Nov 22, 2018
```
fixes #8814
fixes #9009
```
  8318a0b0
- main/openssl: security upgrade to 1.0.2o · 83efaea2
  Andy Postnikov authored Mar 31, 2018 and Natanael Copa committed Nov 22, 2018
```
CVE-2017-3738, CVE-2018-0739, CVE-2018-0733
```
  83efaea2
- main/openssl: security upgrade to 1.0.2n · 69941fbb
  Colin Williams authored Dec 11, 2017 and Natanael Copa committed Nov 22, 2018
```
fixes #8277

CVE-2017-3737
CVE-2017-3738

(cherry picked from commit b74e9ca7)
```
  69941fbb
06 Nov, 2018 1 commit
- main/icecast: security upgrade to 2.4.4 (CVE-2018-18820) · 9da3d4b3
  Andy Postnikov authored Nov 05, 2018 and Francesco Colista committed Nov 06, 2018
  
  9da3d4b3
10 Sep, 2018 1 commit
- main/apk-tools: security upgrade to 2.6.10 · 2b3372b4
  Timo Teräs authored Sep 10, 2018
  
  2b3372b4
01 Aug, 2018 1 commit
- main/kamailio: security fix · 6cb9533a
  Leonardo Arena authored Aug 01, 2018
```
https://skalatan.de/blog/advisory-hw-2018-05
```
  6cb9533a
06 Jun, 2018 1 commit
- main/openjpeg: security fix for CVE-2017-14039. Fixes #7829 · 89fe29bb
  Francesco Colista authored Jun 06, 2018
  
  89fe29bb
15 Dec, 2017 1 commit
- main/ruby: security upgrade to 2.2.9 · 4d3e21cd
  Jakub Jirutka authored Dec 15, 2017
```
See: https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-2-9-released/
```
  4d3e21cd
04 Dec, 2017 1 commit

main/pcre: add secfixes comment for CVE-2017-11164 · a38ca99f

Natanael Copa authored Dec 04, 2017

We are not affected by CVE-2017-16231 due to our build with
--with-match-limit-recursion=8192. We had this option since first
commit, version 7.8, and were never affected.

fixes #8143

a38ca99f

23 Nov, 2017 7 commits
- main/libvorbis: fix CVE-2017-14160 · 28c5fe5a
  Natanael Copa authored Nov 23, 2017
```
fixes #7941
```
  28c5fe5a
- main/quagga: fix CVE-2017-16227 · 6e3ecd37
  Natanael Copa authored Nov 23, 2017
```
fixes #8086
```
  6e3ecd37
- main/openvpn: security upgrade to 2.3.18 (CVE-2017-12166) · 034e674e
  Natanael Copa authored Nov 23, 2017
```
fixes #8129
```
  034e674e
- main/xen: fix secfixes comment · 9616306f
  Natanael Copa authored Nov 23, 2017
  
  9616306f
- main/varnish: fix secfixes comment · 197458f9
  Natanael Copa authored Nov 23, 2017
  
  197458f9
- main/busybox: secfixes for CVE-2017-15873,CVE-2017-16544 · 9c61af0b
  Natanael Copa authored Nov 23, 2017
```
fixes #8191
```
  9c61af0b
- main/tiff: security upgrade to 4.0.9 (CVE-2017-16231,CVE-2017-16232) · 17f5b0b8
  Natanael Copa authored Nov 23, 2017
```
fixes #8149
```
  17f5b0b8
22 Nov, 2017 1 commit
- main/varnish: security upgrade to 4.1.9 (CVE-2017-8807) · 336cc11a
  Natanael Copa authored Nov 21, 2017
```
fixes #8168
```
  336cc11a
21 Nov, 2017 1 commit

main/postgresql: upgrade to 9.4.15 (security fixes) · 34e89c4d

Jakub Jirutka authored Nov 21, 2017

Fixes: CVE-2017-15098

Release Notes: https://www.postgresql.org/about/news/1801/

PostgreSQL on Alpine has never been affected by CVE-2017-12172.

34e89c4d

09 Nov, 2017 2 commits
- main/openssl: security upgrade to 1.0.2m · 7acb0c20
  Andy Postnikov authored Nov 05, 2017 and Timo Teräs committed Nov 09, 2017
```
CVE-2017-3735
CVE-2017-3736

fixes #8117
```
  7acb0c20
- main/roundcubemail: security upgrade to 1.1.10 (CVE-2017-16651) · 31744c33
  Leonardo Arena authored Nov 09, 2017
  
  31744c33
25 Oct, 2017 6 commits
- main/xen: add leftover patch · ff398127
  Leonardo Arena authored Oct 25, 2017
  
  ff398127
- main/xen: add secinfo · 77780872
  Leonardo Arena authored Oct 25, 2017
  
  77780872
- main/xen: security upgrade to 4.6.6 · d19612e9
  Leonardo Arena authored Oct 25, 2017
```
(CVE-2017-12135, CVE-2017-12137, CVE-2017-12136, CVE-2017-12134, CVE-2017-12855)

fixes #7736
```
  d19612e9
- main/xen: update source · 44b88acb
  Leonardo Arena authored Oct 25, 2017
  
  44b88acb
- main/xen: security fixes · 902758ce
  Leonardo Arena authored Oct 25, 2017
```
(CVE-2017-14316, CVE-2017-14317, CVE-2017-14318, CVE-2017-14319)

fixes #7823
```
  902758ce
- main/gdk-pixbuf: security fix (CVE-2017-2862) · d49b5d11
  Leonardo Arena authored Oct 25, 2017
```
fixes #7869
```
  d49b5d11
24 Oct, 2017 2 commits
- main/newsbeuter: security fix (CVE-2017-14500) · ba1d5a94
  Leonardo Arena authored Oct 24, 2017
```
fixes #7880
```
  ba1d5a94
- main/curl: security fix for CVE-2017-1000257 · ce9547d7
  Natanael Copa authored Oct 24, 2017
  
  ce9547d7
23 Oct, 2017 5 commits
- main/musl: fix CVE-2017-15650 · ee51f150
  Natanael Copa authored Oct 23, 2017
```
fixes #8034
```
  ee51f150
- main/strongswan: security fix (CVE-2017-11185) · a4e92d62
  Leonardo Arena authored Oct 23, 2017
```
fixes #7906
```
  a4e92d62
- main/curl: security fix (CVE-2017-1000254) · c197d93a
  Leonardo Arena authored Oct 23, 2017
```
fixes #7965
```
  c197d93a
- main/ncurses: security fixes · a3baab13
  Leonardo Arena authored Oct 23, 2017
```
(CVE-2017-11112, CVE-2017-11113, CVE-2017-13728, CVE-2017-13729, CVE-2017-13730,
CVE-2017-13731, CVE-2017-13732, CVE-2017-13733, CVE-2017-13734)

fixes #7970
```
  a3baab13
- main/wireshark: security upgrade to 2.0.16 · 7b82312a
  Leonardo Arena authored Oct 23, 2017
```
(CVE-2017-15191, CVE-2017-15192, CVE-2017-15193)
(CVE-2017-13765, CVE-2017-13766, CVE-2017-13767)

fixes #8017 #7914
```
  7b82312a
17 Oct, 2017 1 commit
- main/acf-dnsmasq: upgrade to 0.7.1 · 60c9c2e0
  Ted Trask authored Oct 16, 2017
```
(cherry picked from commit dad89777)
```
  60c9c2e0
11 Oct, 2017 1 commit
- main/ghostscript: security upgrade to 9.22. Fixes #7995 · 8690a8ab
  Francesco Colista authored Oct 11, 2017
  
  8690a8ab
10 Oct, 2017 1 commit
- main/perl: upgrade to 5.22.3 + security fixes · cd0cf727
  Natanael Copa authored Oct 10, 2017
```
- CVE-2016-1238
- CVE-2017-12837
- CVE-2017-12883

fixes #7901
```
  cd0cf727