Commits · 3.4-stable · alpine / aports

07 Jun, 2021 1 commit
- main/weechat: fix secfixes data for CVE-2017-8073 · b5087e76
  Ariadne Conill authored Jun 07, 2021
  
  b5087e76
20 Oct, 2020 2 commits

main/php5: update secfixes comment for CVE-2018-5712 · da800bdf

Natanael Copa authored Oct 20, 2020

The fix for CVE-2018-5712 in 5.6.33 was incomplete and got finally fixed
in 5.6.36 together with a new CVE id (CVE-2018-10547).

Update secfixes comment and remove duplicate entry for CVE-2018-5712.

ref #11914
upstream ref: https://bugs.php.net/bug.php?id=76129

da800bdf

main/openssl: clean up duplicate CVE entry in secfixes comment · 29180d09
Natanael Copa authored Oct 20, 2020
```
CVE-2017-3738 was fixed in commit 69941fbb (main/openssl: security
upgrade to 1.0.2n)
```
29180d09

13 Nov, 2019 1 commit
- main/apache2: remove dupe in secfixes and sort · 33c9b879
  Natanael Copa authored Nov 13, 2019
```
ref https://github.com/alpinelinux/alpine-secdb/pull/5
```
  33c9b879
22 Nov, 2018 5 commits
- main/openssl: security upgrade to 1.0.2q - CVE-2018-0734 - CVE-2018-5407 · c1d3640c
  J0WI authored Nov 20, 2018 and Natanael Copa committed Nov 22, 2018
  
  c1d3640c
- main/openssl1.0: upgrade to 1.0.2p · 68b3b24e
  Natanael Copa authored Aug 21, 2018
  
  68b3b24e
- main/openssl: cherry-pick fix for CVE-2018-0737 · 0c38f925
  Timo Teräs authored Jul 18, 2018 and Natanael Copa committed Nov 22, 2018
```
fixes #8813
```
  0c38f925
- main/openssl: fix CVE-2018-0737 · 86f75868
  Natanael Copa authored Jun 21, 2018
```
fixes #9008
```
  86f75868
- main/openssl: security upgrade to 1.0.2o · a415596b
  Andy Postnikov authored Mar 31, 2018 and Natanael Copa committed Nov 22, 2018
```
CVE-2017-3738, CVE-2018-0739, CVE-2018-0733
```
  a415596b
06 Nov, 2018 3 commits
- main/openjpeg: upgrade to 2.3.0, modernize APKBUILD · 5321a888
  Francesco Colista authored Oct 24, 2017
```
 this fixes also CVE-2017-14039
```
  5321a888
- main/icecast: security upgrade to 2.4.4 (CVE-2018-18820) · a732467b
  Andy Postnikov authored Nov 05, 2018 and Francesco Colista committed Nov 06, 2018
  
  a732467b
- main/openjpeg: security fix for CVE-2017-14039. Fixes #7829 · 689783c8
  Francesco Colista authored Jun 06, 2018
  
  689783c8
17 Oct, 2018 1 commit
- main/ruby: security upgrade to 2.3.8 · 19de9f59
  Jakub Jirutka authored Oct 17, 2018
  
  19de9f59
10 Sep, 2018 1 commit
- main/apk-tools: security upgrade to 2.6.10 · 63ea6d07
  Timo Teräs authored Sep 10, 2018
  
  63ea6d07
01 Aug, 2018 1 commit
- main/kamailio: upgrade to 4.4.7, security fix · 037091ef
  Leonardo Arena authored Aug 01, 2018
```
https://skalatan.de/blog/advisory-hw-2018-05
```
  037091ef
26 Jun, 2018 1 commit
- main/acf-alpine-baselayout: upgrade to 0.13.2 · 15124251
  Ted Trask authored Jun 26, 2018
```
(cherry picked from commit 26a78bb0)
```
  15124251
17 Jun, 2018 1 commit
- main/gnupg: security fix for CVE-2018-12020 · d159a02c
  prspkt authored Jun 11, 2018 and Jakub Jirutka committed Jun 17, 2018
  
  d159a02c
11 Jun, 2018 4 commits
- main/memcached: security fix (CVE-2018-1000115) · dcdf3ad3
  Leonardo Arena authored Jun 11, 2018
```
Fixes #8833
```
  dcdf3ad3
- main/xen: security fixes · 96018bf2
  Leonardo Arena authored Jun 11, 2018
```
CVE-2018-10471, CVE-2018-10472, CVE-2018-8897,
CVE-2018-10981, CVE-2018-10982

Fixes #8889
```
  96018bf2
- main/wavpack: add secfixes · 770d5dd5
  prspkt authored May 01, 2018
```
fixes for:
-CVE-2018-10536
-CVE-2018-10537
-CVE-2018-10538
-CVE-2018-10539
-CVE-2018-10540

Fixes #8915
```
  770d5dd5
- main/wavpack: security fixes · 9dfd2536
  Leonardo Arena authored Mar 06, 2018
```
CVE-2018-6767, CVE-2018-7253, CVE-2018-7254

Fixes #8596
```
  9dfd2536
06 Jun, 2018 1 commit
- main/xfsprogs: fix owner of files · d40c577c
  Natanael Copa authored Jun 06, 2018
```
fixes #8970
```
  d40c577c
30 May, 2018 1 commit
- main/sqlite: fix CVE-2018-8740 · 11eca5b8
  Jakub Jirutka authored May 20, 2018 and Natanael Copa committed May 30, 2018
  
  11eca5b8
25 May, 2018 1 commit
- main/curl: fix crashes due to LibreSSL/OpenSSL engines conflicts · 8d596d65
  Jakub Jirutka authored May 25, 2018
  
  8d596d65
24 May, 2018 2 commits
- main/tiff: fix CVE-2018-8905 · 942d54f2
  prspkt authored May 14, 2018 and Jakub Jirutka committed May 24, 2018
  
  942d54f2
- main/tiff: fix CVE-2018-7456 · 95497013
  prspkt authored Apr 23, 2018 and Jakub Jirutka committed May 24, 2018
  
  95497013
20 May, 2018 1 commit
- main/curl: security upgrade to 7.60.0 · 81f97eef
  prspkt authored May 16, 2018 and Jakub Jirutka committed May 20, 2018
  
  81f97eef
14 May, 2018 2 commits
- main/postgresql: fix license and maintainer · 52c77963
  Jakub Jirutka authored May 14, 2018
  
  52c77963
- main/postgresql: security upgrade to 9.5.13 · 2d38d79d
  Jakub Jirutka authored May 14, 2018
```
Fixes CVE-2018-1115
See https://www.postgresql.org/about/news/1851/
```
  2d38d79d
13 May, 2018 1 commit
- main/wget: fix CVE-2018-0494 · 216de6f0
  Jakub Jirutka authored May 13, 2018
  
  216de6f0
30 Apr, 2018 1 commit
- main/jq: security fix (CVE-2016-4074) · e10ec9bc
  Leonardo Arena authored Apr 30, 2018
```
Fixes #8811
```
  e10ec9bc
28 Apr, 2018 1 commit
- main/php5: security upgrade to 5.6.36 · f1dfff5f
  Andy Postnikov authored Apr 27, 2018 and Jakub Jirutka committed Apr 28, 2018
```
CVE-2018-5712
```
  f1dfff5f
11 Apr, 2018 2 commits

main/clamav: security upgrade 0.99.4 · daeca7a6
Leonardo Arena authored Apr 11, 2018
```
CVE-2018-0202, CVE-2018-1000085

Fixes #8697
```
daeca7a6

main/mariadb: security upgrade to 10.1.32 · 073f1dbb

Leonardo Arena authored Apr 11, 2018

CVE-2017-10268, CVE-2017-10378, CVE-2017-15365, CVE-2018-2562
CVE-2018-2612, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668

Fixes #8691

073f1dbb

02 Apr, 2018 1 commit
- main/tiff: fix CVE-2018-5784 · e132e3f9
  prspkt authored Mar 31, 2018 and Natanael Copa committed Apr 02, 2018
```
fixes #8710
```
  e132e3f9
31 Mar, 2018 1 commit
- main/zsh: fix CVE-2018-1071, CVE-2018-1083 · 6c6b294b
  Jakub Jirutka authored Mar 31, 2018
  
  6c6b294b
30 Mar, 2018 1 commit
- main/php5: security upgrade to 5.6.35 · 965f9d88
  Andy Postnikov authored Mar 30, 2018 and Jakub Jirutka committed Mar 31, 2018
  
  965f9d88
29 Mar, 2018 1 commit

main/ruby: security upgrade to 2.3.7 · 1779cab8

Natanael Copa authored Mar 29, 2018

CVE-2017-17742: HTTP response splitting in WEBrick

CVE-2018-6914: Unintentional file and directory creation with directory
               traversal in tempfile and tmpdir

CVE-2018-8777: DoS by large request in WEBrick

CVE-2018-8778: Buffer under-read in String#unpack

CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in
               UNIXServer and UNIXSocket

CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in
               Dir

fixes #8750

1779cab8

27 Mar, 2018 2 commits
- main/uwsgi: security upgrade to 2.0.17 (CVE-2018-6758,CVE-2018-7490) · 1308713a
  Natanael Copa authored Mar 27, 2018
```
fixes #8737
```
  1308713a
- main/apache2: security upgrade to 2.4.33 · a30dbd55
  Kaarle Ritvanen authored Mar 27, 2018
```
fixes #8732
```
  a30dbd55