Commits · 3.7-stable · alpine / aports

16 Feb, 2021 1 commit
- community/openjdk8: security upgrade to 3.17.1 (8.275.01) · cddd1b23
  Timo Teräs authored Feb 15, 2021
  
  cddd1b23
20 Oct, 2020 9 commits

community/wireshark: remove duplicate CVEs in secfixes comment · b277839a
Natanael Copa authored Oct 20, 2020
```
ref #11914
```
b277839a
main/sdl: remove duplicate CVE in secfixes comment · 0b9593eb
Natanael Copa authored Oct 20, 2020
```
ref #11914
```
0b9593eb

main/lame: remove duplicates in secfixes comment · 5e0c4c47

Natanael Copa authored Oct 20, 2020

CVE-2017-9410, CVE-2017-9411, CVE-2017-9412, CVE-2015-9099 were all
fixed in 3.99.5-r6.

ref #11914

5e0c4c47

community/firefox: remove duplicate CVE in secfixes comment · a56ee65a
Natanael Copa authored Oct 20, 2020
```
ref #11914
```
a56ee65a

main/ghostscript: clean up duplicate secfixes comment · 413d825a

Natanael Copa authored Oct 20, 2020

remove duplicate entry in secfixes comment and unused patch for
CVE-2019-6116.

The compressed .tgz patch that was added in commit 2f2e944c
(main/ghostscript: security update for CVE-2019-6116) was never applied.
The issue was fixed in 9.26-r2.

ref #11914

413d825a

main/bind: remove duplicate in secfixes comment · cbc49e4f

Natanael Copa authored Oct 20, 2020

CVE-2017-3145 was fixed in 9.11.2_p1-r0, commit 2bfbca72 (main/bind:
Upgrade to 9.11.2-P1).

ref #11914

cbc49e4f

main/php7: remove duplicates in secfixes comment · 05c7db62

Natanael Copa authored Oct 20, 2020

Update secfixes comment and remove duplicate entry for CVE-2018-5712.

The fix for CVE-2018-5712 in 7.1.13 was incomplete and got finally fixed
in 7.1.17 together with a new CVE id (CVE-2018-10547).

upstream ref: https://bugs.php.net/bug.php?id=76129

Also remove the duplicate entry for CVE-2018-7584, which was fixed in
7.1.15.

ref #11914

05c7db62

community/php5: update secfixes comment for CVE-2018-5712 · 89054feb

Natanael Copa authored Oct 20, 2020

The fix for CVE-2018-5712 in 5.6.33 was incomplete and got finally fixed
in 5.6.36 together with a new CVE id (CVE-2018-10547).

Update secfixes comment and remove duplicate entry for CVE-2018-5712.

ref #11914
upstream ref: https://bugs.php.net/bug.php?id=76129

89054feb

main/openssl: clean up duplicate CVE entry in secfixes comment · 81efcef4
Natanael Copa authored Oct 20, 2020
```
CVE-2017-3738 was fixed in commit 69941fbb (main/openssl: security
upgrade to 1.0.2n)
```
81efcef4

03 Oct, 2020 1 commit
- main/ruby: security upgrade to 2.4.10 · ffd32bfd
  Jakub Jirutka authored Oct 03, 2020
  
  ffd32bfd
19 Apr, 2020 1 commit
- community/tor: re-enable and rebuild to avoid bogus IDS warning · cc9ad2b4
  Ariadne Conill authored Apr 19, 2020
  
  cc9ad2b4
18 Apr, 2020 1 commit
- community/tor: disable package pending security review · a8b88163
  Ariadne Conill authored Apr 18, 2020
  
  a8b88163
19 Feb, 2020 1 commit
- main/nfdump: fix secfixes · b8d192ba
  Leo authored Feb 19, 2020
  
  b8d192ba
14 Jan, 2020 1 commit
- main/python2: security fix (CVE-2019-16935) · 5372bc29
  Leonardo Arena authored Jan 14, 2020
```
fixes #10872
```
  5372bc29
02 Jan, 2020 1 commit
- Revert "main/gnutls: security upgrade to 3.6.7" · 0ce1a6da
  Natanael Copa authored Jan 02, 2020
```
build fails due to introduced dependencies

This reverts commit dcfba7f9.
```
  0ce1a6da
30 Dec, 2019 1 commit
- main/gnutls: security upgrade to 3.6.7 · dcfba7f9
  Natanael Copa authored May 09, 2018 and Leo committed Dec 30, 2019
  
  dcfba7f9
10 Dec, 2019 1 commit
- main/git: security upgrade to 2.15.4 · 330dccaf
  Kevin Daudt authored Dec 10, 2019
  
  330dccaf
20 Nov, 2019 5 commits
- main/sdl_image: fix quoting · 91cc5184
  Leo authored Nov 20, 2019
  
  91cc5184
- main/nfdump: fix a few CVEs · 34eaff89
  Leo authored Nov 20, 2019
```
ref #10815
```
  34eaff89
- main/libgcrypt: fix CVE-2019-13627 · 1c4658e6
  Leo authored Nov 20, 2019
```
ref #10823
```
  1c4658e6
- main/sdl: fix CVE-2019-13616 · c22e8876
  Leo authored Nov 20, 2019
  
  c22e8876
- main/sdl_image: fix CVE-2019-13616 · a50982ce
  Leo authored Nov 20, 2019
```
ref #10878
```
  a50982ce
17 Nov, 2019 1 commit
- main/file: fix CVE-id · 9ca7ff46
  Leo authored Nov 15, 2019
```
ref #10955
```
  9ca7ff46
03 Nov, 2019 2 commits
- main/libvncserver: fix CVE-2019-15681 · 2e95874e
  Leo authored Nov 01, 2019 and Kevin Daudt committed Nov 03, 2019
```
ref #10924

Closes !1013
```
  2e95874e
- main/tiff: fix CVE-2019-17546 · 2ab20b2c
  Leo authored Nov 01, 2019 and Kevin Daudt committed Nov 03, 2019
```
ref #10927
```
  2ab20b2c
02 Nov, 2019 1 commit
- main/libarchive: fix CVE-2019-18408 · b4b6746d
  Leo authored Oct 31, 2019 and Kevin Daudt committed Nov 02, 2019
```
ref #10926

Closes !1002
```
  b4b6746d
31 Oct, 2019 3 commits
- main/libxslt: fix CVE-2019-18197 · d67f5711
  Leo authored Oct 29, 2019 and Kevin Daudt committed Oct 31, 2019
```
ref #10916

Closes !917
```
  d67f5711
- main/aspell: fix CVE-2019-17544 · 4439c830
  Leo authored Oct 24, 2019 and Kevin Daudt committed Oct 31, 2019
```
ref #10898

Closes !774
```
  4439c830
- community/imagemagick6: security upgrade to 6.9.10.68 · 0f7ecd69
  J0WI authored May 04, 2019 and Jakub Jirutka committed Oct 31, 2019
  
  0f7ecd69
29 Oct, 2019 2 commits
- main/abuild: backport chdir to "$builddir" · 7ac611a2
  Natanael Copa authored Oct 29, 2019
```
This makes it easier to backport security fixes which has the `cd
"$builddir"` removed.
```
  7ac611a2
- main/file: fix CVE-2019-18218 · 615b572e
  Leo authored Oct 28, 2019 and Kevin Daudt committed Oct 29, 2019
```
ref #10911

Closes !891
```
  615b572e
28 Oct, 2019 1 commit
- main/nmap: fix CVE-2018-15173 and CVE-2017-18594 · c6bb37d9
  Leo authored Oct 24, 2019 and Kevin Daudt committed Oct 28, 2019
```
ref #10899

Closes !814
```
  c6bb37d9
26 Oct, 2019 1 commit
- community/php7: security upgrade to 7.1.33 - CVE-2019-11043 · bac59df7
  Andy Postnikov authored Oct 25, 2019 and Kevin Daudt committed Oct 26, 2019
```
Closes GH-11983
```
  bac59df7
25 Oct, 2019 1 commit
- main/libssh2: Update release version for CVE patch · 9a028d8b
  Alex Mirski-Fitton authored Oct 24, 2019 and Sören Tempel committed Oct 25, 2019
```
6c763143 introduced a patch for
CVE-2019-17498 but did not bump the package release version. Therefore,
the package wasn't rebuild.
```
  9a028d8b
24 Oct, 2019 1 commit

main/faad2: security upgrade to 2.9.0 · 345e3811

Leo authored Oct 11, 2019 and

Natanael Copa committed Oct 24, 2019

fixes:
  - CVE-2019-6956
  - CVE-2018-20196
  - CVE-2018-20199
  - CVE-2018-20360
  - CVE-2018-20362
  - CVE-2018-19504
  - CVE-2018-20195
  - CVE-2018-20198
  - CVE-2018-20358
  - CVE-2018-20194
  - CVE-2018-19503
  - CVE-2018-20197
  - CVE-2018-20357
  - CVE-2018-20359
  - CVE-2018-20361
  - CVE-2019-15296
  - CVE-2018-19502

ref #10696

345e3811

22 Oct, 2019 1 commit
- main/rsyslog: fix CVE-2019-17041 and CVE-2019-17042 · 7544d63c
  Leo authored Oct 19, 2019 and Kevin Daudt committed Oct 22, 2019
```
ref #10880

Closes !547
```
  7544d63c
21 Oct, 2019 1 commit
- main/sdl2_image: security fix for CVE-2019-13616. · ef600f7e
  Francesco Colista authored Oct 21, 2019
```
Fixes #10879
```
  ef600f7e
20 Oct, 2019 1 commit
- main/sqlite: fix CVE-2019-16168 · 1833ad92
  Leo authored Oct 11, 2019 and Kevin Daudt committed Oct 20, 2019
```
ref #10868

Closes !421
```
  1833ad92
17 Oct, 2019 1 commit
- main/e2fsprogs: fix CVE-2019-5094 · 3ae476f3
  Leo authored Oct 12, 2019 and Natanael Copa committed Oct 17, 2019
```
ref #10835
```
  3ae476f3