Commits · 3.8-stable · alpine / aports

09 Jun, 2020 1 commit
- main/gnutls: security upgrade to 3.6.14 (CVE-2020-13777) · 001e8c22
  Natanael Copa authored Jun 09, 2020
```
ref #11627
```
  001e8c22
03 Jun, 2020 2 commits

main/ca-certificates: remove expired certificate · f91a48ba
Natanael Copa authored Jun 03, 2020
```
ref #11607

(cherry picked from commit f430aef7)
```
f91a48ba

main/ca-certificates: fix bundle with certs without newline · fac577a2

Natanael Copa authored Feb 06, 2020

backport fix that adds newline to each cert in the bundle. The reason is
that trailing newline is no requirement so self generated certs may not
have it.

fixes #8379

(cherry picked from commit 0b87f832)

fac577a2

22 May, 2020 3 commits
- main/perl-mozilla-ca: upgrade to 20200520 · 73a848a2
  J0WI authored May 22, 2020
  
  73a848a2
- main/perl-mozilla-ca: modernize and upgrade to 20180117 · 7009fc11
  J0WI authored Oct 20, 2018
  
  7009fc11
- main/dovecot: security upgrade to 2.3.10.1 · 63c2cc27
  Leonardo Arena authored May 22, 2020
```
CVE-2020-10957, CVE-2020-10958, CVE-2020-10967,
CVE-2020-7046, CVE-2020-7957

Upgrade pigeonhole plugin to 0.5.10

fixes #11557
```
  63c2cc27
19 May, 2020 1 commit
- main/libexif: security upgrade to 0.6.22 · 5dea23e0
  Leo authored May 19, 2020
```
fixes #11539
```
  5dea23e0
13 May, 2020 1 commit
- main/mariadb: security upgrade to 10.2.32 · e508207d
  J0WI authored May 13, 2020
```
CVE-2020-2752
CVE-2020-2812
CVE-2020-2814
CVE-2020-2760
```
  e508207d
12 May, 2020 1 commit
- main/libvirt: security fix for CVE-2020-12430 · af2087cf
  Francesco Colista authored May 12, 2020
  
  af2087cf
07 May, 2020 2 commits
- main/sqlite: security fix (CVE-2020-11655) · a946d074
  Leonardo Arena authored May 07, 2020
```
fixes #11508
```
  a946d074
- main/openldap: fix CVE-2020-12243 · e22f8098
  Leo authored May 07, 2020
```
See #11509
```
  e22f8098
02 May, 2020 1 commit
- main/tzdata: upgrade to 2020a · 048a098a
  J0WI authored Apr 24, 2020
  
  048a098a
25 Apr, 2020 1 commit
- main/ntfs-3g: patch CVE-2019-9755 · c9296b6e
  TBK authored Apr 24, 2020
```
- Switch to https
- Clarify license
- Patch CVE-2019-9755
```
  c9296b6e
21 Apr, 2020 1 commit
- main/git: security upgrade to 2.18.4 · f32b8f8d
  Kevin Daudt authored Apr 21, 2020
  
  f32b8f8d
19 Apr, 2020 3 commits
- community/tor: fix source URI · 047aecce
  Ariadne Conill authored Apr 19, 2020
  
  047aecce
- main/xen: fix various security issues · fa008233
  Leo authored Apr 19, 2020
```
For #11400

Fixed CVEs:

- CVE-2020-11739
- CVE-2020-11740
- CVE-2020-11741
- CVE-2020-11742
- CVE-2020-11743
```
  fa008233
- community/tor: re-enable and rebuild to avoid bogus IDS warning · f06ffe83
  Ariadne Conill authored Apr 19, 2020
  
  f06ffe83
18 Apr, 2020 1 commit
- community/tor: disable package pending security review · fe476459
  Ariadne Conill authored Apr 18, 2020
  
  fe476459
17 Apr, 2020 1 commit
- main/mcpp: fix CVE-2019-14274 · 9b7a9599
  Sören Tempel authored Apr 17, 2020
```
Patch taken from Debian.
```
  9b7a9599
14 Apr, 2020 3 commits
- main/git: security upgrade to 2.18.3 · 0a78823b
  J0WI authored Apr 14, 2020
  
  0a78823b
- main/ca-certificates: upgrade to 20191127 · 6bb12228
  Rasmus Thomsen authored Apr 13, 2020
```
New certificate distrusts have been added, so this should be backported
```
  6bb12228
- main/haproxy: fixes CVE-2020-11100 · 7ce71a26
  Leo authored Apr 14, 2020
```
See #11389
```
  7ce71a26
09 Apr, 2020 1 commit
- main/gd: patch CVE-2018-14553 and CVE-2019-11038 · bf12d0cc
  J0WI authored Apr 08, 2020
  
  bf12d0cc
07 Apr, 2020 1 commit
- main/mariadb: security upgrade to 10.2.31 · 65c783bb
  J0WI authored Apr 07, 2020
  
  65c783bb
03 Apr, 2020 3 commits
- main/gnutls: add CVE secfixes info · 867f20fe
  Leo authored Apr 03, 2020
  
  867f20fe
- main/samba: fix CVE-2019-14902, CVE-2019-14907 · 515e98e6
  Natanael Copa authored Apr 03, 2020
```
fixes #11155
```
  515e98e6
- main/samba: security fixes · 4da1ee1a
  Leonardo Arena authored Nov 14, 2019
```
CVE-2019-10218, CVE-2019-14833, CVE-2019-14847

ref #10921
```
  4da1ee1a
02 Apr, 2020 2 commits
- main/squid: various secfixes · 3db264c1
  Natanael Copa authored Apr 02, 2020
```
CVE-2020-8449, CVE-2020-8450, CVE-2020-8517, CVE-2019-12528

fixes #11248
```
  3db264c1
- main/icu: fix CVE-2020-10531 · 248b3fa9
  Natanael Copa authored Apr 02, 2020
```
fixes #11329
```
  248b3fa9
01 Apr, 2020 2 commits
- main/apache2: security upgrade to 2.4.43 · d6095f7d
  J0WI authored Apr 01, 2020
  
  d6095f7d
- main/ruby: upgrade to 2.5.8 · c5a61063
  Robert Pritzkow authored Apr 01, 2020
  
  c5a61063
31 Mar, 2020 1 commit
- main/gnutls: fix GNUTLS-SA-2020-03-31 · 44c9daa5
  Leo authored Mar 31, 2020
  
  44c9daa5
30 Mar, 2020 1 commit
- main/screen: fix CVE-2020-9366 · 4c4ac30e
  Leo authored Mar 30, 2020
  
  4c4ac30e
27 Mar, 2020 2 commits
- main/squid: fix CVE-2019-18679 · 22536073
  Leo authored Mar 27, 2020
```
see #10946
```
  22536073
- main/unzip: actually fix CVE-2019-13232 · d2ccfe10
  Leo authored Mar 27, 2020
```
use patch from Fedora
```
  d2ccfe10
26 Mar, 2020 2 commits
- main/unzip: fix CVE-2019-13232 · 91e40e20
  Leo authored Mar 26, 2020
  
  91e40e20
- main/libmspack: fix CVE-2019-1010305 · f370aec8
  Leo authored Mar 26, 2020
```
see #10814
```
  f370aec8
24 Mar, 2020 1 commit
- main/bluez: fix CVE-2020-0556 · e61670a8
  Leo authored Mar 24, 2020
```
see #11328
```
  e61670a8
11 Mar, 2020 1 commit
- main/libarchive: fix CVE-2020-19221 and CVE-2020-9308 · 506fdf8e
  Leo authored Mar 11, 2020
  
  506fdf8e
10 Mar, 2020 1 commit

main/ppp: secfix for radius and EAP · dcccf9b9

Milan P. Stanić authored Mar 10, 2020

backported security fixes from upstream:
radius: Prevent buffer overflow in rc_mksid()
pppd: Fix bounds check in EAP code
pppd: Ignore received EAP messages when not doing EAP
add 'secfixes'

dcccf9b9