fixes CVE-2020-14343

Michał Polański authored 4 years ago and Leo committed 4 years ago

Announcement: https://groups.google.com/g/golang-announce/c/mperVMGa98w

Michał Polański authored 4 years ago and Leo committed 4 years ago

includes fixes for https://blog.golang.org/path-security

Oliver Smith authored 4 years ago and Leo committed 4 years ago

Calls is broken since its dependency libcallaudio-0 has been upgraded to
libcallaudio-0.1. Upgrade to latest version and add patches from
upstream MR on top to build against libcallaudio-0.1.

Fixes:
  / # apk add calls
  ERROR: unable to select packages:
    so:libcallaudio-0.so.0 (no such package):
      required by: calls-0.1.9-r0[so:libcallaudio-0.so.0]

Related: https://source.puri.sm/Librem5/calls/-/merge_requests/230

Dermot Bradley authored 4 years ago and TBK committed 4 years ago

Addresses security issue (no CVE available).

Elastic has changed their license, and no longer meets the requirements
for inclusion in aports.

See #12331

Elastic has changed their license, and no longer meets the requirements
for inclusion in aports.

Resolves #12331

CVE fixes:
- CVE-2020-25681
- CVE-2020-25682
- CVE-2020-25683
- CVE-2020-25684
- CVE-2020-25685
- CVE-2020-25686
- CVE-2020-25687

add patch from upstream pull request to fix
udev_device_get_usec_since_initialized() message