main/libx11: security upgrade to 1.7.1

• main/util-linux: unbreak user mounts
• main/musl: upgrade to 1.2.2
• community/kea: fix install location of kea-admin scripts
• community/grpc: upgrade to 1.34.1
• community/s6-overlay-preinit: rebuild for skalibs ABI change
• main/bonding: add support for bond-members statements
• testing/py3-rich: new aport
• community/py3-rich: move from testing
• community/ansible-lint: add missing dependecy on py3-rich
• community/justc-envdir: fix build with new skalibs
• community/nextcloud19: upgrade to 19.0.7
• community/nextcloud19: bump for checksums
• community/py3-fs: upgrade to 2.4.12
• testing/py3-intervals: upgrade to 0.9.1
• main/btrfs-progs: upgrade to 5.10
• main/gptfdisk: security upgrade to 1.0.6
• main/dnsmasq: security upgrade to 2.83
• community/cloud-init: upgrade to 20.4.1
• community/py3-tox: upgrade to 3.21.2
• community/go: security upgrade to 1.15.7
• main/py3-tz: upgrade to 2020.5
• community/py3-authlib: upgrade to 0.15.3
• main/py3-yaml: fix CVE-2020-14343
• community/k3s: upgrade to 1.20.2
• main/xen: add missing CVE info
• community/gkraken: upgrade to 0.14.5
• community/drupal7: security upgrade to 7.78 - CVE-2020-36193
• main/sqlite: upgrade to 3.34.1
• main/sqlite-tcl: upgrade to 3.34.1
• community/py3-prompt_toolkit: upgrade to 3.0.11
• community/py3-bleach: upgrade to 3.2.2
• testing/py3-fastavro: upgrade to 1.2.4
• main/monit: upgrade to 5.27.2
• community/py3-unidecode: upgrade to 1.1.2
• community/py3-typed-ast: upgrade to 1.4.2
• main/py3-setuptools: upgrade to 51.3.3
• community/py3-s3transfer: upgrade to 0.3.4
• main/py3-coverage: upgrade to 5.3.1
• community/py3-rsa: upgrade to 4.7
• main/bind: upgrade to 9.16.11
• community/py3-breathe: upgrade to 4.26.1
• community/py3-freezegun: upgrade to 1.1.0
• community/plasma-desktop: add missing dep on accountsservice
• community/plasma: add dep on kio-fuse as requested upstream
• community/mutt: fix CVE-2021-3181
• testing/deutex: upgrade to 5.2.2
• main/doxygen: upgrade to 1.9.1
• main/umurmur: upgrade to 0.2.18
• main/postfix: upgrade to 3.5.9
• main/razor: fix license, manpage installation
• testing/rlwrap: upgrade to 0.44
• community/okular: add missing recommended deps
• community/kwin: build with pipewire support
• community/mutt: security upgrade to 2.0.5
• community/flatpak: upgrade to 1.10.1
• testing/s3fs-fuse: upgrade to 1.88
• community/py3-pytest-cov: upgrade to 2.11.1
• testing/coredns: upgrade to 1.8.1
• community/x2goserver: add missing dep on perl-try-tiny
• main/pango: upgrade to 1.48.1
• community/py3-multidict-gns3: new aport as dependency of gns3
• community/py3-yarl-gns3: new dependency of gns3
• community/py3-chardet-gns3: new aport as dependency of gns3
• community/py3-aiohttp-gns3: added new dependency
• community/gns3-server: bump pkgrel for #12334 (closed) fix
• community/py3-aiohttp-gns3: bump pkgrel to get new deps
• main/py3-pillow: fix CVE-2020-35655
• community/py3-prompt_toolkit: upgrade to 3.0.12
• main/busybox: fix echo write error: Invalid argument
• main/busybox: update echo fix
• community/py3-prompt_toolkit: upgrade to 3.0.13
• main/xen: fix XSA-360
• main/pinentry: upgrade to 1.1.1
• community/py3-saml2: fix CVE-2021-21239
• community/fsverity-utils: upgrade to 1.3
• community/libudev-zero: move from testing
• main/esh: upgrade to 0.3.1
• main/m4: fix realpath test
• community/vlc: security upgrade to 3.0.12
• community/py3-prompt_toolkit: upgrade to 3.0.14
• main/libxt: upgrade to 1.2.1
• community/gnote: upgrade to 3.38.1
• community/pipewire: upgrade to 0.3.20
• community/xournalpp: upgrade to 1.0.20
• community/vte3: upgrade to 0.62.2
• community/gpaste: upgrade to 3.38.4
• community/gtk4.0: upgrade to 4.0.2
• community/mutter: upgrade to 3.38.3
• community/enchant2: upgrade to 2.2.15
• community/gnome-shell: upgrade to 3.38.3
• community/py3-pip: upgrade to 20.3.4
• main/postgresql: fix check_* functions in init script
• main/postgresql: add init commands stop_fast, stop_force, stop_smart, reload_force
• community/flatpak: add missing secfixes info
• community/ccid: upgrade to 1.4.34
• community/glibd: rebuild against ldc
• main/perl-datetime-timezone: upgrade to 2.47
• community/appstream: add -compose subpkg
• testing/perl-data-validate-ip: new aport
• testing/ddclient: new aport
• community/zabbix: add missing webif dependencies
• community/zabbix: upgrade to 5.2.4
• community/feh: upgrade to 3.6.3
• main/dnsmasq: upgrade to 2.84
• community/php7-pecl-timezonedb: upgrade to 2021.1
• community/php8-pecl-timezonedb: upgrade to 2021.1
• main/tzdata: upgrade to 2021a
• testing/libspatialite: fix source=
• main/apk-tools: upgrade to 2.12.1
• community/openvswitch: upgrade to 2.12.2
• main/nsd: upgrade to 4.3.5
• community/py3-bleach: upgrade to 3.2.3
• community/cfengine: fix libntech configure
• main/sudo: security upgrade to 1.9.5p2 (CVE-2021-3156)
• community/coturn: security upgrade to 4.5.2
• main/linux-lts: upgrade to 5.10.9
• main/linux-lts: enable CIFS_UPCALL on all arches
• main/linux-lts: upgrade to 5.10.10
• community/jool-modules-lts: rebuild against kernel 5.10.10-r0
• community/rtl8821ce-lts: rebuild against kernel 5.10.10-r0
• community/rtpengine-lts: rebuild against kernel 5.10.10-r0
• main/dahdi-linux-lts: rebuild against kernel 5.10.10-r0
• main/xtables-addons-lts: rebuild against kernel 5.10.10-r0
• main/zfs-lts: rebuild against kernel 5.10.10-r0
• main/linux-rpi: upgrade to 5.10.10
• community/jool-modules-rpi: rebuild against kernel 5.10.10-r0
• main/zfs-rpi: rebuild against kernel 5.10.10-r0
• community/gnome-podcasts: add missing dep on gst-plugins-good
• community/telepathy-glib: upgrade to 0.24.2
• testing/googler: upgrade to 4.3.2
• testing/dnstwist: upgrade to 20201228
• main/linux-rpi: upgrade to 5.10.11
• community/jool-modules-rpi: rebuild against kernel 5.10.11-r0
• main/zfs-rpi: rebuild against kernel 5.10.11-r0
• community/composer: upgrade to 2.0.9
• community/libudev-zero: upgrade to 0.4.7
• community/py3-tox: upgrade to 3.21.3
• testing/py3-rply: upgrade to 0.7.8
• main/ansible: upgrade to 2.10.6
• main/privoxy: upgrade to 3.0.30
• main/linux-lts: upgrade to 5.10.11
• community/jool-modules-lts: rebuild against kernel 5.10.11-r0
• community/rtl8821ce-lts: rebuild against kernel 5.10.11-r0
• community/rtpengine-lts: rebuild against kernel 5.10.11-r0
• main/dahdi-linux-lts: rebuild against kernel 5.10.11-r0
• main/xtables-addons-lts: rebuild against kernel 5.10.11-r0
• main/zfs-lts: rebuild against kernel 5.10.11-r0
• main/doas: patch out PATH reset vulnerability
• main/doas: include secfixes for CVE-2019-25016
• ===== release 3.13.1 =====
• community/librsvg: upgrade to 2.50.3
• community/muacme: upgrade to 0.4.0
• main/e2fsprogs: upgrade to 1.45.7
• main/perl-specio: upgrade to 0.47
• community/postgis: upgrade to 3.1.1
• community/wireshark: security upgrade to 3.4.3
• community/entr: upgrade to 4.7
• main/py3-packaging: upgrade to 20.9
• main/ansible-base: upgrade to 2.10.5
• community/vault: security upgrade to 1.5.7
• community/kiln: new aport
• main/privoxy: upgrade to 3.0.31
• community/mozjs78: security upgrade to 78.7.0
• community/firefox-esr: security upgrade to 78.7.0
• community/mousepad: upgrade to 0.5.2
• community/kiln: disable on mips64
• community/dovecot-fts-xapian: upgrade to 1.4.7
• community/libnumbertext: upgrade to 1.0.7
• community/i3wm: upgrade to 4.19.1
• community/evince: upgrade to 3.38.1
• community/py3-bleach: fix GHSA-vv2x-vrpj-qqpq
• community/php7-pecl-redis: upgrade to 5.3.3
• community/php8-pecl-redis: upgrade to 5.3.3
• community/gitea: upgrade to 1.13.2
• main/linux-lts: backport fix for xen domU
• community/jool-modules-lts: rebuild against kernel 5.10.11-r1
• community/rtl8821ce-lts: rebuild against kernel 5.10.11-r1
• community/rtpengine-lts: rebuild against kernel 5.10.11-r1
• main/dahdi-linux-lts: rebuild against kernel 5.10.11-r1
• main/xtables-addons-lts: rebuild against kernel 5.10.11-r1
• main/zfs-lts: rebuild against kernel 5.10.11-r1
• main/linux-lts: enable VF driver for Intel X700/E800 NICs
• main/linux-rpi: upgrade to 5.10.12
• community/jool-modules-rpi: rebuild against kernel 5.10.12-r0
• main/zfs-rpi: rebuild against kernel 5.10.12-r0
• main/linux-lts: upgrade to 5.10.12
• community/jool-modules-lts: rebuild against kernel 5.10.12-r0
• community/rtl8821ce-lts: rebuild against kernel 5.10.12-r0
• community/rtpengine-lts: rebuild against kernel 5.10.12-r0
• main/dahdi-linux-lts: rebuild against kernel 5.10.12-r0
• main/xtables-addons-lts: rebuild against kernel 5.10.12-r0
• main/zfs-lts: rebuild against kernel 5.10.12-r0
• main/perl-test-output: upgrade to 1.032
• community/mumble: install murmur-openrc if murmur and openrc is installed
• community/mumble: fix murmur-openrc function
• community/py3-tox: upgrade to 3.21.4
• community/tor: upgrade to 0.4.4.7
• community/tor: downgrade to 0.4.4.6
• community/tor: upgrade to 0.4.4.7
• community/tor: fix checksum
• community/docker: security upgrade to 20.10.3
• community/py3-natsort: upgrade to 7.1.1
• testing/i3wm-gaps: upgrade to 4.19.1
• community/gpaste: upgrade to 3.38.5
• community/gnome-sound-recorder: upgrade to 3.38.1
• community/gnome-builder: upgrade to 3.38.2
• community/qca: upgrade to 2.3.2
• community/php7: security upgrade to 7.4.15 - CVE-2021-21702
• community/php8: security upgrade to 8.0.2 - CVE-2021-21702
• community/php8-pecl-apcu: add patch to fix ui
• community/postgresql-tsearch-czech: fix error in create script
• community/unit: upgrade to 1.22.0
• main/fuse3: upgrade to 3.10.2
• main/py3-iso8601: upgrade to 0.1.14
• community/btrfs-compsize: upgrade to 1.4
• community/collectd: fix linking with python3.8
• community/iotop-c: upgrade to 1.17
• main/haproxy: upgrade to 2.2.9
• community/perl-crypt-openssl-x509: fix depends
• main/py3-cryptography: security upgrade to 3.3.2
• main/clamav: upgrade to 0.103.1
• community/tllist: upgrade to 1.0.5
• community/httpie: upgrade to 2.4.0
• community/wlr-randr: upgrade to 0.2.0
• community/ginkgo: upgrade to 1.15.0
• main/py3-more-itertools: upgrade to 8.7.0
• community/btrfs-compsize: upgrade to 1.5
• main/git: upgrade to 2.30.1
• community/libudev-zero: upgrade to 0.4.8
• community/exfatprogs: upgrade to 1.1.0
• community/ruby-timecop: upgrade to 0.9.3
• community/ruby-i18n: upgrade to 1.8.8
• community/ruby-rspec-mocks: upgrade to 3.10.2
• community/ruby-rspec-support: upgrade to 3.10.2
• community/postgresql-plpgsql_check: upgrade to 1.15.2
• main/knot: upgrade to 3.0.4
• community/ruby-ox: upgrade to 2.14.1
• community/connman: fix CVE-2021-26676
• main/wpa_supplicant: fix CVE-2021-0326
• community/pipewire: upgrade to 0.3.21
• main/net-snmp: enable aes256 support
• main/linux-lts: upgrade to 5.10.15
• community/jool-modules-lts: rebuild against kernel 5.10.15-r0
• community/rtl8821ce-lts: rebuild against kernel 5.10.15-r0
• community/rtpengine-lts: rebuild against kernel 5.10.15-r0
• main/dahdi-linux-lts: rebuild against kernel 5.10.15-r0
• main/xtables-addons-lts: rebuild against kernel 5.10.15-r0
• main/zfs-lts: rebuild against kernel 5.10.15-r0
• community/py3-prompt_toolkit: upgrade to 3.0.15
• main/linux-rpi: upgrade to 5.10.15
• community/jool-modules-rpi: rebuild against kernel 5.10.15-r0
• main/zfs-rpi: rebuild against kernel 5.10.15-r0
• main/glib: upgrade to 2.66.6
• main/glib: add missing secfixes for 2.66.6
• main/busybox: add few serial devices to /etc/securetty
• main/subversion: security upgrade to 1.14.1
• community/openvswitch: security upgrade to 2.12.3
• community/py3-prompt_toolkit: upgrade to 3.0.16
• main/glib: upgrade to 2.66.7
• main/screen: fix CVE-2021-26937
• main/pango: upgrade to 1.48.2
• community/firefox: security upgrade to 85.0.2
• community/firefox-esr: upgrade to 78.7.1
• community/firefox: disable smoosh, fails to build
• main/audit: enable support for arm and aarch64
• community/php7-pecl-maxminddb: upgrade to 1.10.0
• community/php8-pecl-maxminddb: upgrade to 1.10.0
• main/libmaxminddb: remove openrc subpackage
• main/screen: use better patch for CVE-2021-26937
• community/runc: security upgrade to 1.0.0_rc93
• main/libusb: fix handling buggy USB devices
• community/openjdk8: upgrade to 3.17.1 (8.275.01)
• community/libqmi: upgrade to 1.26.10
• community/seahorse: upgrade to 3.38.1
• community/webkit2gtk: upgrade to 2.30.5
• main/openssl: upgrade to 1.1.1j
• main/linux-rpi: upgrade to 5.10.16
• community/jool-modules-rpi: rebuild against kernel 5.10.16-r0
• main/zfs-rpi: rebuild against kernel 5.10.16-r0
• main/linux-lts: upgrade to 5.10.16
• community/jool-modules-lts: rebuild against kernel 5.10.16-r0
• community/rtl8821ce-lts: rebuild against kernel 5.10.16-r0
• community/rtpengine-lts: rebuild against kernel 5.10.16-r0
• main/dahdi-linux-lts: rebuild against kernel 5.10.16-r0
• main/xtables-addons-lts: rebuild against kernel 5.10.16-r0
• main/zfs-lts: rebuild against kernel 5.10.16-r0
• main/openldap: security upgrade to 2.4.57
• ===== release 3.13.2 =====
• main/intel-ucode: security upgrade to 20210216
• main/nodejs: upgrade to 14.15.5
• community/wdisplays: fix segfault
• community/libebml: security upgrade to 1.4.2
• main/bacula: bacula-client should ship also bacula-client-openrc
• community/libmatroska: upgrade to 1.6.3
• main/python3: fix CVE-2021-3177
• main/python3: add reliability fix for test_nntplib
• community/vifm: add file to depends
• community/kde-release-service: upgrade to 20.12.2
• community/yelp-xsl: upgrade to 3.38.3
• community/ntpsec: fix location of library
• community/gexiv2: upgrade to 0.12.2
• main/libbsd: add missing secfixes info
• community/mumble: fix CVE-2021-27339
• community/php7-pecl-xdebug: upgrade to 3.0.3
• community/php8-pecl-xdebug: upgrade to 3.0.3
• community/py3-django: upgrade to 3.1.7
• main/redis: security upgrade to 6.0.11
• community/isync: upgrade to 1.3.5
• community/nextcloud: upgrade to 20.0.7
• community/nextcloud19: upgrade to 19.0.8
• community/libquotient: upgrade to 0.6.5
• community/plasma-angelfish: upgrade to 1.8.0
• community/kclock: upgrade to 0.4.0
• community/kalk: upgrade to 0.2
• community/kweather: upgrade to 0.4
• main/mdadm: fix use-after-free
• main/postgresql: security upgrade to 13.2
• main/nodejs: security upgrade to 14.16.0
• community/composer: upgrade to 2.0.10
• community/nodejs-current: security upgrade to 15.10.0
• main/openldap: fix CVE-2021-27212
• community/ssh-audit: upgrade to 2.4.0
• main/asterisk: security upgrade to 18.2.1
• community/composer: upgrade to 2.0.11
• community/firefox-esr: security upgrade to 78.8.0
• community/mozjs78: security upgrade to 78.8.0
• community/mauikit: upgrade to 1.2.1
• community/buho: upgrade to 1.2.1
• community/vvave: upgrade to 1.2.1
• community/index: upgrade to 1.2.1
• community/nota: upgrade to 1.2.1
• community/pix: upgrade to 1.2.1
• community/jenkins: security upgrade to 2.281.
• main/xen: fix XSA-364/CVE-2021-26933
• main/xen: CVE-2021-3308 assigned to XSA-360
• main/curl: backport fix for -w time_total output
• community/ssh-audit: disable on mips64
• main/pgpool: upgrade to 4.2.2
• community/boca: upgrade to 1.0.4
• community/freac: upgrade to 1.1.4
• community/nextcloud: allow replacing of v19
• community/nextcloud: upgrade to 20.0.8
• community/nextcloud19: upgrade to 19.0.9
• Revert "community/nextcloud: allow replacing of v19"
• community/php7-pecl-ssh2: upgrade to 1.3.1
• main/wpa_supplicant: patch CVE-2021-27803
• main/openjpeg: add misssing secfixes info
• community/libquotient: disable E2EE, it's broken
• community/mutt: upgrade to 2.0.6
• community/containerd: security update to 1.4.4
• community/containerd: disable on mips(64)
• main/haproxy: upgrade to 2.2.10
• community/ginkgo: upgrade to 1.15.1
• main/git: security upgrade to 2.30.2 (CVE-2021-21300)
• community/okular: split qml files to it's own subpackage
• {community,testing}/kde-release-service: upgrade to 20.12.3
• main/glib: fix symlink attack
• community/gitea: upgrade to 1.13.4
• community/php7-pecl-apcu: upgrade to 5.1.20
• community/php8-pecl-apcu: upgrade to 5.1.20
• community/dovecot-fts-xapian: upgrade to 1.4.8
• community/ifstate: upgrade to 1.5.0
• community/flatpak: upgrade to 1.10.2
• main/gnutls: upgrade to 3.7.1
• community/ruby-ox: upgrade to 2.14.3
• community/log4cplus: upgrade to 2.0.6
• main/nagios: fix truncation of pairlist in getcgivars(), closes #12516 (closed)
• main/gptfdisk: upgrade to 1.0.7
• community/gwenview: disable failing tests
• community/wireshark: security upgrade to 3.4.4
• main/python3: security upgrade to 3.8.8 (CVE-2021-23336)
• community/hcloud: upgrade to 1.21.0
• community/go: upgrade to 1.15.10
• community/go: fix test suite on Alpine CI
• main/tiff: security upgrade to 4.2.0
• community/ginkgo: upgrade to 1.15.2
• community/tor: security upgrade to 0.4.4.8
• community/flatbuffers: re-enable on armv7 and modernize
• community/sink: re-enable on armv7
• main/mbedtls: security upgrade to 2.16.10
• community/py3-django-haystack: fix dependencies
• community/py3-django-oscar: fix translations
• community/ifstate: upgrade to 1.5.1
• community/hcloud: upgrade to 1.21.1
• main/linux-lts: upgrade to 5.10.24
• community/jool-modules-lts: rebuild against kernel 5.10.24-r0
• community/rtl8821ce-lts: rebuild against kernel 5.10.24-r0
• community/rtpengine-lts: rebuild against kernel 5.10.24-r0
• main/dahdi-linux-lts: rebuild against kernel 5.10.24-r0
• main/xtables-addons-lts: rebuild against kernel 5.10.24-r0
• main/zfs-lts: rebuild against kernel 5.10.24-r0
• community/openrct2: upgrade to 0.3.3
• main/haproxy: upgrade to 2.2.11
• community/gtk4.0: upgrade to 4.0.3
• [3.13] community/cloud-init: fix CVE-2021-3429
• community/docker: add ip6tables dependency to docker-engine
• community/pipewire: add .desktop file to /etc/xdg/autostart
• main/libseccomp: enable python bindings
• community/gitea: upgrade to 1.13.5
• community/btrbk: upgrade to 0.31.2
• main/gdk-pixbuf: upgrade to 2.42.4
• community/lua-luatz: new aport
• community/rpm: upgrade to 4.16.1.3
• community/pipewire: upgrade to 0.3.24
• community/gitea: upgrade to 1.13.6
• main/openssh: fix CVE-2021-28041
• main/haserl: security upgrade to 0.9.36 (CVE-2021-29133)
• main/linux-lts: upgrade to 5.10.26
• community/jool-modules-lts: rebuild against kernel 5.10.26-r0
• community/rtl8821ce-lts: rebuild against kernel 5.10.26-r0
• community/rtpengine-lts: rebuild against kernel 5.10.26-r0
• main/dahdi-linux-lts: rebuild against kernel 5.10.26-r0
• main/xtables-addons-lts: rebuild against kernel 5.10.26-r0
• main/zfs-lts: rebuild against kernel 5.10.26-r0
• main/linux-rpi: upgrade to 5.10.26
• community/jool-modules-rpi: rebuild against kernel 5.10.26-r0
• main/zfs-rpi: rebuild against kernel 5.10.26-r0
• main/openssl: upgrade to 1.1.1k (CVE-2021-3449, CVE-2021-3450)
• main/raspberrypi-bootloader: upgrade to 1.20210303
• ===== release 3.13.3 =====
• community/php7-pecl-redis: upgrade to 5.3.4
• community/php8-pecl-redis: upgrade to 5.3.4
• main/knot: upgrade to 3.0.5
• community/php8-pecl-event: upgrade to 3.0.3
• community/php7-pecl-event: upgrade to 3.0.3
• main/ldb: upgrade to 2.2.1
• main/samba: security upgrade to 4.13.7
• community/powerdevil: fix dbus usage
• community/py3-lxml: securit upgrade to fix CVE-2021-28957
• main/linux-lts: fixes for ampere mt jade
• community/jool-modules-lts: rebuild against kernel 5.10.26-r1
• community/rtl8821ce-lts: rebuild against kernel 5.10.26-r1
• community/rtpengine-lts: rebuild against kernel 5.10.26-r1
• main/dahdi-linux-lts: rebuild against kernel 5.10.26-r1
• main/xtables-addons-lts: rebuild against kernel 5.10.26-r1
• main/zfs-lts: rebuild against kernel 5.10.26-r1
• main/squid: security upgrade to 5.0.5
• community/webkit2gtk: upgrade to 2.30.6
• community/pmbootstrap: upgrade to 1.30.0
• community/networkmanager: upgrade to 1.26.6
• community/networkmanager-elogind: upgrade to 1.26.6
• main/busybox: security fix CVE-2021-28831
• main/apk-tools: upgrade to 2.12.4
• main/linux-lts: upgrade to 5.10.27
• community/jool-modules-lts: rebuild against kernel 5.10.27-r0
• community/rtl8821ce-lts: rebuild against kernel 5.10.27-r0
• community/rtpengine-lts: rebuild against kernel 5.10.27-r0
• main/dahdi-linux-lts: rebuild against kernel 5.10.27-r0
• main/xtables-addons-lts: rebuild against kernel 5.10.27-r0
• main/zfs-lts: rebuild against kernel 5.10.27-r0
• main/linux-rpi: upgrade to 5.10.27
• community/jool-modules-rpi: rebuild against kernel 5.10.27-r0
• main/zfs-rpi: rebuild against kernel 5.10.27-r0
• main/busybox: fix post-upgrade stat error
• community/libquotient: upgrade to 0.6.6
• community/synapse: security upgrade to 1.30.1
• ===== release 3.13.4 =====
• community/youtube-dl: upgrade to 2021.04.01
• community/hcloud: upgrade to 1.22.0
• community/webkit2gtk: security upgrade to 2.32.0
• community/firefox-esr: security upgrade to 78.9.0
• main/asterisk: remove /tmp
• community/maliit-framework: upgrade to 2.0.0
• community/maliit-keyboard: upgrade to 2.0.0
• main/apk-tools: add hotfix for tarball parsing DoS (CVE pending)
• main/apk-tools: backout the hotfix, causes sporadic failures
• community/xterm: fix CVE-2021-27135
• community/ceph: upgrade to 15.2.10 * install dashboard mgr node_modules on install as too large
• community/ginkgo: upgrade to 1.16.0
• community/xterm: drop fix for CVE-2021-27135
• community/xterm: security upgrade to 367
• main/ruby: remove man files provided by ruby-bundler
• main/spamassassin: security upgrade to 3.4.5
• main/spamassassin: update source
• community/hcloud: upgrade to 1.22.1
• community/syncthing: fix CVE-2021-21404
• main/tar: security upgrade to 1.34
• main/lxc: fix cgroup mounting
• main/nodejs: security upgrade to 14.16.1
• community/php7-pecl-mongodb: upgrade to 1.9.1 and modernize
• community/php8-pecl-mongodb: upgrade to 1.9.1 and modernize
• community/gitea: upgrade to 1.13.7
• community/cbindgen: upgrade to 0.18.0
• main/cython: depend on python3
• community/firefox: upgrade to 87.0
• community/nss: upgrade to 3.61
• community/nss: upgrade to 3.62
• community/nss: upgrade to 3.63
• community/py3-django: security upgrade to 3.1.8
• community/php7-pecl-xdebug: upgrade to 3.0.4
• community/php8-pecl-xdebug: upgrade to 3.0.4
• community/maliit-keyboard: add missing runtime dep on dconf
• community/firefox: build with clang, doesn't OOM on 32-bit
• main/vala: upgrade to 0.50.6
• main/cairo: add patch for CVE-2020-35492
• main/clamav: upgrade to 0.103.2
• main/lxc-templates-legacy: account of existing nodes in alpine template
• community/py3-django-oscar: crash fix
• main/nodejs: fix CVE-2021-27290 in npm subpackage
• main/apk-tools: upgrade to 2.12.5
• community/nextcloud: upgrade to 20.0.9
• community/nextcloud19: upgrade to 19.0.10
• main/linux-rpi: upgrade to 5.10.29
• community/jool-modules-rpi: rebuild against kernel 5.10.29-r0
• main/zfs-rpi: rebuild against kernel 5.10.29-r0
• main/linux-lts: upgrade to 5.10.29
• community/jool-modules-lts: rebuild against kernel 5.10.29-r0
• community/rtl8821ce-lts: rebuild against kernel 5.10.29-r0
• community/rtpengine-lts: rebuild against kernel 5.10.29-r0
• main/dahdi-linux-lts: rebuild against kernel 5.10.29-r0
• main/xtables-addons-lts: rebuild against kernel 5.10.29-r0
• main/zfs-lts: rebuild against kernel 5.10.29-r0
• community/libvirt: use correct OpenRC service definitions for libvirt-guests
• community/librsvg: security upgrade to 2.50.4
• community/jenkins: security upgrade to 2.287
• main/vala: upgrade to 0.50.7
• main/postfix: upgrade to 3.5.10
• main/irssi: upgrade to 1.2.3
• community/nss: disable binary stripping
• community/xorg-server: fix CVE-2021-3472
• main/clamav: remove CVE-2021-1386 from secfixes
• main/curl: upgrade to 7.76.1 (CVE-2021-22876, CVE-2021-22890)
• community/xorg-server: upgrade to 1.20.11
• main/apk-tools: add secfixes info
• main/busybox: backport tab completion fix
• ===== release 3.13.5 =====
• community/pmbootstrap: upgrade to 1.31.0
• main/speedtest-cli: add patch to fix invalid literal errror
• main/ruby: security upgrade to 2.7.3
• main/bind: patch CVE-2020-8625
• main/binutils: upgrade to 2.35.2
• main/nettle: security upgrade to 3.7.2
• main/openvpn: upgrade to 2.5.1
• community/py3-scrypt: upgrade to 0.8.18
• community/php7-pecl-igbinary: upgrade to 3.2.2
• community/php8-pecl-igbinary: upgrade to 3.2.2
• testing/hfsprogs: update source to non-404, remove superfluous builddir
• community/zabbix: security upgrade to 5.2.6 (CVE-2021-27927)
• main/ircii: security upgrade to 20210314 (CVE-2021-29376)
• community/nebula: init executable, support multi instance
• main/poppler: add missing secfixes info
• main/f2fs-tools: add missing secfixes info
• main/hylafaxplus: rebuild against tiff-4.2.0 and enable -dbg
• main/iaxmodem: enable -dbg
• main/glib: upgrade to 2.66.8
• community/firefox-esr: security upgrade to 78.10.0
• community/mozjs78: upgrade to 78.9.0
• community/mozjs78: security upgrade to 78.10.0
• community/bolt: upgrade to 0.9.1
• community/evolution-data-server: upgrade to 3.38.4
• community/evolution: upgrade to 3.38.4
• community/evolution-ews: upgrade to 3.38.4
• community/gnome-autoar: security upgrade to 0.3.1
• community/firefox: security upgrade to 88.0
• main/redis: update secfixes
• community/salt: security upgrade to 3002.5 (multiple CVE's)
• main/ifupdown-ng: upgrade to 0.11.2
• community/evolution: add missing secfixes
• main/mariadb: upgrade to 10.5.9
• main/mariadb: update secfixes
• main/privoxy: security upgrade to 3.0.32
• main/privoxy: add secfixes
• community/wireshark: security upgrade to 3.4.5
• main/binutils: add mitigation for CVE-2021-3487
• main/libjpeg-turbo: security upgrade to 2.1.0
• community/dovecot-fts-xapian: upgrade to 1.4.9
• community/perl-image-exiftool: security upgrade to 12.25 (CVE-2021-22204)
• community/dcc: upgrade to 2.3.168
• main/wpa_supplicant: add mitigation for CVE-2021-30004
• main/hostapd: add mitigation for CVE-2021-30004
• community/py3-bleach: add missing dependency on py3-packaging
• community/qemu: drop obsolete signal 33/64 patch
• community/xrdp: fix secfixes entry for CVE-2020-4044
• main/dnsmasq: security upgrade to 2.85 (CVE-2021-3448)
• main/openjpeg: add mitigation for CVE-2021-29338
• main/avahi: mark CVE-2021-26720 as rejected
• community/vault: security upgrade to 1.5.8
• community/composer: security upgrade to 2.0.13 - CVE-2021-29472
• main/gstreamer: security upgrade to 1.18.4 (CVE-2021-3497, CVE-2021-3498)
• community/gst-plugins-good: security upgrade to 1.18.4 (CVE-2021-3497, CVE-2021-3498)
• community/connman: security upgrade to 1.39 (CVE-2021-26675)
• community/consul: security upgrade to 1.9.5 (CVE-2020-25864, CVE-2021-28156)
• community/firejail: security upgrade to 0.9.64.4 (CVE-2021-26910)
• community/upx: add mitigation for CVE-2021-20285
• community/discover: add mitigation for CVE-2021-28117
• community/mupdf: add mitigation for CVE-2021-3407
• community/firejail: disable test suite, broken
• community/ytnef: add mitigations for CVE-2021-3403 and CVE-2021-3404
• community/nomad: security upgrade to 0.12.10 (CVE-2021-3283)
• community/upx: work around github weirdness
• community/gsoap: security upgrade to 2.8.113 (CVE-2021-21783)
• main/bind: security upgrade to 9.16.15 (CVE-2021-25214, CVE-2021-25215, CVE-2021-25216)
• main/awstats: add mitigation for CVE-2020-35176
• community/nomad: disable on armhf
• main/poppler: mark CVE-2020-35702 as rejected
• main/opensmtpd: add mitigations for CVE-2020-35679 and CVE-2020-35680
• main/opensmtpd: add the missing patches
• community/pmbootstrap: upgrade to 1.32.0
• community/exiv2: add mitigations for CVE-2021-3482, CVE-2021-29457, CVE-2021-29458
• community/hermes: reject CVE-2021-1914 and CVE-2021-1915
• community/opendkim: mark CVE-2020-35766 as rejected, not relevant here
• community/flatbuffers: reject CVE-2020-35864
• community/openexr: denote fixes for CVE-2021-3477, CVE-2021-3478 and CVE-2021-3479 in version 2.5.4-r0
• community/mruby: add secfixes data for CVE-2020-15866
• community/libetpan: add missing secfixes data for CVE-2020-15953
• community/umoci: security upgrade to 0.4.7 (CVE-2021-29136)
• community/mpd: mark CVE-2020-7465 and CVE-2020-7466 as rejected, wrong product
• main/iaxmodem: upgrade to 1.3.2
• main/iaxmodem: backport fix for use-after-free
• main/samurai: add mitigations for CVE-2021-30218 and CVE-2021-30219
• main/openvpn: upgrade to 2.5.2
• main/openvpn: update secfixes
• community/cacti: security upgrade to 1.2.17 (CVE-2020-35701)
• main/samba: security upgrade to 4.13.8
• main/haproxy: upgrade to 2.2.14
• community/mutt: upgrade to 2.0.7
• community/exim: security upgrade to 4.94.2 (the "21nails" group of CVEs)
• main/python3: upgrade to 3.8.10
• community/ocaml: rebuild against binutils 2.35.2
• community/go: security upgrade to 1.15.12
• community/sdl2_ttf: enable static libraries
• community/php8: upgrade to 8.0.6
• community/php7: upgrade to 7.4.19
• main/linux-lts: record 5.10.4-r0 as fixing CVE-2020-29568 and CVE-2020-29569
• main/linux-lts: enable CONFIG_COMPAT for aarch64 virt
• main/linux-lts: upgrade to 5.10.36
• community/jool-modules-lts: rebuild against kernel 5.10.36-r0
• community/rtl8821ce-lts: rebuild against kernel 5.10.36-r0
• community/rtpengine-lts: rebuild against kernel 5.10.36-r0
• main/dahdi-linux-lts: rebuild against kernel 5.10.36-r0
• main/xtables-addons-lts: rebuild against kernel 5.10.36-r0
• main/zfs-lts: rebuild against kernel 5.10.36-r0
• main/linux-rpi: upgrade to 5.10.36
• community/jool-modules-rpi: rebuild against kernel 5.10.36-r0
• main/zfs-rpi: rebuild against kernel 5.10.36-r0
• main/net-snmp: backport ip parsing fix, enable -dbg
• main/postgresql: security upgrade to 13.3
• community/prosody: security upgrade to 0.11.9
• main/squid: security upgrade to 5.0.6
• community/xpdf: security upgrade to 4.03
• community/mupdf: use local patches
• community/synapse: security upgrade to 1.34.0
• main/libx11: security upgrade to 1.7.1