Commits · 5c40dfc3f9763d20de339d8f1b694b48631d253b · Dominika Liberda / aports

Apr 19, 2020
- main/xen: fix various security issues · 5c40dfc3
  Leo authored 4 years ago
  
  For #11400 Fixed CVEs: - CVE-2020-11739 - CVE-2020-11740 - CVE-2020-11741 - CVE-2020-11742 - CVE-2020-11743
  5c40dfc3
- community/tor: re-enable and rebuild to avoid bogus IDS warning · 9558d575
  Ariadne Conill authored 4 years ago
  
  9558d575
Apr 18, 2020
- community/tor: disable package pending security review · 6a232869
  Ariadne Conill authored 4 years ago
  
  6a232869
Apr 17, 2020
- main/ansible: security upgrade to 2.8.11 · 6cb3058c
  Keith Maxwell authored 4 years ago
  
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst#v2811
  6cb3058c
- main/mcpp: fix CVE-2019-14274 · e044f037
  Sören Tempel authored 4 years ago
  
  Patch taken from Debian.
  e044f037
Apr 15, 2020
- Revert "main/mariadb: disable on armhf and armv7" · 4f0eb747
  J0WI authored 4 years ago and Natanael Copa committed 4 years ago
  
  This reverts commit 7ebd9628.
  4f0eb747
Apr 14, 2020
- main/git: security upgrade to 2.22.3 · 91e3602c
  J0WI authored 4 years ago and Kevin Daudt committed 4 years ago
  
  91e3602c
- main/ca-certificates: upgrade to 20191127 · d019be79
  Rasmus Thomsen authored 4 years ago and Leo committed 4 years ago
  
  New certificate distrusts have been added, so this should be backported
  d019be79
Apr 09, 2020
- main/libssh: security upgrade to 0.8.9 · 1b98e4aa
  J0WI authored 4 years ago
  
  1b98e4aa
- main/gd: patch CVE-2018-14553 and CVE-2019-11038 · 2a812850
  J0WI authored 4 years ago and Leo committed 4 years ago
  
  2a812850
Apr 08, 2020
- main/mariadb: disable on armhf and armv7 · 7ebd9628
  Leo authored 4 years ago
  
  7ebd9628
Apr 07, 2020
- main/mariadb: security upgrade to 10.3.22 · 4b2ff69c
  J0WI authored 4 years ago
  
  4b2ff69c
Apr 05, 2020
- community/ffmpeg: security upgrade to 4.1.5 · de8ecbcf
  J0WI authored 4 years ago
  
  de8ecbcf
Apr 04, 2020
- main/xen: add missing secfixes info · c49084a9
  Leo authored 4 years ago
  
  c49084a9
- main/mbedtls: security upgrade to 2.16.5 · c087d07f
  Leo authored 4 years ago
  
  c087d07f
Apr 03, 2020
- main/gnutls: add CVE secfixes info · dbcc36c6
  Leo authored 4 years ago
  
  dbcc36c6
Apr 02, 2020
- main/haproxy: security upgrade to 2.0.14 · f0192cc6
  J0WI authored 4 years ago and Leo committed 4 years ago
  
  f0192cc6
- main/haproxy: upgrade to 2.0.13 · 6b36e926
  Milan P. Stanić authored 5 years ago and Leo committed 4 years ago
  
  6b36e926
- main/squid: security upgrade to 4.10 · a03c8d15
  Natanael Copa authored 4 years ago
  
  - CVE-2019-12528 - CVE-2020-8449 - CVE-2020-8450 - CVE-2020-8517 fixes #11284
  a03c8d15
Apr 01, 2020
- main/apache2: security upgrade to 2.4.43 · bf5b4711
  J0WI authored 4 years ago
  
  bf5b4711
- main/ruby: upgrade to 2.5.8 · 5499c35b
  Robert Pritzkow authored 4 years ago
  
  5499c35b
Mar 31, 2020
- main/gnutls: fix GNUTLS-SA-2020-03-31 · bf7ea3dd
  Leo authored 4 years ago
  
  bf7ea3dd
- main/screen: fix patch for CVE-2020-9366 · c4fb5bfb
  Natanael Copa authored 4 years ago
  
  c4fb5bfb
Mar 30, 2020
- main/screen: fix CVE-2020-9366 · 74e6a27a
  Leo authored 4 years ago
  
  74e6a27a
Mar 27, 2020
- main/unzip: actually fix CVE-2019-13232 · faf1de37
  Leo authored 4 years ago
  
  use patch from Fedora
  faf1de37
- community/nextcloud: upgrade to 16.0.9 · 90197b46
  Leonardo Arena authored 4 years ago
  
  90197b46
Mar 26, 2020
- main/unzip: fix CVE-2019-13232 · 2d5ea9b0
  Leo authored 4 years ago
  
  2d5ea9b0
- main/libmspack: fix CVE-2019-1010305 · 7b7625a8
  Leo authored 4 years ago
  
  see #10814
  7b7625a8
Mar 24, 2020
- main/icu: fix CVE-2020-10531 · a03d4c39
  Leo authored 4 years ago
  
  see #11329
  a03d4c39
- main/bluez: fix CVE-2020-0556 · 1a09b722
  Leo authored 4 years ago
  
  see #11328
  1a09b722
Mar 18, 2020
- community/tor: security upgrade to 0.3.5.10 · 2185d3b8
  J0WI authored 5 years ago and Leo committed 5 years ago
  
  2185d3b8
Mar 17, 2020
- main/ansible: security upgrade to 2.8.9 · 45791317
  Leo authored 5 years ago
  
  see #11307
  45791317
Mar 16, 2020
- main/lz4: fix CVE-2019-17543 · c2274e2a
  Leo authored 5 years ago
  
  see #10919
  c2274e2a
Mar 15, 2020
- main/gst-plugins-base: add secfixes · 101d06c9
  Leo authored 5 years ago
  
  101d06c9
Mar 14, 2020
- main/iptables: restore lost init.d script for ebtables · 17a69638
  Thomas Liske authored 5 years ago and Leo committed 5 years ago
  
  17a69638
Mar 11, 2020
- main/libarchive: fix CVE-2020-19221 and CVE-2020-9308 · ba6aa5f8
  Leo authored 5 years ago
  
  ba6aa5f8
Mar 10, 2020

main/ppp: secfix for radius and EAP · ba5a86b7

Milan P. Stanić authored 5 years ago and

Leo committed 5 years ago

backported security fixes from upstream:

radius: Prevent buffer overflow in rc_mksid()
pppd: Fix bounds check in EAP code
pppd: Ignore received EAP messages when not doing EAP
add 'secfixes'

ba5a86b7

main/py-django: security upgrade to 1.11.29 · de8f6b00
Leo authored 5 years ago
```
see #11288
```
de8f6b00

Mar 06, 2020
- community/mpv: bump pkgrel due to live-media upgrade · e2e1be28
  Francesco Colista authored 5 years ago
  
  e2e1be28
- community/vlc: bump pkgrel due to live-media upgrade · f06da945
  Francesco Colista authored 5 years ago
  
  f06da945