Commits · 86cb13bd338f8f4a3c69e861d77fbe8140ce5335 · Johannes Müller / aports

29 Jul, 2019 1 commit
- main/libebml: fix CVE-2019-13615 · 86cb13bd
  Leo authored Jul 29, 2019 and Natanael Copa committed Jul 29, 2019
```
ref #10697
```
  86cb13bd
28 Jul, 2019 1 commit
- main/libgcrypt: fix CVE-2019-12904 · f684a98a
  Leo authored Jul 28, 2019 and Kevin Daudt committed Jul 28, 2019
```
ref #10692

Closes GH-9729
```
  f684a98a
26 Jul, 2019 1 commit
- main/sdl2: security upgrade to 2.0.10 · 99f38a9a
  Leo authored Jul 26, 2019 and Natanael Copa committed Jul 26, 2019
```
closes #10341
```
  99f38a9a
24 Jul, 2019 2 commits
- main/libtasn1: fix CVE-2018-1000654 · 516129f7
  Leo authored Jul 21, 2019 and Natanael Copa committed Jul 24, 2019
```
fixes #10521
```
  516129f7
- main/sqlite: fix CVE-2019-8457 · 5752dce5
  Leo authored Jul 23, 2019 and Natanael Copa committed Jul 24, 2019
```
Fixes #10540
```
  5752dce5
23 Jul, 2019 2 commits
- main/zeromq: fix CVE-2019-13132 · cea68283
  Leo authored Jul 23, 2019 and Natanael Copa committed Jul 23, 2019
```
fixes #10687
```
  cea68283
- main/patch: fix CVE-2019-13636 · 1d883b90
  Leo authored Jul 23, 2019 and Natanael Copa committed Jul 23, 2019
```
fixes #10688
```
  1d883b90
22 Jul, 2019 7 commits
- main/libjpeg-turbo: backport fix for CVE-2018-14498 · 39308e8b
  Leo authored Jul 16, 2019 and Natanael Copa committed Jul 22, 2019
  
  39308e8b
- main/polkit: backport fix for CVE-2019-6133 · 982c3b6a
  Leo authored Jul 16, 2019 and Natanael Copa committed Jul 22, 2019
  
  982c3b6a
- main/mercurial: fix CVE-2019-32902 · 87765f5b
  Leo authored Jul 21, 2019 and Natanael Copa committed Jul 22, 2019
```
Fixes alpine/aports#10376
```
  87765f5b
- main/libcroco: fix a few CVEs · 1e378edc
  Leo authored Jul 21, 2019 and Natanael Copa committed Jul 22, 2019
```
- CVE-2017-7960
- CVE-2017-7961
- CVE-2017-8834
- CVE-2017-8871

Fixes alpine/aports#10566
```
  1e378edc
- main/python2: fix a few CVEs · 63295e4a
  Leo authored Jul 21, 2019 and Natanael Copa committed Jul 22, 2019
```
- CVE-2018-14647
- CVE-2019-9636
- CVE-2019-9948
```
  63295e4a
- main/gvfs: backport fixes for a few CVEs · 948e97de
  Leo authored Jul 22, 2019 and Natanael Copa committed Jul 22, 2019
```
- CVE-2019-12795
- CVE-2019-12449
- CVE-2019-12447
- CVE-2019-12448
```
  948e97de
- main/py-django: security upgrade to 1.11.22 (CVE-2019-12781) · b6c78e19
  Natanael Copa authored Jul 18, 2019
```
fixes #10676
```
  b6c78e19
17 Jul, 2019 6 commits

main/mosquitto: don't build the dockbook · 6c482963

Leonardo Arena authored Jul 17, 2019

It needs xsltproc but fails to build

xsltproc mosquitto.conf.5.xml
warning: failed to load external entity /usr/share/xml/docbook/stylesheet/docbook-xsl/manpages/docbook.xsl
compilation error: file manpage.xsl line 3 element import
xsl:import : unable to load /usr/share/xml/docbook/stylesheet/docbook-xsl/manpages/docbook.xsl
compilation error: file mosquitto.conf.5.xml line 4 element refentry
xsltParseStylesheetProcess : document is not a stylesheet
make[1]: *** [Makefile:51: mosquitto.conf.5] Error 5

6c482963

main/mosquitto: add fix for a few CVEs · cdf3e55b

Leo authored Jul 16, 2019



- CVE-2018-12546
- CVE-2018-12550
- CVE-2018-12551

Fixes #10270
Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>

cdf3e55b

main/libsndfile: backport fix for CVE-2018-19758 and CVE-2019-3832 · 83d74e47
Leo authored Jul 16, 2019
```
Fixes #10109
Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
```
83d74e47
main/coreutils: add secfixes comment for CVE-2017-18018 · af7395aa
Leo authored Jul 16, 2019

af7395aa
main/avahi: fix CVE-2017-6519 and CVE-2018-1000845 · 6dd2468d
Leo authored Jul 16, 2019
```
Fixes #9242
Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
```
6dd2468d
main/file: backport a few CVE fixes · e417e312
Leo authored Jul 16, 2019 and Natanael Copa committed Jul 17, 2019
```
- CVE-2019-8905
- CVE-2019-8906
- CVE-2019-8907
```
e417e312

11 Jul, 2019 3 commits
- main/squid: fix checksum · d53ed0c4
  Natanael Copa authored Jul 11, 2019
  
  d53ed0c4
- main/squid: fix CVE-2019-13345 · 0a4f1520
  Natanael Copa authored Jul 11, 2019
```
fixes #10669
```
  0a4f1520
- main/heimdal: security fix for CVE-2019-12098 · c29e49eb
  Natanael Copa authored Jul 11, 2019
```
fixes #10555
```
  c29e49eb
08 Jul, 2019 2 commits
- main/tcpflow: backport fix for CVE-2018-18409 · f9f4e0e8
  Natanael Copa authored Jul 08, 2019
```
and remove unused patch

ref #10429
```
  f9f4e0e8
- main/tcpflow: upgrade to 1.5.0 · 8a41419a
  Natanael Copa authored Oct 30, 2018
  
  8a41419a
04 Jul, 2019 4 commits
- main/bzip2: add patch for CVE-2019-12900 · 263042b4
  ntaylor1781 authored Jun 27, 2019 and Natanael Copa committed Jul 04, 2019
```
Adding the upstream bzip2 security patch to fix the out of bounds security
vulnerability in bzip2.

fixes #10647
```
  263042b4
- main/irssi: security upgrade to 1.0.8 (CVE-2019-13045) · 23cf1dbb
  Natanael Copa authored Jul 04, 2019
```
fixes #10658
```
  23cf1dbb
- main/postgresql: security upgrade to 10.9 · 16dcb2a2
  Milan P. Stanić authored Jul 01, 2019 and Natanael Copa committed Jul 04, 2019
```
CVE-2019-10164
other upstream bugfixes
fixes #10641
```
  16dcb2a2
- main/patchwork: security fix (CVE-2019-13122) · 2980b18b
  Francesco Colista authored Jul 04, 2019
  
  2980b18b
03 Jul, 2019 1 commit
- main/libvirt: security upgrade to 5.5.0 · 8cad441d
  Francesco Colista authored Jul 03, 2019
```
(CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168)

Fixes #10620
```
  8cad441d
30 Jun, 2019 1 commit
- main/expat: security upgrade to 2.2.7 (CVE-2018-20843) · 300e04f0
  Natanael Copa authored Jun 28, 2019
```
fixes #10633
```
  300e04f0
25 Jun, 2019 2 commits
- main/py-django: security upgrade to 1.11.21 (CVE-2019-12308) · 901a6212
  Natanael Copa authored Jun 25, 2019
```
fixes #10561
```
  901a6212
- community/pdns: security upgrade to 4.0.8 · 634dbf6d
  J0WI authored Jun 24, 2019
```
CVE-2019-10162
CVE-2019-10163
```
  634dbf6d
23 Jun, 2019 1 commit
- main/bind: upgrade to 9.11.8 (CVE-2019-6471) · 0114ee65
  Kevin Daudt authored Jun 23, 2019
```
Replace-atomic-operations.patch was an upstream patch that is now
included in the release.
```
  0114ee65
22 Jun, 2019 1 commit
- main/vim: backport fix for CVE-2019-12735 · aaf594bc
  Natanael Copa authored Jun 22, 2019
```
fixes #10562
```
  aaf594bc
18 Jun, 2019 4 commits
- testing/wireguard-vanilla: rebuild against kernel 4.9.182-r0 · ddc09d8b
  Natanael Copa authored Jun 18, 2019
  
  ddc09d8b
- main/zfs-vanilla: rebuild against kernel 4.9.182-r0 · a94b07c3
  Natanael Copa authored Jun 18, 2019
  
  a94b07c3
- main/spl-vanilla: rebuild against kernel 4.9.182-r0 · 89b1eb7f
  Natanael Copa authored Jun 18, 2019
  
  89b1eb7f
- main/linux-vanilla: upgrade to 4.9.182 · 8ae5cf0d
  Natanael Copa authored Jun 18, 2019
  
  8ae5cf0d
17 Jun, 2019 1 commit
- main/dbus: upgrade to 1.10.28 (CVE-2019-12749) · f85fc6d3
  Natanael Copa authored Jun 17, 2019
```
fixes #10571
```
  f85fc6d3