Date: Wed, 8 Oct 2014 15:58:41 +0200
From: Natanael Copa <ncopa@alpinelinux.org>
To: alpine-devel@lists.alpinelinux.org
Subject: [alpine-devel] Alpine 3.0.5 released
Message-ID: <20141008155841.4dce995d@ncopa-desktop.alpinelinux.org>
Precedence: list
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable


The Alpine Linux project is pleased to announce the immediate availability =
of version 3.0.5 of its Alpine Linux operating system.

This is a bugfix release of the v3.0 musl based branch. This release is bas=
ed on the 3.14.20 kernel which has some critical security fixes.

The full lists of changes can be found in the [git log](http://git.alpineli=
nux.org/cgit/aports/log/?h=3Dv3.0.5) and [bug tracker](http://bugs.alpineli=
nux.org/versions/88).

Shortlog
--------

Carlo Landmeter (1):
      main/bash: upgrade to 4.3.025 fixes CVE-2014-6271

Eivind Uggedal (3):
      main/django: upgrade to 1.6.7 for security bugfix
      main/python: upgrade to 2.7.7
      main/python: upgrade to 2.7.8

Johannes Matheis (1):
      main/openssh: curve25519pad patch added

Leonardo Arena (11):
      main/owncloud: upgrade to 6.0.5
      main/mqtt-exec: allow to specify more command options into init.d
      main/lsyncd: fix lpostcmd
      main/zabbix: upgrade to 2.2.6. Don't install uclibc related patches
      main/zabbix: improve libc detection for selective patching
      main/phpldapadmin: fixes for php-5.5.16
      main/phpldapadmin: one more fix for php-5.5.16
      main/lsyncd: rewrite initd to add support for command_args
      main/lsyncd: fix init
      main/bash: upgrade to 4.3.026 fixes CVE-2014-6271 for good
      main/linux-virt-grsec: upgrade to 3.14.20

Natanael Copa (81):
      main/screen: remove suid bit
      main/snort: enable non ether decoders for PPPoE
      main/php: security upgrade to 5.5.16 (CVE-2014-3538,CVE-2014-3587,CVE=
-2014
      main/phpmyadmin: security upgrade to 4.2.8 (CVE-2014-5274)
      main/ffmpeg: security upgrade to 2.2.7 (CVE-2014-5271,CVE-2014-5272)
      main/shorewall-core: upgrade to 4.6.3.1
      main/shorewall: upgrade to 4.6.3.1
      main/shorewall6: upgrade to 4.6.3.1
      main/shorewall-core: upgrade to 4.6.3.2
      main/shorewall: upgrade to 4.6.3.2
      main/shorewall6: upgrade to 4.6.3.2
      main/freeradius: fix segfault in rlm_unix
      main/mqtt-exec: fix typo in init.d script
      main/mqtt-exec: upgrade to 0.3
      main/roundcubemail: upgrade to 1.0.2
      main/procmail: security fix (CVE-2014-3618)
      main/lua-sql: merge lua-sql drivers
      main/dhcpcd: security upgrade to 6.4.3 (CVE-2014-6060)
      main/bitlbee: upgrade to 3.2.2
      main/fetchmail: create dir for pidfile on startup
      main/linux-pam: make unix_chkpwd utility suid shadow
      main/nginx: security upgrade to 1.6.2 (CVE-2014-3616)
      ncurses: make ncurses-terminfo depend on ncurses-base
      main/net-snmp: fix CVE-2014-3565
      main/bash: fix application of patches
      main/nss: security upgrade to 3.16.2.1 (CVE-2014-1568)
      main/mysql: upgrade to 5.5.40
      main/bash: security upgrade to 4.3.027 (CVE-2014-7169)
      main/perl-file-sharedir-install: new aport
      main/perl-plack: security upgrade to 1.0031 (CVE-2014-5269)
      main/rt4: run testdeps to verify deps are ok

      main/squid: security upgrade to 3.4.8
      main/linux-grsec: upgrade to 3.14.18
      main/linux-grsec: disable randomize base on x86
      main/linux-grsec: disable USB_KBD and USB_MOUSE
      main/linux-grsec: enable NFC for x86 and x86_64
      main/linux-grsec: enable QLogic Infiniband & ISER Target kernel modul=
es
      main/linux-grsec: upgrade to grsecurity-3.0-3.14.19-201409282024
      main/dahdi-linux-grsec: rebuild against kernel 3.14.19-r2
      main/flashcache-grsec: rebuild against kernel 3.14.19-r2
      main/ipfw-grsec: rebuild against kernel 3.14.19-r2
      main/xtables-addons-grsec: rebuild against kernel 3.14.19-r2
      testing/ipt-netflow-grsec: rebuild against kernel 3.14.19-r2
      testing/spl-grsec: rebuild against kernel 3.14.19-r2
      testing/virtualbox-additions-grsec: rebuild against kernel 3.14.19-r2
      main/aports-build: upload latest-releases.yaml if it exists
      main/xen: upgrade to 4.3.3 and fix CVE-2014-7188
      main/qemu: security upgrade to 2.1.2 (CVE-2014-3615)
      main/ruby-activesupport: upgrade to 4.0.10
      main/ruby-activemodel: upgrade to 4.0.10
      main/ruby-actionpack: upgrade to 4.0.10
      main/ruby-actionmailer: upgrade to 4.0.10
      main/ruby-activerecord: upgrade to 4.0.10
      main/ruby-railties: upgrade to 4.0.10
      main/ruby-rails: upgrade to 4.0.10
      main/linux-grsec: build ehci-hcd into kernel
      main/dahdi-linux-grsec: rebuild against kernel 3.14.19-r3
      main/flashcache-grsec: rebuild against kernel 3.14.19-r3
      main/ipfw-grsec: rebuild against kernel 3.14.19-r3
      main/xtables-addons-grsec: rebuild against kernel 3.14.19-r3
      testing/ipt-netflow-grsec: rebuild against kernel 3.14.19-r3
      testing/spl-grsec: rebuild against kernel 3.14.19-r3
      testing/virtualbox-additions-grsec: rebuild against kernel 3.14.19-r3
      main/linux-grsec: upgrade to 3.14.20
      main/linux-grsec: fix booting of xen dom0
      main/dahdi-linux-grsec: rebuild against kernel 3.14.20-r1
      main/flashcache-grsec: rebuild against kernel 3.14.20-r1
      main/ipfw-grsec: rebuild against kernel 3.14.20-r1
      main/xtables-addons-grsec: rebuild against kernel 3.14.20-r1
      testing/ipt-netflow-grsec: rebuild against kernel 3.14.20-r1
      testing/spl-grsec: rebuild against kernel 3.14.20-r1
      testing/virtualbox-additions-grsec: rebuild against kernel 3.14.20-r1
      main/py-rtslib: upgrade to 2.1_p50
      main/targetcli: upgrade to 2.1_p37
      main/linux-vanilla: upgrade to 3.14.18
      main/linux-vanilla: fix armhf config
      main/linux-vanilla: sync with grsec
      main/linux-vanilla: upgrade to 3.14.19
      main/linux-vanilla: upgrade to 3.14.20
      main/linux-vanilla: fix description
      =3D=3D=3D=3D release 3.0.5 =3D=3D=3D=3D

Ted Trask (5):
      main/acf-lib: upgrade to 0.6.4
      main/acf-core: upgrade to 0.18.2
      main/acf-freeradius3: new aport
      main/acf-freeradius3: upgrade to 0.1.1
      main/acf-core: upgrade to 0.18.3

Timo Ter=E4s (2):
      main/asterisk: security upgrade to 12.5.1
      main/aaudit: minor server side fix

xming (1):
      main/bash: update to 4.3.28, fix CVE-2014-7186 and CVE-2014-7187


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---