Alpine Linux 3.0.1 发布
Alpine Linux 项目很高兴地宣布其 Alpine Linux 操作系统的 3.0.1 版本立即发布。
这是一个 v3.0 musl 分支的错误修复版本。此版本基于 3.14.8 内核,其中包含一些关键的安全修复。
完整的更改列表可以在 git log 和 缺陷跟踪器 中找到。
简短日志
Bartłomiej Piotrowski (1): main/ruby: upgrade to 2.0.0_p481 Carlo Landmeter (1): main/freeswitch: enable and upgrade to 1.4.6 Eivind Uggedal (1): main/py-jinja2: security upgrade to 2.7.3 (CVE-2014-0012) Igmar Palsenberg (1): main/xl2tpd: build fix for musl Leonardo Arena (3): Security fix (CVE-2013-3215). Fixes #3031 main/linux-virt-grsec: upgrade to 3.14.6 main/linux-virt-grsec: upgrade to 3.14.8 Natanael Copa (57): main/freeradius: rebuild due to openssl upgrade main/libtasn1: security upgrade to 3.6 (CVE-2014-3467,CVE-2014-3468,CVE-20 main/linux-grsec: upgrade to 3.14.6 main/dahdi-linux-grsec: rebuild against kernel 3.14.6-r0 main/enhanceio-grsec: rebuild against kernel 3.14.6-r0 main/ipfw-grsec: rebuild against kernel 3.14.6-r0 main/open-vm-tools-grsec: rebuild against kernel 3.14.6-r0 main/xtables-addons-grsec: rebuild against kernel 3.14.6-r0 testing/ipt-netflow-grsec: rebuild against kernel 3.14.6-r0 testing/spl-grsec: rebuild against kernel 3.14.6-r0 testing/virtualbox-additions-grsec: rebuild against kernel 3.14.6-r0 testing/zfs-grsec: rebuild against kernel 3.14.6-r0 main/bind: security upgrade to 9.10.0_p2 (CVE-2014-3859) main/gitolite: use rm instead of unlink main/wireshark: security upgrade to 1.10.8 (CVE-2014-4020) main/bash: fix setuid bug main/php: fix php-fpm script main/fping: fix fping6 for non-root users main/vsftpd: post-install: dont exit with error if user exists main/clamav: upgrade to 0.98.4 main/bind: remove duplicate depend function main/nspr: security upgrade to 4.10.6 (CVE-2014-1545) main/bash: upgrade to 4.3.018 and update the suid patch main/sysklogd: update init.d script main/php: fix CVE-2014-4049 main/alpine-conf: upgrade to 3.0.3 main/linux-grsec: tune config main/linux-grsec: fix null pointer deref main/linux-grsec: upgrade to 3.14.8 main/linux-grsec: upgrade to grsecurity-3.0-3.14.8-201406222110 main/dahdi-linux-grsec: rebuild against kernel 3.14.8-r1 main/enhanceio-grsec: rebuild against kernel 3.14.8-r1 main/ipfw-grsec: rebuild against kernel 3.14.8-r1 main/open-vm-tools-grsec: rebuild against kernel 3.14.8-r1 main/xtables-addons-grsec: rebuild against kernel 3.14.8-r1 testing/ipt-netflow-grsec: rebuild against kernel 3.14.8-r1 testing/spl-grsec: rebuild against kernel 3.14.8-r1 testing/virtualbox-additions-grsec: rebuild against kernel 3.14.8-r1 testing/zfs-grsec: rebuild against kernel 3.14.8-r1 main/linux-vanilla: enable armhf build main/linux-vanilla: upgrade to 3.14.6 main/linux-vanilla: enable Elantec PS/2 mouse and SECCOMP main/linux-vanilla: syncronize config with grsec kernel main/linux-vanilla: upgrade to 3.14.8 main/linux-vanilla: enable CONFIG_PROC_PAGE_MONITOR main/tiff: security fixes for CVE-2013-4243 and CVE-2013-4244 main/musl: add -dbg subpackage main/syslinux: fix update-extlinux to handle vanilla kernel main/samba: security upgrade to 4.1.9 (CVE-2014-0244,CVE-2014-3493) main/php: enable -dbg main/freeradius: upgrade to 2.2.5 main/busybox-initscripts: fix ownership for /dev/snd/* main/phpmyadmin: security upgrade to 4.2.4 (CVE-2014-4348,CVE-2014-4349) main/xen: make sure /var/run/xen exists main/util-linux: enable chsh main/linux-virt-grsec: upgrade to grsecurity-3.0-3.14.8-201406222110 ==== release 3.0.1 ==== Timo Teräs (17): main/openssl: security upgrade to 1.0.1h (multiple CVE) main/musl: upgrade to git snapshot of 2014-06-05 main/musl: upgrade to 1.1.2 main/asterisk: security upgrade to 12.3.1 main/asterisk: security upgrade to 12.3.2 main/freeradius: fix openssl version check main/vsftpd: fix to work with musl, and clean ups main/collectd: limit stack usage to reasonable amount main/musl: cherry-pick bug fixes from git main/musl: cherry-pick fix for syslog.h aliasing violation main/sysklogd: rebuild against fixed musl-dev main/clamav: force large stacks on musl main/php: fix php_crypt implementation main/quagga: upgrade to 0.99.23 main/musl: upgrade to 1.1.3 main/nspr: fix musl build to have ipv6 and large-file support main/cvs: downgrade to newest stable release 1.11.23