Alpine Linux Development

02/16/2012

09:44 am Alpine Linux Bug #796: iSCSI initiator support

Open-iSCSI has been removed from edge.
Now we have available in edge/testing _targetcli_, the TCM iSCSI initiator....

02/12/2012

07:57 pm Alpine Linux Bug #1005 (Closed): [v2.2] Vulnerability in sudo < 1.8.3p2 allow local privilege escalation

http://www.sudo.ws/sudo/alerts/sudo_debug.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2012-0809
Please note t...

06:27 pm Alpine Linux Bug #1004 (Closed): [v2.1] Multiple vulnerabilities in wireshark < 1.4.11 may allow code execution

http://www.wireshark.org/security/wnpa-sec-2012-01.html
http://www.wireshark.org/security/wnpa-sec-2012-02.html
htt...

06:24 pm Alpine Linux Bug #1003 (Closed): [v2.2] Multiple vulnerabilities in wireshark < 1.4.11 may allow code execution

http://www.wireshark.org/security/wnpa-sec-2012-01.html
http://www.wireshark.org/security/wnpa-sec-2012-02.html
http:...

02/01/2012

08:35 am Alpine Linux Bug #988 (Closed): [v2.1] Multiple vulnerabilities in curl < 7.24.0 may allow remote code execution

http://curl.haxx.se/docs/adv_20120124B.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389
http://cu...

08:35 am Alpine Linux Bug #987 (Closed): [v2.2] Multiple vulnerabilities in curl < 7.24.0 may allow remote code execution

http://curl.haxx.se/docs/adv_20120124B.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389
http://cu...

08:34 am Alpine Linux Bug #986 (Closed): [v2.3] Multiple vulnerabilities in curl < 7.24.0 may allow remote code execution

http://curl.haxx.se/docs/adv_20120124B.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389
http://cu...

01/31/2012

12:32 pm Alpine Linux Bug #961 (Resolved): main/geoip data updating

Fixed in commit ae01bbf1922a43ecd3260657195683b69461c464

10:16 am Alpine Linux Bug #981 (Rejected): Vulnerability in xkeyboard-config < 2.4.1 may allow local screen lock bypass

http://www.gentoo.org/security/en/glsa/glsa-201201-16.xml
Solution
- Upgrade to 2.4.1

10:05 am Alpine Linux Bug #980 (Closed): Vulnerability in wireshark < 1.6.5 may allow code execution

http://www.debian.org/security/2012/dsa-2395
Solution:
- Upgrade to 1.6.5