Alpine Linux Development

02/01/2012

08:35 am Alpine Linux Bug #988 (Closed): [v2.1] Multiple vulnerabilities in curl < 7.24.0 may allow remote code execution

http://curl.haxx.se/docs/adv_20120124B.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389
http://cu...

08:35 am Alpine Linux Bug #987 (Closed): [v2.2] Multiple vulnerabilities in curl < 7.24.0 may allow remote code execution

http://curl.haxx.se/docs/adv_20120124B.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389
http://cu...

08:34 am Alpine Linux Bug #986 (Closed): [v2.3] Multiple vulnerabilities in curl < 7.24.0 may allow remote code execution

http://curl.haxx.se/docs/adv_20120124B.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389
http://cu...

01/31/2012

12:32 pm Alpine Linux Bug #961 (Resolved): main/geoip data updating

Fixed in commit ae01bbf1922a43ecd3260657195683b69461c464

10:16 am Alpine Linux Bug #981 (Rejected): Vulnerability in xkeyboard-config < 2.4.1 may allow local screen lock bypass

http://www.gentoo.org/security/en/glsa/glsa-201201-16.xml
Solution
- Upgrade to 2.4.1

10:05 am Alpine Linux Bug #980 (Closed): Vulnerability in wireshark < 1.6.5 may allow code execution

http://www.debian.org/security/2012/dsa-2395
Solution:
- Upgrade to 1.6.5

09:57 am Alpine Linux Bug #979 (Closed): Multiple Vulnerabilities in ruby-actionpack < 2.3.13 may remote code execution

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2931
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3...

09:57 am Alpine Linux Bug #978 (Closed): Multiple Vulnerabilities in ruby-actionpack < 2.3.13 may remote code execution

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2931
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3...

09:55 am Alpine Linux Bug #977 (Closed): Vulnerability in ruby-activerecord < 2.3.13 may allow SQL injection

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2930
Solution
- Upgrade to 2.3.13
- Patches:
http...

09:37 am Alpine Linux Bug #976 (Closed): Multiple Vulnerabilities in perl <= 5.14.2 may allow remote code execution

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3597
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2...