Alpine Linux 3.18.4 has been released with various bug fixes and security updates.
Alpine 3.18.4 released
We are pleased to announce the release of Alpine Linux 3.18.4, a maintenance release of the 3.18 series. This release includes various bug fixes and security updates.
The full lists of changes can be found in the git log.
GIT SHORTLOG
Alex McGrath (1): community/transmission: upgrade to 4.0.4 Andy Postnikov (9): community/php82-pecl-couchbase: upgrade to 4.1.5 community/php81-pecl-couchbase: upgrade to 4.1.5 community/php81-pecl-mailparse: upgrade to 3.1.6 main/nodejs: security upgrade to 18.17.1 community/php82: upgrade to 8.2.9 community/php82: upgrade to 8.2.10 community/php81: upgrade to 8.1.23 community/php81-pecl-redis: upgrade to 6.0.0 community/php82-pecl-redis: upgrade to 6.0.0 Antoine Martin (9): community/dotnet7-build: upgrade to 7.0.110 community/dotnet7-runtime: upgrade to 7.0.10 community/dotnet6-build: upgrade to 6.0.121 community/dotnet6-runtime: upgrade to 6.0.21 community/dotnet6-build: upgrade to 6.0.122 community/dotnet6-runtime: upgrade to 6.0.22 community/git-annex: upgrade to 10.20230828 community/dotnet7-build: security upgrade to 7.0.111 community/dotnet7-runtime: security upgrade to 7.0.11 Bart Ribbers (1): community/koko: make it easier to update geodata Celeste (27): main/mosquitto: upgrade to 2.0.16 main/mosquitto: upgrade to 2.0.17 community/neo4j: upgrade to 4.4.25 community/java-netty-transport-native: upgrade to 4.1.97 community/vnstat: upgrade to 2.11 community/python3-tkinter: upgrade to 3.11.5 main/python3: security upgrade to 3.11.5 community/xrdp: security upgrade to 0.9.23 community/borgbackup: security upgrade to 1.2.6 community/open-vm-tools: security upgrade to 12.3.0 community/py3-django: security upgrade to 4.2.5 main/mariadb: upgrade to 10.11.5 main/redis: security upgrade to 7.0.13 community/neovim: upgrade to 0.9.2 community/py3-openssl: upgrade to 23.2.0 community/ruby-pkg-config: upgrade to 1.5.5 community/ruby-timecop: upgrade to 0.9.8 community/netatalk: security upgrade to 3.1.17 main/cups: security upgrade to 2.4.7 main/curl: security upgrade to 8.3.0 community/minio: upgrade to 0.20230920.224955 main/bind: security upgrade to 9.18.19 community/stunnel: upgrade to 5.71 community/neo4j: upgrade to 4.4.26 community/keepassxc: upgrade to 2.7.6 community/synapse: security upgrade to 1.93.0 community/xrdp: security upgrade to 0.9.23.1 Dhruvin Gandhi (1): community/hledger-interest: upgrade to 1.6.6 Duncan Bellamy (3): main/mariadb: add fmt10 patches community/ceph16: upgrade to 16.2.14 community/py3-cryptography: security upgrade to 41.0.3 for CVE-2023-38325 Elly Fong-Jones (1): community/chromium: roll 3.18-stable to 117.0.5938.62 Francesco Colista (7): community/py3-sentry-sdk: upgrade to 1.24.0 community/perl-business-isbn-data: upgrade to 20230516.001 main/sofia-sip: bump pkgrel community/lua-resty-lock: backport from edge community/lua-resty-lock: added missing dep community/lua-resty-lock: bump pkgrel due to added depend community/lua-resty-lock: fix build due to luajit missing for ppc64 and riscv64 Henrik Riomar (3): main/intel-ucode: security upgrade to 20230808 main/xen: security upgrade to 4.17.2 community/nats-server: upgrade to 2.9.22 Hugo Osvaldo Barrera (1): community/linux-edge: set CONFIG_KEXEC=y J0WI (5): community/firefox-esr: security upgrade to 115.1.0 community/thunderbird: security upgrade to 115.1.0 community/ntpsec: security upgrade to 1.2.2a main/procps-ng: security upgrade to 4.0.4 community/wolfssl: upgrade to 5.6.3 Jake Buchholz Göktürk (1): main/tiny-cloud: [3.18] upgrade to 3.0.2 Jakub Jirutka (15): community/apk-deploy-tool: upgrade to 0.5.3 main/postgresql15: security upgrade to 15.4 main/postgresql14: security upgrade to 14.9 community/postgresql13: security upgrade to 13.12 community/postgresql12: security upgrade to 12.16 community/qemu-openrc: upgrade to 0.11.1 community/jetty-runner: use exec in jetty-runner script community/jetty-runner: init: allow to override $command community/jetty-runner: check server_{access,out}_log location community/jetty-runner: upgrade to 9.4.51.20230217 community/jetty-runner: fix perms and backport rest of changes from edge community/jetty-runner: add $start_wait to init script main/one-context: upgrade to 0.8.0 main/linux-lts: enable EFI_ZBOOT on aarch64 community/alpine-make-vm-image: upgrade to 0.12.0 Jakub Panek (3): community/rust: security upgrade to 1.71.1, take ownership community/rust-analyzer: upgrade to 2023.08.28, takeover maintainership community/rust-analyzer: upgrade to 2023.09.18 Jiri Kastner (1): mariadb: re-enable partition plugin Kaarle Ritvanen (1): community/py3-django-oscar: align with upstream Kevin Daudt (5): community/docker-cli-buildx: backport host header patch to docker community/tea: fix checksum filename community/vault: security upgrade to 1.13.5 community/nfpm: upgrade to 2.32.0 community/qemu: upgrade to 8.0.5 Leonardo Arena (1): community/nextcloud: upgrade to 26.0.5 Michał Polański (2): community/py3-trove-classifiers: upgrade to 2023.9.19 main/openssl: upgrade to 3.1.3 Milan P. Stanić (12): community/linux-edge: upgrade to 6.4.9 main/haproxy: bugfix upgrade to 2.6.15 community/linux-edge: upgrade to 6.4.10 community/qemu: upgrade to 8.0.4 community/linux-edge: upgrade to 6.4.12 community/linux-edge: upgrade to 6.5.0 main/postfix: bugfix upgrade to 3.8.2 community/linux-edge: upgrade to 6.5.1 community/linux-edge: upgrade to 6.5.2 community/mutt: bugfix upgrade to 2.2.12 community/linux-edge: upgrade to 6.5.3 community/linux-edge: upgrade to 6.5.5 Natanael Copa (104): community/gitlab-runner: backport docker cli fix main/samba: add secfixes info main/samba: add secfixes comment main/linux-lts: upgrade to 6.1.44 community/jool-modules-lts: rebuild against kernel 6.1.44-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.44-r0 community/rtpengine-lts: rebuild against kernel 6.1.44-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.44-r0 community/vmm_clock-lts: rebuild against kernel 6.1.44-r0 main/xtables-addons-lts: rebuild against kernel 6.1.44-r0 main/zfs-lts: rebuild against kernel 6.1.44-r0 main/linux-lts: upgrade to 6.1.45 community/jool-modules-lts: rebuild against kernel 6.1.45-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.45-r0 community/rtpengine-lts: rebuild against kernel 6.1.45-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.45-r0 community/vmm_clock-lts: rebuild against kernel 6.1.45-r0 main/xtables-addons-lts: rebuild against kernel 6.1.45-r0 main/zfs-lts: rebuild against kernel 6.1.45-r0 main/linux-lts: fix x86 PAE and HIGHMEM main/linux-lts: upgrade to 6.1.46 community/jool-modules-lts: rebuild against kernel 6.1.46-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.46-r0 community/rtpengine-lts: rebuild against kernel 6.1.46-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.46-r0 community/vmm_clock-lts: rebuild against kernel 6.1.46-r0 main/xtables-addons-lts: rebuild against kernel 6.1.46-r0 main/zfs-lts: rebuild against kernel 6.1.46-r0 main/linux-lts: use default log buffer size main/linux-lts: upgrade to 6.1.47 community/jool-modules-lts: rebuild against kernel 6.1.47-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.47-r0 community/rtpengine-lts: rebuild against kernel 6.1.47-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.47-r0 community/vmm_clock-lts: rebuild against kernel 6.1.47-r0 main/xtables-addons-lts: rebuild against kernel 6.1.47-r0 main/zfs-lts: rebuild against kernel 6.1.47-r0 main/sofia-sip: backport of support for forking calls. See mr #50659 main/linux-lts: upgrade to 6.1.49 community/jool-modules-lts: rebuild against kernel 6.1.49-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.49-r0 community/rtpengine-lts: rebuild against kernel 6.1.49-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.49-r0 community/vmm_clock-lts: rebuild against kernel 6.1.49-r0 main/xtables-addons-lts: rebuild against kernel 6.1.49-r0 main/zfs-lts: rebuild against kernel 6.1.49-r0 community/thunderbird: upgrade to 115.1.1 main/sofia-sip: actually add the patch main/linux-lts: upgrade to 6.1.50 community/jool-modules-lts: rebuild against kernel 6.1.50-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.50-r0 community/rtpengine-lts: rebuild against kernel 6.1.50-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.50-r0 community/vmm_clock-lts: rebuild against kernel 6.1.50-r0 main/xtables-addons-lts: rebuild against kernel 6.1.50-r0 main/zfs-lts: rebuild against kernel 6.1.50-r0 main/linux-lts: upgrade to 6.1.51 community/jool-modules-lts: rebuild against kernel 6.1.51-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.51-r0 community/rtpengine-lts: rebuild against kernel 6.1.51-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.51-r0 community/vmm_clock-lts: rebuild against kernel 6.1.51-r0 main/xtables-addons-lts: rebuild against kernel 6.1.51-r0 main/zfs-lts: rebuild against kernel 6.1.51-r0 main/linux-lts: upgrade to 6.1.52 community/jool-modules-lts: rebuild against kernel 6.1.52-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.52-r0 community/rtpengine-lts: rebuild against kernel 6.1.52-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.52-r0 community/vmm_clock-lts: rebuild against kernel 6.1.52-r0 main/xtables-addons-lts: rebuild against kernel 6.1.52-r0 main/zfs-lts: rebuild against kernel 6.1.52-r0 Revert "main/linux-lts: enable EFI_ZBOOT on aarch64" main/linux-lts: upgrade to 6.1.53 community/jool-modules-lts: rebuild against kernel 6.1.53-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.53-r0 community/rtpengine-lts: rebuild against kernel 6.1.53-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.53-r0 community/vmm_clock-lts: rebuild against kernel 6.1.53-r0 main/xtables-addons-lts: rebuild against kernel 6.1.53-r0 main/zfs-lts: rebuild against kernel 6.1.53-r0 main/libwebp: upgrade to 1.3.2 community/lua-resty-session: upgrade to 3.10 community/lua-bitop: fix with lua 5.2+ and run tests main/linux-lts: upgrade to 6.1.54 community/jool-modules-lts: rebuild against kernel 6.1.54-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.54-r0 community/rtpengine-lts: rebuild against kernel 6.1.54-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.54-r0 community/vmm_clock-lts: rebuild against kernel 6.1.54-r0 main/xtables-addons-lts: rebuild against kernel 6.1.54-r0 main/zfs-lts: rebuild against kernel 6.1.54-r0 main/linux-lts: upgrade to 6.1.55 community/jool-modules-lts: rebuild against kernel 6.1.55-r0 community/rtl8821ce-lts: rebuild against kernel 6.1.55-r0 community/rtpengine-lts: rebuild against kernel 6.1.55-r0 community/virtio_vmmci-lts: rebuild against kernel 6.1.55-r0 community/vmm_clock-lts: rebuild against kernel 6.1.55-r0 main/xtables-addons-lts: rebuild against kernel 6.1.55-r0 main/zfs-lts: rebuild against kernel 6.1.55-r0 main/linux-rpi: upgrade to 6.1.55 community/jool-modules-rpi: rebuild against kernel 6.1.55-r0 main/zfs-rpi: rebuild against kernel 6.1.55-r0 ===== release 3.18.4 ===== Oleg Titov (1): community/k3s: security upgrade to 1.27.5.1 Pablo Correa Gómez (1): community/gnome-console: upgrade to 44.4 Peter van Dijk (1): community/dnsdist: upgrade to 1.8.1 Sertonix (1): community/keepassxc: fix opening doc from gui Simon Frankenberger (1): community/openjdk17: upgrade to 17.0.8 Simon Rupf (1): community/clamav: upgrade to 1.1.2 Siva Mahadevan (1): community/linux-edge: add initial support for pinebook pro Steven Guikal (1): community/py3-flask: security upgrade to 2.2.5 (CVE-2023-30861) Sören Tempel (3): community/go: upgrade to 1.20.8 community/*: rebuild with Go 1.20.8 main/busybox: update secfixes (CVE-2022-48174) Zach DeCook (1): community/verovio: upgrade to 3.15.0 and fix py3-verovio subpackage bin456789 (1): main/linux-lts: enable Google Virtual NIC (gVNIC) driver jahway603 (1): community/nextcloud: upgrade to 26.0.7 jane400 (1): main/libwebp: patch CVE-2023-4863 lauren n. liberda (2): community/yt-dlp: mark CVE as resolved community/libvpx: hotfix for CVE-2023-5217 macmpi (4): community/raspberrypi-utils: upgrade to 0.20230809 main/raspberrypi-bootloader: upgrade to 1.20230811 community/raspberrypi-utils: upgrade to 0.20230919 main/raspberrypi-bootloader: upgrade to 1.20230921 omni (16): community/qt5-qtwebengine: chromium security upgrade community/tor: upgrade to 0.4.8.4 community/tor: disable a test also for x86_64 community/tor: upgrade to 0.4.8.5 community/qt5-qtwebengine: chromium security upgrade community/arti: upgrade to 1.1.8 community/qt5-qtwebengine: chromium security upgrade main/libarchive: security upgrade to 3.7.2 community/qt5-qtimageformats: patch CVE-2023-4863 community/qt6-qtimageformats: patch CVE-2023-4863 community/qt5-qtwebengine: chromium security upgrade community/tor: upgrade to 0.4.8.6 main/xen: add mitigations for XSA-437 & XSA-438 main/linux-lts: fix pkgrel community/tor: upgrade to 0.4.8.7 main/xen: add mitigations for XSA-439 ptrcnull (5): community/telegraf: fix embedding version community/firefox: upgrade to 116.0.3 community/tea: rebuild against go 1.20.7 community/firefox: fix sqlite3 on ppc with clang community/kitty: disable check on ppc64le streaksu (6): community/limine: upgrade to 4.20230811.0 community/limine: take over maintainership community/limine: upgrade to 4.20230830.0 community/limine: upgrade to 4.20230911.0 community/limine: upgrade to 4.20230917.0 community/limine: upgrade to 4.20230924.0
