19 files changed, 155 insertions, 47 deletions
diff --git a/system/adelie-base/APKBUILD b/system/adelie-base/APKBUILD
index fecfdbe3e..22eeeba55 100644
--- a/system/adelie-base/APKBUILD
+++ b/system/adelie-base/APKBUILD
@@ -1,24 +1,23 @@
 # Contributor: A. Wilcox <awilfox@adelielinux.org>
 # Maintainer: A. Wilcox <awilfox@adelielinux.org>
 pkgname=adelie-base
-pkgver=0.9.0
+pkgver=0.9.1
 pkgrel=1
 pkgdesc="The Adélie Linux Base System"
-url="http://adelielinux.org/"
+url="https://www.adelielinux.org/"
 arch="noarch"
 options="!check !fhs"
 license="NCSA"
 _core_depends="apk-tools adelie-keys musl-utils shadow
 	shimmy grep procps bash
-	coreutils diffutils findutils sharutils
+	coreutils diffutils findutils
 	util-linux net-tools
-	sysklogd
-	patch sed nvi psmisc less"
-depends="adelie-core debianutils libarchive-tools file zsh binutils
-	console-setup sysklogd man-db tzdata gettys-openrc"
+	nvi sed psmisc less tzdata"
+depends="adelie-core binutils console-setup debianutils file gettys-openrc
+	libarchive-tools man-db patch sed sharutils sysklogd zsh"
 makedepends=""
 makedepends_host="$depends"
-subpackages="adelie-core:core $pkgname-doc $pkgname-posix $pkgname-lsb dev-kit:devkit"
+subpackages="adelie-core:core $pkgname-doc $pkgname-posix $pkgname-lsb dev-kit:devkit docs"
 provides="alpine-base"
 source="https://distfiles.adelielinux.org/source/$pkgname/$pkgname-$pkgver.tar.xz
 	group
@@ -44,6 +43,7 @@ package() {
 	install -m644 "$srcdir"/group "$pkgdir"/etc/group
 	install -m644 "$srcdir"/passwd "$pkgdir"/etc/passwd
 	install -m640 -g shadow "$builddir"/tree/etc/shadow "$pkgdir"/etc/shadow
+	echo '' > "$pkgdir"/etc/shells
 
 	# stupid inflatable stupid busybox
 	local i
@@ -87,13 +87,19 @@ lsb() {
 }
 
 devkit() {
-	depends="build-tools fakeroot gzip libarchive-tools mawk xz"
+	depends="build-tools libarchive-tools"
 	pkgdesc="The Adélie Linux Development Kit"
 	mkdir -p "$subpkgdir"
 	return 0
 }
 
-sha512sums="6afa6750162d91d005fa1a0a789e06e9599be7063ed6847376c3b740a22afb273d405760f52249de233476c8b578c469a6e2d17b8f01d7f7ef8dd7b4fc5f9a4c  adelie-base-0.9.0.tar.xz
+docs() {
+	pkgdesc="Metapackage that will magically install all documentation for your system"
+	mkdir -p "$subpkgdir"
+	return 0
+}
+
+sha512sums="be6f4375d4bc3f014b33a536c24c84ab288c6d3fb525a7a069723e8e522342ce6c6cd800417ada28ecb6f31550c73c12075e2e1eb9e7734fc0d37bb3e9471434  adelie-base-0.9.1.tar.xz
 37260d9315fd8d8b0df3dfb5bd3e1035a47ba1e43f33aa195e3feca6d169da282c1b067ef4603e7e9acaedbfef8b58cf490c00bdca444d43c9d570355ad29eac  group
 1288d9d1ee77e1159bacbc94a44b2ae9c6dff94c5001be6e560cd5859f86181c47341317025d4999bc7d57cfcebb7974804514d981b7bd66ffd00c5edaf5360c  passwd
 5b87e0c73e7d73715467b09c9c228b14abfdc1567b3d8a3e6ef86694a9d016c798c22411c9c8ccf41920fbe185199f6d6dbd45d4bceb6652ab4a7bea87c4fe51  addgroup
diff --git a/system/binutils/APKBUILD b/system/binutils/APKBUILD
index 4cd3901ec..67f81db9d 100644
--- a/system/binutils/APKBUILD
+++ b/system/binutils/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: Adelie Platform Group <adelie-devel@lists.adelielinux.org>
 pkgname=binutils
 pkgver=2.31.1
-pkgrel=1
+pkgrel=2
 pkgdesc="Tools necessary to build programs"
 url="http://www.gnu.org/software/binutils/"
 depends=""
@@ -16,6 +16,8 @@ subpackages="$pkgname-dev $pkgname-doc $pkgname-lang $pkgname-libs"
 [ "${CARCH}" != "ppc" ] || options='!check'
 source="http://ftp.gnu.org/gnu/$pkgname/$pkgname-$pkgver.tar.xz
 	binutils-ld-fix-static-linking.patch
+	CVE-2018-19931.patch
+	CVE-2018-19932.patch
 	disable-gnu-mbind.patch
 	disable-ifunc-tests.patch
 	disable-preinit-array-tests.patch
@@ -35,7 +37,10 @@ fi
 
 # secfixes:
 #   2.28-r1:
-#   - CVE-2017-7614
+#     - CVE-2017-7614
+#   2.31.1-r2:
+#     - CVE-2018-19931
+#     - CVE-2018-19932
 
 build() {
 	local _sysroot=/
@@ -114,6 +119,8 @@ libs() {
 
 sha512sums="0fca326feb1d5f5fe505a827b20237fe3ec9c13eaf7ec7e35847fd71184f605ba1cefe1314b1b8f8a29c0aa9d88162849ee1c1a3e70c2f7407d88339b17edb30  binutils-2.31.1.tar.xz
 ecee33b0e435aa704af1c334e560f201638ff79e199aa11ed78a72f7c9b46f85fbb227af5748e735fd681d1965fcc42ac81b0c8824e540430ce0c706c81e8b49  binutils-ld-fix-static-linking.patch
+4cfece75605ea17df676692e9ed2a5f8b3221fdb93fca9655f67260a9f4fd4f9e5a62141f51ba9bb7819f4628cdda4fd3f2f82e947ba197980f2b0c2c58a147c  CVE-2018-19931.patch
+68d1699d66aeb9dabb76d2e56e881fe73e55cc9594741107bf9f1a23fd2c1dc4421d02317bfc0218b02ad1372d3a8a577044578fffbfd8504ca238be835c5ff0  CVE-2018-19932.patch
 d378fdf1964f8f2bd0b1e62827ac5884bdf943aa435ec89c29fc84bb045d406b733fffaff8fdd8bd1cba8ddea7701c4cf6ccf3ed76a8a3df9c72b447737575a6  disable-gnu-mbind.patch
 474ab24097bbb5b24433620549e5234fe65c547824c1342f693c718ffbc81e2d968259cce2d650b55200dd1ec89da207ea2db10c551cd9941285c4600b4297b2  disable-ifunc-tests.patch
 3537752e63cef0b5ef136d003ff7e814ba66b12624d817430112d0f291a792e8960fa69a78036f526af835441b3ee483d6a53d55c7b3dd8ee96f0399682dbcbe  disable-preinit-array-tests.patch
diff --git a/system/binutils/CVE-2018-19931.patch b/system/binutils/CVE-2018-19931.patch
new file mode 100644
index 000000000..99a9797e3
--- /dev/null
+++ b/system/binutils/CVE-2018-19931.patch
@@ -0,0 +1,31 @@
+From 5f60af5d24d181371d67534fa273dd221df20c07 Mon Sep 17 00:00:00 2001
+From: Nick Clifton <nickc@redhat.com>
+Date: Fri, 30 Nov 2018 11:45:33 +0000
+Subject: [PATCH] Fix a memory exhaustion bug when attempting to allocate room
+ for an impossible number of program headers.
+
+	* elfcode.h (elf_object_p): Check for corrupt input files with
+	more program headers than can actually fit in the file.
+---
+ bfd/elfcode.h | 5 +++++
+ 1 file changed, 5 insertions(+)
+
+diff --git a/bfd/elfcode.h b/bfd/elfcode.h
+index f224c8b..16ed8e5 100644
+--- a/bfd/elfcode.h
++++ b/bfd/elfcode.h
+@@ -784,6 +784,11 @@ elf_object_p (bfd *abfd)
+       if (i_ehdrp->e_phnum > ((bfd_size_type) -1) / sizeof (*i_phdr))
+ 	goto got_wrong_format_error;
+ #endif
++      /* Check for a corrupt input file with an impossibly large number
++	 of program headers.  */
++      if (bfd_get_file_size (abfd) > 0
++	  && i_ehdrp->e_phnum > bfd_get_file_size (abfd))
++	goto got_no_match;
+       amt = (bfd_size_type) i_ehdrp->e_phnum * sizeof (*i_phdr);
+       elf_tdata (abfd)->phdr = (Elf_Internal_Phdr *) bfd_alloc (abfd, amt);
+       if (elf_tdata (abfd)->phdr == NULL)
+-- 
+2.9.3
+
diff --git a/system/binutils/CVE-2018-19932.patch b/system/binutils/CVE-2018-19932.patch
new file mode 100644
index 000000000..383aae70f
--- /dev/null
+++ b/system/binutils/CVE-2018-19932.patch
@@ -0,0 +1,47 @@
+From beab453223769279cc1cef68a1622ab8978641f7 Mon Sep 17 00:00:00 2001
+From: Nick Clifton <nickc@redhat.com>
+Date: Fri, 30 Nov 2018 11:43:12 +0000
+Subject: [PATCH] Remove an abort in the bfd library and add a check for an
+ integer overflow when mapping sections to segments.
+
+	PR 23932
+	* elf.c (IS_CONTAINED_BY_LMA): Add a check for a negative section
+	size.
+	(rewrite_elf_program_header): If no sections are mapped into a
+	segment return an error.
+---
+ bfd/elf.c     | 11 ++++++++++-
+ 1 file changed, 10 insertions(+), 1 deletion(-)
+
+diff --git a/bfd/elf.c b/bfd/elf.c
+index 604971d..79a76be 100644
+--- a/bfd/elf.c
++++ b/bfd/elf.c
+@@ -6644,6 +6644,7 @@ rewrite_elf_program_header (bfd *ibfd, bfd *obfd)
+      the given segment.  LMA addresses are compared.  */
+ #define IS_CONTAINED_BY_LMA(section, segment, base)			\
+   (section->lma >= base							\
++   && (section->lma + SECTION_SIZE (section, segment) >= section->lma)	\
+    && (section->lma + SECTION_SIZE (section, segment)			\
+        <= SEGMENT_END (segment, base)))
+ 
+@@ -7167,7 +7168,15 @@ rewrite_elf_program_header (bfd *ibfd, bfd *obfd)
+ 		suggested_lma = output_section;
+ 	    }
+ 
+-	  BFD_ASSERT (map->count > 0);
++	  /* PR 23932.  A corrupt input file may contain sections that cannot
++	     be assigned to any segment - because for example they have a
++	     negative size - or segments that do not contain any sections.  */
++	  if (map->count == 0)
++	    {
++	      bfd_set_error (bfd_error_bad_value);
++	      free (sections);
++	      return FALSE;
++	    }
+ 
+ 	  /* Add the current segment to the list of built segments.  */
+ 	  *pointer_to_map = map;
+-- 
+2.9.3
+
diff --git a/system/cryptsetup/APKBUILD b/system/cryptsetup/APKBUILD
index 5534c96fc..d3ba1d2ee 100644
--- a/system/cryptsetup/APKBUILD
+++ b/system/cryptsetup/APKBUILD
@@ -1,7 +1,7 @@
 # Contributor: Sören Tempel <soeren+alpine@soeren-tempel.net>
 # Maintainer: 
 pkgname=cryptsetup
-pkgver=2.0.5
+pkgver=2.0.6
 pkgrel=0
 pkgdesc="Setup tool for block device encryption"
 url="https://gitlab.com/cryptsetup/cryptsetup"
@@ -62,7 +62,7 @@ libs() {
 	mv "$pkgdir"/lib "$subpkgdir"/
 }
 
-sha512sums="92ecbcbfe715c704a968305712980ce048c41416d0729ab5f8552daaa404bdddecca0d24b9c835634b96762dcab02693fbd96a6a72d41eaff245fd57fa311c7f  cryptsetup-2.0.5.tar.gz
+sha512sums="9e3458122e34c86d21b9a9c0c648e8e6134d7e2058bc00514137c5136782cea493cf0db5b0c2884fac759c0c2ea185e99d4a223d6f338c1cb3f5281eadd6626e  cryptsetup-2.0.6.tar.gz
 301e3e3da5a899e0a6f01f44fbf37bb6a3f5b6a4fb41243bae6d3b7aea747276e784626cd1b19721cc264652c10ae8c560c4d20094e33bb82fb2fae0160682c0  flush-stdout.patch
 74422d5e1614b43af894ea01da1ea80d805ec7f77981cbb80a6b1a4becad737a8825d7269812499095a7f50d39fa7da5bf4e4edae63529b1fe87b9176943a733  dmcrypt.confd
 81dad61cdecf1dc529b26eb3cdc15979a582c876b01268f88e7a71c8fae6911137c03bfa63fee64e064e5fb31f673610be27ecab9fc432229f13e7040698bd5c  dmcrypt.initd"
diff --git a/system/easy-kernel-power8-64k/APKBUILD b/system/easy-kernel-power8-64k/APKBUILD
index 16ddcd148..1b75a06f4 100644
--- a/system/easy-kernel-power8-64k/APKBUILD
+++ b/system/easy-kernel-power8-64k/APKBUILD
@@ -1,8 +1,8 @@
 # Contributor: A. Wilcox <awilfox@adelielinux.org>
 # Maintainer: Adelie Platform Group <adelie-devel@lists.adelielinux.org>
 _pkgname=easy-kernel-power8-64k
-pkgver=4.14.76
-pkgrel=11
+pkgver=4.14.88
+pkgrel=13
 pkgname=$_pkgname-$pkgver-mc$pkgrel
 _kflavour=power8-64k
 pkgdesc="The Linux kernel, packaged for POWER8 and POWER9 computers (with 64K page size)"
@@ -77,7 +77,7 @@ modules() {
 }
 
 sha512sums="77e43a02d766c3d73b7e25c4aafb2e931d6b16e870510c22cef0cdb05c3acb7952b8908ebad12b10ef982c6efbe286364b1544586e715cf38390e483927904d8  linux-4.14.tar.xz
-d8bfe29549e0a1a7e86d8ead682e93e704c8d0b4b454f8a75306aa7ef5d628cab3a65847e27502866ed5901aff189eb440d47d8e07c2c34ebb7d2d82b717a64b  linux-4.14-mc11.patch.xz
+bfe606f208894cc572fb98f323e26956c69b4f75febd4a9b500514cbb2aa70bddb2aba05b3f16a5fe52535236b215335f73974324065f80643265f17f281faa6  linux-4.14-mc13.patch.xz
 e41d9111219342ad13367902242444ecdd847a93575c3f9709d6c6a075bc650f4a15be9db1a8798435fc0a0b56d41705829bfe0d2c2d88f8d1c28931e27ef5be  ast-endianness.patch
 6e155f1109666ee907baf7f586d856366ba8afb6f008d48489c0bc269438a8280534266d3e37b449e44ce964688ea48f041bb36214eb495d59b84e55cdf49c19  config-ppc64
 64486a4f53046a69f727cecd8c39400b50c2d2b15e3b5ca8c18b8249d25990f3a872ec064800ba3d190f9d25b4518899b9ea3675920f487108102856d6beb51e  futex-cmpxchg.patch"
diff --git a/system/easy-kernel-power8/APKBUILD b/system/easy-kernel-power8/APKBUILD
index 638ad465d..477e7ea04 100644
--- a/system/easy-kernel-power8/APKBUILD
+++ b/system/easy-kernel-power8/APKBUILD
@@ -1,8 +1,8 @@
 # Contributor: A. Wilcox <awilfox@adelielinux.org>
 # Maintainer: Adelie Platform Group <adelie-devel@lists.adelielinux.org>
 _pkgname=easy-kernel-power8
-pkgver=4.14.76
-pkgrel=11
+pkgver=4.14.88
+pkgrel=13
 pkgname=$_pkgname-$pkgver-mc$pkgrel
 pkgdesc="The Linux kernel, packaged for POWER8 and POWER9 computers"
 url="https://kernel.org/"
@@ -83,7 +83,7 @@ src() {
 	mv "$srcdir"/linux-src "$subpkgdir"/usr/src/linux-$pkgver-mc$pkgrel-p8
 }
 sha512sums="77e43a02d766c3d73b7e25c4aafb2e931d6b16e870510c22cef0cdb05c3acb7952b8908ebad12b10ef982c6efbe286364b1544586e715cf38390e483927904d8  linux-4.14.tar.xz
-d8bfe29549e0a1a7e86d8ead682e93e704c8d0b4b454f8a75306aa7ef5d628cab3a65847e27502866ed5901aff189eb440d47d8e07c2c34ebb7d2d82b717a64b  linux-4.14-mc11.patch.xz
+bfe606f208894cc572fb98f323e26956c69b4f75febd4a9b500514cbb2aa70bddb2aba05b3f16a5fe52535236b215335f73974324065f80643265f17f281faa6  linux-4.14-mc13.patch.xz
 e41d9111219342ad13367902242444ecdd847a93575c3f9709d6c6a075bc650f4a15be9db1a8798435fc0a0b56d41705829bfe0d2c2d88f8d1c28931e27ef5be  ast-endianness.patch
 7eaa8840cbcb78afcc95a2e57a0fe92d6016f0ee6b5e1530e647ddb2799dae709ff57ac86bdfdefd32be1f3b1aec789cdc6b49f81c3186291672a8945bc474dd  config-ppc64
 64486a4f53046a69f727cecd8c39400b50c2d2b15e3b5ca8c18b8249d25990f3a872ec064800ba3d190f9d25b4518899b9ea3675920f487108102856d6beb51e  futex-cmpxchg.patch"
diff --git a/system/easy-kernel/APKBUILD b/system/easy-kernel/APKBUILD
index 56cf73ae5..3e20840fd 100644
--- a/system/easy-kernel/APKBUILD
+++ b/system/easy-kernel/APKBUILD
@@ -1,8 +1,8 @@
 # Contributor: A. Wilcox <awilfox@adelielinux.org>
 # Maintainer: Adelie Platform Group <adelie-devel@lists.adelielinux.org>
 _pkgname=easy-kernel
-pkgver=4.14.76
-pkgrel=11
+pkgver=4.14.88
+pkgrel=13
 pkgname=$_pkgname-$pkgver-mc$pkgrel
 pkgdesc="The Linux kernel, packaged for your convenience"
 url="https://kernel.org/"
@@ -10,7 +10,7 @@ arch="all"
 options="!check !dbg !strip !tracedeps"
 license="GPL-2.0-only"
 depends=""
-makedepends="bc gzip lzop openssl-dev xz"
+makedepends="bc gzip kmod lzop openssl-dev xz"
 install=""
 provides="easy-kernel=$pkgver-r$pkgrel"
 subpackages="$_pkgname-modules-$pkgver-mc$pkgrel:modules
@@ -107,13 +107,13 @@ src() {
 	mv "$srcdir"/linux-src "$subpkgdir"/usr/src/linux-$pkgver-mc$pkgrel
 }
 sha512sums="77e43a02d766c3d73b7e25c4aafb2e931d6b16e870510c22cef0cdb05c3acb7952b8908ebad12b10ef982c6efbe286364b1544586e715cf38390e483927904d8  linux-4.14.tar.xz
-d8bfe29549e0a1a7e86d8ead682e93e704c8d0b4b454f8a75306aa7ef5d628cab3a65847e27502866ed5901aff189eb440d47d8e07c2c34ebb7d2d82b717a64b  linux-4.14-mc11.patch.xz
+bfe606f208894cc572fb98f323e26956c69b4f75febd4a9b500514cbb2aa70bddb2aba05b3f16a5fe52535236b215335f73974324065f80643265f17f281faa6  linux-4.14-mc13.patch.xz
 e41d9111219342ad13367902242444ecdd847a93575c3f9709d6c6a075bc650f4a15be9db1a8798435fc0a0b56d41705829bfe0d2c2d88f8d1c28931e27ef5be  ast-endianness.patch
 cfa1c2b523875967c42bfd8fcfeeb80b1c4c9887c4399b4767f0ac0525769a9e8c5cddaec831e1adfa546ac2d66f68ef23dc594a286532f4b9890401efd75c67  config-ppc64
 1112f6c3fcfd7fdc0ef4d5e85df5d3adea430a9c7b4c2b34508a215f7ba14c863ccd7a5e17f13ed46c518bafec30cfb3ced70c465137c14ef5fc998b6cbcca1f  config-ppc
-438a66561200d570b3bf6ab0481d9725a9f482b1fcf852a90f99c6db5aa4ee02d2b67b57235bb7afc01515a79289407cbe111536340824d7a391ce1a658c9a76  config-x86_64
-e8f7749877c5b2574e7e853b757477b8f99d757b43225d4f83d611c20215b8b2690cc85369608c2dc8f7d6a619136a2d7dde4648031e37d2ae4dcc5ba85652c8  config-pmmx
-0174e758ea318171c8036426ed0ad22aaafbdbac755732a46397686ec8dd24e977447f6fc275d59eed43ea047fc8a36061b7ad0d5862d522222455a60c943027  config-aarch64
+d72613826070cfab9cea882419c13985109200b387bd96614628e5eadb25f8da8b64c4844e345b724c29f7e6cf0619c649e536cb6cfe552a878d3a977cbb31fe  config-x86_64
+40402578479993f78310459dcba783c806e0d2ebf6ad54854ffa338d3332f718ea4e8cf2c2f542584e1672504074122bba70a7ef918be7926f4a97abc20416d3  config-pmmx
+231c346e601c1d032a03d6cb19ed3d6e0f538f84d6c9980e3f47236ba9dc3f076ea23f91d68813b7d5c9eea40200f69cef31697f89f514112c09c5762ab2c48a  config-aarch64
 64486a4f53046a69f727cecd8c39400b50c2d2b15e3b5ca8c18b8249d25990f3a872ec064800ba3d190f9d25b4518899b9ea3675920f487108102856d6beb51e  futex-cmpxchg.patch
 fdd94b9de7b374f1812dec0f9971c05f5e52177ca4a16c8071daa620c18265b38f656f528e7045a24f30af01f05e53e54546fb0a9e93773cf191866e87de505d  kernel.h
 af093e91e8c8371629948e2e574f8764078564bc027ba5b2f87886f8827d9a63ba7a43717552fe7e3cc9212b2fd55b8633b12900c3d8cdc6c035d52b389c39e5  uapi-ether.patch"
diff --git a/system/easy-kernel/config-aarch64 b/system/easy-kernel/config-aarch64
index 05764460a..69fbd943c 100644
--- a/system/easy-kernel/config-aarch64
+++ b/system/easy-kernel/config-aarch64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 4.14.33-mc6 Kernel Configuration
+# Linux/arm64 4.14.88-mc13 Kernel Configuration
 #
 CONFIG_ARM64=y
 CONFIG_64BIT=y
@@ -495,6 +495,7 @@ CONFIG_ARM64_ERRATUM_832075=y
 CONFIG_ARM64_ERRATUM_834220=y
 CONFIG_ARM64_ERRATUM_845719=y
 CONFIG_ARM64_ERRATUM_843419=y
+CONFIG_ARM64_ERRATUM_1024718=y
 CONFIG_CAVIUM_ERRATUM_22375=y
 CONFIG_CAVIUM_ERRATUM_23144=y
 CONFIG_CAVIUM_ERRATUM_23154=y
@@ -596,6 +597,7 @@ CONFIG_XEN=y
 CONFIG_FORCE_MAX_ZONEORDER=11
 CONFIG_UNMAP_KERNEL_AT_EL0=y
 CONFIG_HARDEN_BRANCH_PREDICTOR=y
+CONFIG_ARM64_SSBD=y
 # CONFIG_ARMV8_DEPRECATED is not set
 # CONFIG_ARM64_SW_TTBR0_PAN is not set
 
@@ -1867,6 +1869,7 @@ CONFIG_DWMAC_GENERIC=m
 CONFIG_DWMAC_IPQ806X=m
 CONFIG_DWMAC_MESON=m
 CONFIG_DWMAC_ROCKCHIP=m
+# CONFIG_DWMAC_SOCFPGA is not set
 CONFIG_DWMAC_SUNXI=m
 CONFIG_DWMAC_SUN8I=m
 # CONFIG_STMMAC_PCI is not set
@@ -2925,6 +2928,12 @@ CONFIG_ROCKCHIP_THERMAL=m
 CONFIG_MTK_THERMAL=y
 
 #
+# Broadcom thermal drivers
+#
+# CONFIG_BCM2835_THERMAL is not set
+CONFIG_BCM_NS_THERMAL=y
+
+#
 # Samsung thermal drivers
 #
 CONFIG_EXYNOS_THERMAL=y
diff --git a/system/easy-kernel/config-pmmx b/system/easy-kernel/config-pmmx
index 3eba58ce7..1484fc1b2 100644
--- a/system/easy-kernel/config-pmmx
+++ b/system/easy-kernel/config-pmmx
@@ -416,7 +416,7 @@ CONFIG_X86_FAST_FEATURE_TESTS=y
 CONFIG_X86_MPPARSE=y
 CONFIG_X86_BIGSMP=y
 # CONFIG_GOLDFISH is not set
-CONFIG_RETPOLINE=y
+CONFIG_RETPOLINE=n
 # CONFIG_INTEL_RDT is not set
 CONFIG_X86_EXTENDED_PLATFORM=y
 # CONFIG_X86_GOLDFISH is not set
diff --git a/system/easy-kernel/config-x86_64 b/system/easy-kernel/config-x86_64
index 22db9c048..ba0b3beeb 100644
--- a/system/easy-kernel/config-x86_64
+++ b/system/easy-kernel/config-x86_64
@@ -440,7 +440,7 @@ CONFIG_X86_FAST_FEATURE_TESTS=y
 # CONFIG_X86_X2APIC is not set
 CONFIG_X86_MPPARSE=y
 # CONFIG_GOLDFISH is not set
-CONFIG_RETPOLINE=y
+CONFIG_RETPOLINE=n
 # CONFIG_INTEL_RDT is not set
 CONFIG_X86_EXTENDED_PLATFORM=y
 # CONFIG_X86_VSMP is not set
diff --git a/system/git/APKBUILD b/system/git/APKBUILD
index 4446e214a..b642f8137 100644
--- a/system/git/APKBUILD
+++ b/system/git/APKBUILD
@@ -1,7 +1,7 @@
 # Contributor: Łukasz Jendrysik <scadu@yandex.com>
 # Maintainer: A. Wilcox <awilfox@adelielinux.org>
 pkgname=git
-pkgver=2.19.1
+pkgver=2.19.2
 pkgrel=0
 pkgdesc="A distributed version control system"
 url="https://www.git-scm.com/"
@@ -11,6 +11,8 @@ depends="perl-error"
 replaces="git-perl perl-git"
 
 # secfixes:
+#   2.19.2:
+#   - CVE-2018-19486
 #   2.14.1:
 #   - CVE-2017-1000117
 
@@ -166,7 +168,7 @@ subtree_doc() {
 	gzip -9 "$subpkgdir"/usr/share/man/man1/git-subtree.1
 }
 
-sha512sums="a1bc1032b1de9eb9ea8b7c385cd009f64247e13066e0a91e9682e35400ded05f88c23b523cca4782f57544060d6ba0f9d3bec944399cda5771a4945c38bb9b98  git-2.19.1.tar.xz
+sha512sums="1d707c1a7a16fe9399592b0354e9023f701b019f36fe775997c46354d40617a80fa04aacc5330825c4f9301c2910ead8b26274a7f3b92e9d790b4705c0d7aa96  git-2.19.2.tar.xz
 ef6c31ac1474fa128aecf86eda75653fdd0fe7a09d35914c1a03749abf9c92cbc01f8064b2b697ca796fa18bec717b9bcb1aac6d36d02ce8ed4270d4728e72f0  dont-test-other-encodings.patch
 89528cdd14c51fd568aa61cf6c5eae08ea0844e59f9af9292da5fc6c268261f4166017d002d494400945e248df6b844e2f9f9cd2d9345d516983f5a110e4c42a  git-daemon.initd
 fbf1f425206a76e2a8f82342537ed939ff7e623d644c086ca2ced5f69b36734695f9f80ebda1728f75a94d6cd2fcb71bf845b64239368caab418e4d368c141ec  git-daemon.confd"
diff --git a/system/libcap/APKBUILD b/system/libcap/APKBUILD
index 5fc9e4941..64763b21b 100644
--- a/system/libcap/APKBUILD
+++ b/system/libcap/APKBUILD
@@ -1,8 +1,8 @@
 # Contributor: Natanael Copa <ncopa@alpinelinux.org>
 # Maintainer: 
 pkgname=libcap
-pkgver=2.25
-pkgrel=2
+pkgver=2.26
+pkgrel=0
 pkgdesc="POSIX 1003.1e capabilities"
 arch="all"
 options="!check"
@@ -26,4 +26,4 @@ package() {
 	make lib=/lib prefix=/usr RAISE_SETFCAP=no DESTDIR="$pkgdir" install
 }
 
-sha512sums="c3ab491885292adc171cde542b96f1295e84132febb50112a46575c3bde3a3eb6fcf733f7a756b4b656e013c0abb5ed6571db24799f8c0b23d8f759f992864f9  libcap-2.25.tar.xz"
+sha512sums="1c2d59f007226405a924950b2c2090393527e06f0692a84e6463e33915a070df61a9070b8f30a624d5630ddd39290eac117e5d440577d1edd48510195b9d12f0  libcap-2.26.tar.xz"
diff --git a/system/perl-dbd-sqlite/APKBUILD b/system/perl-dbd-sqlite/APKBUILD
index e0febf493..de26fcf57 100644
--- a/system/perl-dbd-sqlite/APKBUILD
+++ b/system/perl-dbd-sqlite/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Adélie Perl Team <adelie-perl@lists.adelielinux.org>
 pkgname=perl-dbd-sqlite
 _pkgname=DBD-SQLite
-pkgver=1.58
+pkgver=1.60
 pkgrel=0
 pkgdesc="Perl DBI SQLite module"
 url="https://metacpan.org/release/DBD-SQLite"
@@ -40,5 +40,5 @@ package() {
 	find "$pkgdir" \( -name perllocal.pod -o -name .packlist \) -delete
 }
 
-sha512sums="080d1e304fb0d43926ce0345df3367132c317ba113bdc11952c0a159bc68d988a024828a28e66be267f82e07731dee225723854fb80914ba7c476b27dbdeb212  DBD-SQLite-1.58.tar.gz
+sha512sums="b5fd203898815ada13ec04477fa0ad90ec2f53761d9b1ed7cce7d06a674e31d3810e745658aea150a3a58fc18adb889e5e50e795e8575318ab4cc757c1ff1c9e  DBD-SQLite-1.60.tar.gz
 00961932f9f89d9b46e6134150c2628aadd4cfa7159cb1604de023fedc919087fbf982b72fd51610e1ca390234cd939e74430b270131d0b30cedb97ba6203b49  perl-DBD-SQLite-bz543982.patch"
diff --git a/system/perl-module-scandeps/APKBUILD b/system/perl-module-scandeps/APKBUILD
index e8a1cdc73..776899508 100644
--- a/system/perl-module-scandeps/APKBUILD
+++ b/system/perl-module-scandeps/APKBUILD
@@ -3,7 +3,7 @@
 # Maintainer: Adélie Perl Team <adelie-perl@lists.adelielinux.org>
 pkgname=perl-module-scandeps
 _pkgreal=Module-ScanDeps
-pkgver=1.25
+pkgver=1.26
 pkgrel=0
 pkgdesc="Recursively scan Perl code for dependencies"
 url="https://metacpan.org/release/Module-ScanDeps"
@@ -42,4 +42,4 @@ check() {
 	make test
 }
 
-sha512sums="1d1d10b55147e68238465fc1e5e9248d926151394034f0bde32c0030ff9bbd685ebb1ed0c6c924769a2e38c2dc15621990b454438db5ef5699aeed378f02aec7  Module-ScanDeps-1.25.tar.gz"
+sha512sums="b4b54813f55b82c20073ede9be90ab3680a636c3c8743ae03ccd0d7a26097f3d05b3e55d8b0d7d414e4156eaa686dc6eec0541ebe6c89a5c896dcd98845eb10f  Module-ScanDeps-1.26.tar.gz"
diff --git a/system/perl-test-simple/APKBUILD b/system/perl-test-simple/APKBUILD
index 078869136..6b0514b39 100644
--- a/system/perl-test-simple/APKBUILD
+++ b/system/perl-test-simple/APKBUILD
@@ -3,7 +3,7 @@
 # Maintainer: Adélie Perl Team <adelie-perl@lists.adelielinux.org>
 pkgname=perl-test-simple
 _pkgreal=Test-Simple
-pkgver=1.302140
+pkgver=1.302141
 pkgrel=0
 pkgdesc="Basic utilities for writing Perl tests"
 url="https://metacpan.org/release/Test-Simple"
@@ -47,4 +47,4 @@ doc() {
 	replaces="perl-doc"
 }
 
-sha512sums="fb823470165e321f68bf761cb9fd31d9e2b3efb42a7ac25602f4a33624e3b8287f6210d502c6afe7723b5ad50c4b1fed2a1db166f151f9b9155d2bca4600766f  Test-Simple-1.302140.tar.gz"
+sha512sums="3560308cc62441c4b4214b002a9c98cd9e0191fcf655295031b58f5ed6f43c26def278fb2669bca0c6fa1e803c2feb90a8700f840bd91cddd649573ad896e261  Test-Simple-1.302141.tar.gz"
diff --git a/system/perl/APKBUILD b/system/perl/APKBUILD
index a492a84bd..5f4410851 100644
--- a/system/perl/APKBUILD
+++ b/system/perl/APKBUILD
@@ -3,7 +3,7 @@
 # Maintainer: Kiyoshi Aman <kiyoshi.aman+adelie@gmail.com>
 # Proxy-For: solar
 pkgname=perl
-pkgver=5.26.2
+pkgver=5.26.3
 pkgrel=0
 pkgdesc="Larry Wall's Practical Extraction and Report Language"
 url="http://www.perl.org/"
@@ -18,6 +18,12 @@ source="http://www.cpan.org/src/5.0/perl-$pkgver.tar.gz
 	"
 
 # secfixes:
+#   5.26.3-r0:
+#   - CVE-2018-12015
+#   - CVE-2018-18311
+#   - CVE-2018-18312
+#   - CVE-2018-18313
+#   - CVE-2018-18314
 #   5.26.1-r0:
 #   - CVE-2017-12837
 #   - CVE-2017-12883
@@ -109,4 +115,4 @@ dev() {
 	default_dev
 }
 
-sha512sums="166d767f748a911b969fc8008069f087927cbdd9ee21b375b31e5feb5afc2be8d80d68f8c291accee6fdf3be90e9dc2fc870cb9c0bd1cc68c6e001e4ed38d564  perl-5.26.2.tar.gz"
+sha512sums="03914ed51163c998a6afa45610a13cf50124a2c68d291c344b0d52fa15c27fc5d5d4f5dc117516078a03dfd51250097b87c8d5e2b17c7858a4c8c536aecd05af  perl-5.26.3.tar.gz"
diff --git a/system/tcl/APKBUILD b/system/tcl/APKBUILD
index 4e2769d35..854222be1 100644
--- a/system/tcl/APKBUILD
+++ b/system/tcl/APKBUILD
@@ -1,7 +1,7 @@
 # Contributor: Sören Tempel <soeren+alpine@soeren-tempel.net>
 # Maintainer: 
 pkgname=tcl
-pkgver=8.6.8
+pkgver=8.6.9
 pkgrel=0
 pkgdesc="The Tcl scripting language"
 url="http://tcl.sourceforge.net/"
@@ -76,5 +76,5 @@ dev() {
 	done
 }
 
-sha512sums="14fb8fd880ecedda61119556f404fa1da34146f82dbf771be2ab322c6c575a898e194016dc3300f6764008d8f3bf59b07e31723bf8a3aafdcee6b4ef7667b18e  tcl8.6.8-src.tar.gz
+sha512sums="707fc0fb4f45c85e8f21692e5035d727cde27d87a2e1cd2e748ad373ebd3517aeca25ecaef3382a2f0e0a1feff96ce94a62b87abcf085e1a0afe2a23ef460112  tcl8.6.9-src.tar.gz
 cd52cbe80fd2be227c9018dbe38fa0888302293402e7a57f2e231c195b7c1902f1b58bc87d19c9d123915ca757e871abf084c0ef23b1a7f187bc03ba93904cc2  tcl-stat64.patch"
diff --git a/system/vim/APKBUILD b/system/vim/APKBUILD
index 1eef8db0c..2f64f96d8 100644
--- a/system/vim/APKBUILD
+++ b/system/vim/APKBUILD
@@ -4,7 +4,7 @@
 # Contributor: Natanael Copa <ncopa@alpinelinux.org>
 # Maintainer: Kiyoshi Aman <kiyoshi.aman+adelie@gmail.com>
 pkgname=vim
-pkgver=8.1.0551
+pkgver=8.1.0606
 pkgrel=0
 pkgdesc="advanced text editor"
 url="http://www.vim.org"
@@ -80,5 +80,5 @@ vimdiff() {
 	mv "$pkgdir"/usr/bin/vimdiff "$subpkgdir"/usr/bin
 }
 
-sha512sums="a05cfb3d7d640d551a4c3c1622110cd2aed01fe20f2b3e4e78161346eb957c4a56e64d8d8e43bea7dfd0af4160faa78f2f48d4d2bd77e694706ce2cdfe7632e6  vim-8.1.0551.tar.gz
+sha512sums="df02717611d7b2f54f3b60ff9f73259a6ff3228b841d7d2d429fa0eedd98ce0a140a6a3839b50bd67ce5724d86f816042d6cbb0930fd040d30216f98f2d7e6ec  vim-8.1.0606.tar.gz
 3a6c9bc187a6f45fd78e91dcc44d4d661c1ae1f2655e3a66bb36245ad1dc41e8d0e6061ec3aee6d323f96058b4a5501a87e3327e539cfd026f68cf81d455d721  vimrc"