Lang Daniel
6893eabaa0
package/pango: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:37 +01:00
Lang Daniel
97ceb937a1
package/mono-gtksharp3: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:34 +01:00
Lang Daniel
002774d8ba
package/mobile-broadband-provider-info: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:32 +01:00
Lang Daniel
86b0605de1
package/metacity: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:29 +01:00
Lang Daniel
8da8773aa1
package/libxmlpp: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:26 +01:00
Lang Daniel
4426874cd3
package/libxml2: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:23 +01:00
Lang Daniel
bf3242b8ff
package/libsoup: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:20 +01:00
Lang Daniel
70f4be5700
package/libsecret: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:17 +01:00
Lang Daniel
9da85317b3
package/librsvg: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:39 +01:00
Lang Daniel
abe3c7f81b
package/libpeas: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:36 +01:00
Lang Daniel
7a511e286d
package/libmediaart: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:33 +01:00
Lang Daniel
824c40d39d
package/libgudev: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:30 +01:00
Lang Daniel
4b1114e579
package/libgtk3: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:27 +01:00
Lang Daniel
1d7e304648
package/libgtk2: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:24 +01:00
Lang Daniel
9d4d3a930e
package/libglib2: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:21 +01:00
Lang Daniel
03255ca627
package/libglade: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:18 +01:00
Lang Daniel
500f40bbc7
package/libgee: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:15 +01:00
Lang Daniel
39c25a288e
package/libepoxy: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:12 +01:00
Lang Daniel
16acbf9ce3
package/libart: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:09 +01:00
Lang Daniel
ce15c411a2
package/json-glib: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:06 +01:00
Lang Daniel
65c47725b0
package/gvfs: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:03 +01:00
Lang Daniel
dc967784cc
package/gcr: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:00 +01:00
Lang Daniel
be4b330008
package/gupnp: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:57:58 +01:00
Lang Daniel
01b5b18cbc
package/gupnp-tools: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:28 +01:00
Lang Daniel
b443913bcc
package/gupnp-dlna: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:25 +01:00
Lang Daniel
cfdd3fcd15
package/gupnp-av: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:22 +01:00
Lang Daniel
76c0ac9725
package/gtksourceview: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:19 +01:00
Lang Daniel
30b916546b
package/gtkmm3: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:16 +01:00
Lang Daniel
cb96dcaff4
package/gtk2-engines: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:13 +01:00
Lang Daniel
9086723227
package/gssdp: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:10 +01:00
Lang Daniel
2d7de5b2be
package/gsettings-desktop-schemas: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:07 +01:00
Lang Daniel
01e4f72b6b
package/gobject-introspection: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:53:15 +01:00
Lang Daniel
2334adaa97
package/glibmm: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:53:12 +01:00
Lang Daniel
bbad80aeb2
package/glib-networking: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:52:07 +01:00
Lang Daniel
14d70068be
package/gdk-pixbuf-xlib: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:52:04 +01:00
Lang Daniel
b0d9d97b34
package/gdk-pixbuf: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:52:01 +01:00
Lang Daniel
695dd042db
package/gconf: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:51:58 +01:00
Lang Daniel
0e483a7340
package/cantarell: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:51:55 +01:00
Lang Daniel
7d3690e862
package/bitstream-vera: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:51:52 +01:00
Lang Daniel
11bb66247b
package/atkmm: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:51:49 +01:00
Lang Daniel
d74dc17559
package/adwaita-icon-theme: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:49:51 +01:00
Fabrice Fontaine
a49f00010d
package/flashrom: bump to version 1.2.1
...
Drop patch (already in version)
https://github.com/flashrom/flashrom/compare/v1.2...v1.2.1
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:52:51 +01:00
Peter Seiderer
9d18ef6a0c
package/git: security bump to version 2.39.1
...
- fixes CVE-2022-41903 and CVE-2022-23521
For details see [1].
[1] https://lore.kernel.org/git/xmqq7cxl9h0i.fsf@gitster.g/
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Tested-by: Bagas Sanjaya <bagasdotme@gmail.com>
[Peter: Mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:50:31 +01:00
Bernd Kuhls
a0dfd717f3
package/x11r7/xlib_libXpm: security bump version to 3.5.15
...
Release notes:
https://lists.x.org/archives/xorg-announce/2023-January/003313.html
Fixes CVE-2022-4883, CVE-2022-44617 & CVE-2022-46285:
https://lists.x.org/archives/xorg-announce/2023-January/003312.html
Updated license hash due to upstream commit:
501494c6c6
Added configure option to disable compressed pixmaps support:
4841039e53
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:25:55 +01:00
Adrian Perez de Castro
d8bbc215f5
package/wpewebkit: security bump to version 2.38.3
...
Bugfix release, with security fixes for CVE-2022-42852, CVE-2022-42856,
CVE-2022-42867, CVE-2022-46691, CVE-2022-46692, CVE-2022-46698,
CVE-2022-46699, CVE-2022-46700, CVE-2022-42823, and CVE-2022-42799.
Release notes:
https://wpewebkit.org/release/wpewebkit-2.38.3.html
https://wpewebkit.org/release/wpewebkit-2.38.2.html
https://wpewebkit.org/release/wpewebkit-2.38.1.html
Accompanying security advisories:
https://wpewebkit.org/security/WSA-2022-0011.html
https://wpewebkit.org/security/WSA-2022-0010.html
Additionally, the update brings in important bug fixes for the
Bubblewrap sandbox support, scrolling in certain web sites, multimedia
playback, and build fixes.
Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:21:22 +01:00
Yair Ben-Avraham
51e98499ff
package/sudo: security bump to version 1.9.12p2
...
Fix https://nvd.nist.gov/vuln/detail/CVE-2023-22809
Signed-off-by: Yair Ben-Avraham <yairba@protonmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:19:07 +01:00
Bernd Kuhls
60d8585570
package/apache: security bump version to 2.4.55
...
Release notes:
https://lists.apache.org/thread/xlp3od60fjl8nl44z4f56y0lhs7pglos
Fixes CVE-2006-20001, CVE-2022-36760, CVE-2022-37436:
https://httpd.apache.org/security/vulnerabilities_24.html
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:17:59 +01:00
Adrian Perez de Castro
ed9b0d3954
package/cog: bump to version 0.16.1
...
This is a small bugfix release which solves build issues. The patch
to fix the libdrm dependency is included in this release and can be
removed. Release notes:
https://wpewebkit.org/release/cog-0.16.1.html
Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:17:22 +01:00
Francois Perrad
c77c66b7df
package/lua: add options for coercion between number and string
...
The default behavior of Lua 5.3/5.4 interperter (and the only way with
Lua 5.1) is the automatic coercion. This default behavior could change
in future version (ie. Lua 5.5).
Disabling automatic coercion increases the performance of the interpreter.
Currently, using automatic coercion is not a good/recommended practice,
but there are no way (expect testing) to say if a Lua module relies on it.
We add two options to drive coercion in either way, and we make those
options default to y, as this was the de-facto situation until now; lua
5.1 forces those options: this will help when/if we have packages that
actually requires them, but has otherwise no requirement on the lua
version.
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
[yann.morin.1998@free.fr:
- don't limit options to lua 5.3||5.4
- force those options for lua 5.1
- extend commit log accordingly
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-18 22:18:16 +01:00
Fabrice Fontaine
e7797603d2
package/proftpd: sftpd does not build with libressl
...
sftp doesn't build with libressl >= 3.5.0 resulting in the following
build failure since commit 8b216927db
:
mac.c: In function 'init_mac':
mac.c:189:3: warning: implicit declaration of function 'HMAC_CTX_init'; did you mean 'HMAC_CTX_new'? [-Wimplicit-function-declaration]
189 | HMAC_CTX_init(hmac_ctx);
| ^~~~~~~~~~~~~
| HMAC_CTX_new
mac.c: In function 'set_mac_key':
mac.c:435:14: error: storage size of 'ctx' isn't known
435 | EVP_MD_CTX ctx;
| ^~~
So force use of openssl for sftpd, as no feedback was received on
https://github.com/proftpd/proftpd/pull/1481
Fixes:
- http://autobuild.buildroot.org/results/a16ccd7cc78eb63de06a6d738fccc6b947da13e7
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-18 22:03:33 +01:00