Commit Graph

66737 Commits

Author SHA1 Message Date
Lang Daniel
002774d8ba package/mobile-broadband-provider-info: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:32 +01:00
Lang Daniel
86b0605de1 package/metacity: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:29 +01:00
Lang Daniel
8da8773aa1 package/libxmlpp: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:26 +01:00
Lang Daniel
4426874cd3 package/libxml2: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:23 +01:00
Lang Daniel
bf3242b8ff package/libsoup: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:20 +01:00
Lang Daniel
70f4be5700 package/libsecret: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:17 +01:00
Lang Daniel
9da85317b3 package/librsvg: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:39 +01:00
Lang Daniel
abe3c7f81b package/libpeas: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:36 +01:00
Lang Daniel
7a511e286d package/libmediaart: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:33 +01:00
Lang Daniel
824c40d39d package/libgudev: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:30 +01:00
Lang Daniel
4b1114e579 package/libgtk3: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:27 +01:00
Lang Daniel
1d7e304648 package/libgtk2: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:24 +01:00
Lang Daniel
9d4d3a930e package/libglib2: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:21 +01:00
Lang Daniel
03255ca627 package/libglade: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:18 +01:00
Lang Daniel
500f40bbc7 package/libgee: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:15 +01:00
Lang Daniel
39c25a288e package/libepoxy: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:12 +01:00
Lang Daniel
16acbf9ce3 package/libart: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:09 +01:00
Lang Daniel
ce15c411a2 package/json-glib: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:06 +01:00
Lang Daniel
65c47725b0 package/gvfs: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:03 +01:00
Lang Daniel
dc967784cc package/gcr: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:00 +01:00
Lang Daniel
be4b330008 package/gupnp: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:57:58 +01:00
Lang Daniel
01b5b18cbc package/gupnp-tools: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:28 +01:00
Lang Daniel
b443913bcc package/gupnp-dlna: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:25 +01:00
Lang Daniel
cfdd3fcd15 package/gupnp-av: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:22 +01:00
Lang Daniel
76c0ac9725 package/gtksourceview: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:19 +01:00
Lang Daniel
30b916546b package/gtkmm3: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:16 +01:00
Lang Daniel
cb96dcaff4 package/gtk2-engines: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:13 +01:00
Lang Daniel
9086723227 package/gssdp: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:10 +01:00
Lang Daniel
2d7de5b2be package/gsettings-desktop-schemas: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:07 +01:00
Lang Daniel
01e4f72b6b package/gobject-introspection: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:53:15 +01:00
Lang Daniel
2334adaa97 package/glibmm: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:53:12 +01:00
Lang Daniel
bbad80aeb2 package/glib-networking: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:52:07 +01:00
Lang Daniel
14d70068be package/gdk-pixbuf-xlib: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:52:04 +01:00
Lang Daniel
b0d9d97b34 package/gdk-pixbuf: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:52:01 +01:00
Lang Daniel
695dd042db package/gconf: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:51:58 +01:00
Lang Daniel
0e483a7340 package/cantarell: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:51:55 +01:00
Lang Daniel
7d3690e862 package/bitstream-vera: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:51:52 +01:00
Lang Daniel
11bb66247b package/atkmm: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:51:49 +01:00
Lang Daniel
d74dc17559 package/adwaita-icon-theme: switch to https download
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:49:51 +01:00
Fabrice Fontaine
a49f00010d package/flashrom: bump to version 1.2.1
Drop patch (already in version)

https://github.com/flashrom/flashrom/compare/v1.2...v1.2.1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:52:51 +01:00
Peter Seiderer
9d18ef6a0c package/git: security bump to version 2.39.1
- fixes CVE-2022-41903 and CVE-2022-23521

For details see [1].

[1] https://lore.kernel.org/git/xmqq7cxl9h0i.fsf@gitster.g/

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Tested-by: Bagas Sanjaya <bagasdotme@gmail.com>
[Peter: Mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:50:31 +01:00
Bernd Kuhls
a0dfd717f3 package/x11r7/xlib_libXpm: security bump version to 3.5.15
Release notes:
https://lists.x.org/archives/xorg-announce/2023-January/003313.html

Fixes CVE-2022-4883, CVE-2022-44617 & CVE-2022-46285:
https://lists.x.org/archives/xorg-announce/2023-January/003312.html

Updated license hash due to upstream commit:
501494c6c6

Added configure option to disable compressed pixmaps support:
4841039e53

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:25:55 +01:00
Adrian Perez de Castro
d8bbc215f5 package/wpewebkit: security bump to version 2.38.3
Bugfix release, with security fixes for CVE-2022-42852, CVE-2022-42856,
CVE-2022-42867, CVE-2022-46691, CVE-2022-46692, CVE-2022-46698,
CVE-2022-46699, CVE-2022-46700, CVE-2022-42823, and CVE-2022-42799.

Release notes:

  https://wpewebkit.org/release/wpewebkit-2.38.3.html
  https://wpewebkit.org/release/wpewebkit-2.38.2.html
  https://wpewebkit.org/release/wpewebkit-2.38.1.html

Accompanying security advisories:

  https://wpewebkit.org/security/WSA-2022-0011.html
  https://wpewebkit.org/security/WSA-2022-0010.html

Additionally, the update brings in important bug fixes for the
Bubblewrap sandbox support, scrolling in certain web sites, multimedia
playback, and build fixes.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:21:22 +01:00
Yair Ben-Avraham
51e98499ff package/sudo: security bump to version 1.9.12p2
Fix https://nvd.nist.gov/vuln/detail/CVE-2023-22809

Signed-off-by: Yair Ben-Avraham <yairba@protonmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:19:07 +01:00
Bernd Kuhls
60d8585570 package/apache: security bump version to 2.4.55
Release notes:
https://lists.apache.org/thread/xlp3od60fjl8nl44z4f56y0lhs7pglos

Fixes CVE-2006-20001, CVE-2022-36760, CVE-2022-37436:
https://httpd.apache.org/security/vulnerabilities_24.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:17:59 +01:00
Adrian Perez de Castro
ed9b0d3954 package/cog: bump to version 0.16.1
This is a small bugfix release which solves build issues. The patch
to fix the libdrm dependency is included in this release and can be
removed. Release notes:

  https://wpewebkit.org/release/cog-0.16.1.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-20 08:17:22 +01:00
Francois Perrad
c77c66b7df package/lua: add options for coercion between number and string
The default behavior of Lua 5.3/5.4 interperter (and the only way with
Lua 5.1) is the automatic coercion. This default behavior could change
in future version (ie. Lua 5.5).

Disabling automatic coercion increases the performance of the interpreter.

Currently, using automatic coercion is not a good/recommended practice,
but there are no way (expect testing) to say if a Lua module relies on it.

We add two options to drive coercion in either way, and we make those
options default to y, as this was the de-facto situation until now; lua
5.1 forces those options: this will help when/if we have packages that
actually requires them, but has otherwise no requirement on the lua
version.

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
[yann.morin.1998@free.fr:
  - don't limit options to lua 5.3||5.4
  - force those options for lua 5.1
  - extend commit log accordingly
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-18 22:18:16 +01:00
Fabrice Fontaine
e7797603d2 package/proftpd: sftpd does not build with libressl
sftp doesn't build with libressl >= 3.5.0 resulting in the following
build failure since commit 8b216927db:

mac.c: In function 'init_mac':
mac.c:189:3: warning: implicit declaration of function 'HMAC_CTX_init'; did you mean 'HMAC_CTX_new'? [-Wimplicit-function-declaration]
  189 |   HMAC_CTX_init(hmac_ctx);
      |   ^~~~~~~~~~~~~
      |   HMAC_CTX_new
mac.c: In function 'set_mac_key':
mac.c:435:14: error: storage size of 'ctx' isn't known
  435 |   EVP_MD_CTX ctx;
      |              ^~~

So force use of openssl for sftpd, as no feedback was received on
https://github.com/proftpd/proftpd/pull/1481

Fixes:
 - http://autobuild.buildroot.org/results/a16ccd7cc78eb63de06a6d738fccc6b947da13e7

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-18 22:03:33 +01:00
Fabrice Fontaine
94b66fb49c package/xxhash: set XXH_NO_INLINE_HINTS
Set XXH_NO_INLINE_HINTS to marks all internal functions as static,
giving the compiler full control on whether to inline or not. This will
fix the following build failure raised since bump to version 0.8.1 in
commit 5dbdb2535c:

In file included from xxhash.c:43:
In function 'XXH3_accumulate',
    inlined from 'XXH3_hashLong_internal_loop' at xxhash.h:4390:9,
    inlined from 'XXH3_hashLong_64b_internal' at xxhash.h:4453:5,
    inlined from 'XXH3_hashLong_64b_withSecret' at xxhash.h:4473:12,
    inlined from 'XXH3_64bits_internal' at xxhash.h:4554:12,
    inlined from 'XXH3_64bits_withSecret' at xxhash.h:4570:12:
xxhash.h:4196:1: error: inlining failed in call to 'always_inline' 'XXH3_accumulate_512_scalar': function not considered for inlining
 4196 | XXH3_accumulate_512_scalar(void* XXH_RESTRICT acc,
      | ^~~~~~~~~~~~~~~~~~~~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/f2c52238df97cc4c13117d8dc1423235231a094c

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-18 21:42:51 +01:00
Peter Korsgaard
a8447f17b8 docs/website: update for 2022.02.9
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-18 17:57:30 +01:00