| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
Enable x86 and work around out of meomory error by disable
_FORTIFY_SOURCE.
|
|
|
|
|
|
|
| |
- build with MinSizeRel and -g1 to reduce memory usage during compile
- simplify cmake opts. default seems to do the right thing nowdays
- use nijna
- remove patch that apparetnly is not needed anymore
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Disable GTK_DOC, which fails to build
* Disable system malloc on some arches. There were typos in the options anyway,
so they haven't done anything anyway. System malloc is discouraged by upstream
since bmalloc not only performs better it also has some security related
advantages.
fixes the following CVEs:
* CVE-2019-6251
* CVE-2019-8506
* CVE-2019-8524
* CVE-2019-8535
* CVE-2019-8536
* CVE-2019-8544
* CVE-2019-8551
* CVE-2019-8558
* CVE-2019-8559
* CVE-2019-8563
* CVE-2019-11070
fixes #10598
Co-authored-by: TBK <tbk@jjtc.eu>
|
| |
|
|
|
|
|
|
|
| |
CVE-2018-4437, CVE-2019-6212, CVE-2019-6215, CVE-2019-6216,
CVE-2019-6217, CVE-2019-6227, CVE-2019-6229
Fixes #10111
|
| |
|
|
|
|
| |
fixes #9704
|
| |
|
| |
|
|
|
|
|
| |
fixes #9473
fixes #9452
|
| |
|
|
|
|
|
|
|
| |
Introduce a patch to make javascript run with webkit2gtk, patch
originally from
https://gitweb.gentoo.org/proj/musl.git/tree/net-libs/webkit-gtk/files/webkit-gtk-2.18.1-musl.patch
and reformatted by TBK
|
|
|
|
| |
fixes #8766
|
| |
|
|
|
|
| |
fixes #8510
|
|
|
|
|
| |
enable build webkit2gtk, shotwell, midori
fix local variable _archopt
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This commit updates $license variable in all APKBUILDs to comply with
short names specified by SPDX version 3.0 [1] where possible. It was
done using find-and-replace method on substrings inside $license
variables.
Only license names were updated, not "expressions" specifying relation
between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or
exceptions (e.g. "X with exceptions").
Many licenses have a version or multiple variants, e.g. MPL-2.0,
BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not
contain license version or variant. Since there's no way how to infer
this information just from abuild, it were left without the variant
suffix or version, i.e. non SPDX compliant.
GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They
exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later
(formerly e.g. GPL-2.0+). We did not systematically noted distinguish
between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean
GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g.
GPL2+) were left without the variant suffix, i.e. non SPDX compliant.
Note: This commit just fixes format of the license names, no
verification has been done if the specified license information is
actually correct!
[1]: https://spdx.org/licenses/
|
|
|
|
|
|
|
|
|
|
| |
CVE-2017-7156
CVE-2017-7157
CVE-2017-13856
CVE-2017-13866
CVE-2017-13870
fixes #8333
|
|
|
|
| |
was never suppoed to enter the repo
|
|
|
|
|
|
|
|
|
| |
fixes #8193
CVE-2017-13783, CVE-2017-13784, CVE-2017-13785, CVE-2017-13788,
CVE-2017-13791, CVE-2017-13792, CVE-2017-13793, CVE-2017-13794,
CVE-2017-13795, CVE-2017-13796, CVE-2017-13798, CVE-2017-13802,
CVE-2017-13803
|
|
|
|
|
|
|
| |
Most of these updates is based on data from https://repology.org/,
detection based on permanent redirect from http:// to https://.
$source urls are updated when they contain $url as substring.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
and enable on ppc64le and aarch64
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
CVE-2017-2350
CVE-2017-2354
CVE-2017-2355
CVE-2017-2356
CVE-2017-2362
CVE-2017-2363
CVE-2017-2364
CVE-2017-2365
CVE-2017-2366
CVE-2017-2369
CVE-2017-2371
CVE-2017-2373
|
|
|
|
|
|
| |
* fixes: CVE-2016-7656, CVE-2016-7635, CVE-2016-7654, CVE-2016-7639, CVE-2016-7645, CVE-2016-7652, CVE-2016-7641, CVE-2016-7632, CVE-2016-7599, CVE-2016-7592, CVE-2016-7589, CVE-2016-7623, CVE-2016-7586
* modernized APKBUILD
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
* paxmark WebkitWebProcess to make JSC JIT happy
* removed depends_dev since they are resolved automatically by abuild
|
| |
|
| |
|
|
|
|
| |
* bumped version to 2.10.4, no other changes needed
|
|
|