main/cgit: security upgrade to 0.9.2 (CVE-2013-2117)

fixes #2018

(cherry picked from commit 44e740eef26389110713c40214989466c8c83ba5)

1 files changed, 11 insertions, 6 deletions

diff --git a/main/cgit/APKBUILD b/main/cgit/APKBUILD
index 42fd892e59..bead1ab3a0 100644
--- a/main/cgit/APKBUILD
+++ b/main/cgit/APKBUILD
@@ -1,8 +1,8 @@
 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 pkgname=cgit
-pkgver=0.9.1
+pkgver=0.9.2
 pkgrel=0
-_gitver=1.7.4
+_gitver=1.8.3
 pkgdesc="a fast webinterface for git"
 url="http://hjemli.net/git/cgit"
 arch="all"
@@ -11,10 +11,11 @@ makedepends="openssl-dev zlib-dev"
 depends=
 source="
         http://git.zx2c4.com/cgit/snapshot/cgit-$pkgver.tar.xz
-        http://dev.alpinelinux.org/archive/git/git-$_gitver.tar.bz2
+        http://git-core.googlecode.com/files/git-$_gitver.tar.gz
         "
 
 _makeopts="NO_ICONV=YesPlease
+        NO_GETTEXT=YesPlease
         NO_TCLTK=YesPlease
         NO_SVN_TESTS=YesPlease"
 
@@ -27,7 +28,7 @@ prepare() {
                 return 1
         fi
         rm -rf git
-        ln -s ../git-$_gitver git
+        mv ../git-$_gitver git
 }
 
 build() {
@@ -43,5 +44,9 @@ package() {
         ln -s cgit.cgi "$pkgdir"/usr/share/webapps/cgit/cgit
 }
 
-md5sums="ed1a1ccccdcbf55ddd6a9de29bca6edf  cgit-0.9.1.tar.xz
-df23def274f896175a190a2b72c66731  git-1.7.4.tar.bz2"
+md5sums="fe11018eff8d79caad112f4fac64b90f  cgit-0.9.2.tar.xz
+d91b6099fb6763cf92c696977a247060  git-1.8.3.tar.gz"
+sha256sums="08c042004a7d91b1a4b0ff88dda6f94a916b7a231498c3c45056eb93033e2760  cgit-0.9.2.tar.xz
+f1d3c6d683f8f15035a8d0f3eb30ed160ff6607111dfc6026d8836307aebc53a  git-1.8.3.tar.gz"
+sha512sums="05a755ea1ccf5b10dae8223a25b93166b854b4522c02e05c79d6c6dbc10a181e4fab282b9c918a56732a5d0a026aaedf197e37af1636bba79ade221598c4477e  cgit-0.9.2.tar.xz
+070a2e4563d11f441c075f3a1c785f5b99195f3183a7dcd4de947ce67be29137704836290589f61f10390865f3c19e5626ad1876cf9eecd987ea11740eedfba3  git-1.8.3.tar.gz"