aports/main/file/APKBUILD

# Contributor: Valery Kartel <valery.kartel@gmail.com>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=file
pkgver=5.46
pkgrel=2
pkgdesc="File type identification utility"
url="https://www.darwinsys.com/file/"
arch="all"
license="BSD-2-Clause"
subpackages="libmagic-static $pkgname-dev $pkgname-doc libmagic"
source="https://astron.com/pub/file/file-$pkgver.tar.gz
	file-$pkgver-pr-579-net147-fix-stack-overrun.patch
"

# secfixes:
#   5.37-r1:
#     - CVE-2019-18218
#   5.36-r0:
#     - CVE-2019-1543
#     - CVE-2019-8904
#     - CVE-2019-8905
#     - CVE-2019-8906
#     - CVE-2019-8907

build() {
	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--datadir=/usr/share \
		--enable-static
	make
}

check() {
	make check
}

package() {
	make DESTDIR="$pkgdir" install
}

libmagic() {
	pkgdesc="File type identification library"

	amove \
		usr/lib/libmagic.so.* \
		usr/share/misc/magic.mgc
}

sha512sums="
a6cb7325c49fd4af159b7555bdd38149e48a5097207acbe5e36deb5b7493ad6ea94d703da6e0edece5bb32959581741f4213707e5cb0528cd46d75a97a5242dc  file-5.46.tar.gz
bebada4d58c4b937f3c8a55e842402f3af334c2767652c8d1e1b1c2cc73f0b3125bdb4cf97265a4ec1f00d51a13d66b534ce2faa2103e463e6461e55736daf4d  file-5.46-pr-579-net147-fix-stack-overrun.patch
"
main/file: split libmagic and cleanups 2016-01-21 09:47:05 +02:00			`# Contributor: Valery Kartel <valery.kartel@gmail.com>`
core/file: new aport 2008-11-10 16:06:35 +00:00			`# Maintainer: Natanael Copa <ncopa@alpinelinux.org>`
			`pkgname=file`
main/file: upgrade to 5.46 https://mailman.astron.com/pipermail/file/2024-November/001435.html 2024-12-04 18:29:17 +01:00			`pkgver=5.46`
main/file: Import patch file instead of downloading it from GitHub As noted by Celeste at [0], it's in general not recommended to use URL-based patches. Back when the patch was merged, that was deemed OK for 'master' though. As the download of the patch file is now indeed failing due to a changed checksum, use the opportunity to import the patch into the repo (as was done on the stable branches via e89c62d8 for example). Please note that the checksum has changed because the patch was downloaded with the '?full_index=1' option. [0]: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/77814#note_470256 2025-01-02 09:27:18 +01:00			`pkgrel=2`
core/file: new aport 2008-11-10 16:06:35 +00:00			`pkgdesc="File type identification utility"`
main/file: update homepage URL to prevent redirect The location redirects to have a trailing slash, but the redirect stalls sometimes, so adding a trailing slash to prevent the redirect in the first place. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> 2021-03-24 13:09:31 +01:00			`url="https://www.darwinsys.com/file/"`
Set all packages with arch="x86 x86_64" to arch="all". 2011-01-13 06:05:19 -06:00			`arch="all"`
main/file: upgrade to 5.33 Also clarify license while being here. 2018-04-15 22:37:51 +00:00			`license="BSD-2-Clause"`
main/file: name static correctly 2023-02-22 13:50:52 +00:00			`subpackages="libmagic-static $pkgname-dev $pkgname-doc libmagic"`
main/file: Add patch for buffer overflow in v5.46 Version 5.46 of 'file' shipped with a bug that can cause buffer overflows and thus crashes. The issue has been reported (see [0]) and fixed (see [1]) upstream, but there hasn't been a new release containing the fix yet. Thus, pull in the patch directly. See #16797. [0]: https://bugs.astron.com/view.php?id=579 [1]: https://github.com/file/file/commit/b3384a1fbfa1fee99986e5750ab8e700de4f24ad 2024-12-31 15:49:28 +01:00			`source="https://astron.com/pub/file/file-$pkgver.tar.gz`
main/file: Import patch file instead of downloading it from GitHub As noted by Celeste at [0], it's in general not recommended to use URL-based patches. Back when the patch was merged, that was deemed OK for 'master' though. As the download of the patch file is now indeed failing due to a changed checksum, use the opportunity to import the patch into the repo (as was done on the stable branches via e89c62d8 for example). Please note that the checksum has changed because the patch was downloaded with the '?full_index=1' option. [0]: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/77814#note_470256 2025-01-02 09:27:18 +01:00			`file-$pkgver-pr-579-net147-fix-stack-overrun.patch`
main/file: Add patch for buffer overflow in v5.46 Version 5.46 of 'file' shipped with a bug that can cause buffer overflows and thus crashes. The issue has been reported (see [0]) and fixed (see [1]) upstream, but there hasn't been a new release containing the fix yet. Thus, pull in the patch directly. See #16797. [0]: https://bugs.astron.com/view.php?id=579 [1]: https://github.com/file/file/commit/b3384a1fbfa1fee99986e5750ab8e700de4f24ad 2024-12-31 15:49:28 +01:00			`"`
main/[various]: update config.sub (fixes musl build) 2013-09-27 18:21:50 +00:00
main/file: add secfixes comments and use HTTPS 2019-03-18 16:00:06 +01:00			`# secfixes:`
main/file: fix CVE-2019-18218 ref #10911 Closes !887 2019-10-28 09:11:32 -03:00			`# 5.37-r1:`
main/file: fix CVE-id ref #10955 2019-11-15 05:38:36 +01:00			`# - CVE-2019-18218`
main/file: add secfixes comments and use HTTPS 2019-03-18 16:00:06 +01:00			`# 5.36-r0:`
			`# - CVE-2019-1543`
			`# - CVE-2019-8904`
			`# - CVE-2019-8905`
			`# - CVE-2019-8906`
			`# - CVE-2019-8907`

main/file: upgrade to 5.04 2010-01-25 17:15:09 +00:00			`build() {`
[all autotools packages]: normalize ./configure 2013-07-30 08:51:11 +00:00			`./configure \`
			`--build=$CBUILD \`
			`--host=$CHOST \`
			`--prefix=/usr \`
main/file: add libmagick-static fixes https://gitlab.alpinelinux.org/alpine/aports/-/issues/14651 2023-02-22 13:42:15 +00:00			`--datadir=/usr/share \`
			`--enable-static`
main/file: add tests and modernise 2017-08-15 02:20:06 +00:00			`make`
			`}`

			`check() {`
			`make check`
main/file: upgrade to 5.04 2010-01-25 17:15:09 +00:00			`}`

			`package() {`
main/file: add tests and modernise 2017-08-15 02:20:06 +00:00			`make DESTDIR="$pkgdir" install`
core/file: new aport 2008-11-10 16:06:35 +00:00			`}`
main/file: specify license and enable tests 2014-08-19 06:54:49 +00:00
main/file: split libmagic and cleanups 2016-01-21 09:47:05 +02:00			`libmagic() {`
			`pkgdesc="File type identification library"`
main/file: modernise 2023-07-27 23:48:54 +00:00
			`amove \`
			`usr/lib/libmagic.so.* \`
			`usr/share/misc/magic.mgc`
main/file: split libmagic and cleanups 2016-01-21 09:47:05 +02:00			`}`

main/file: upgrade to 5.41 2021-10-20 19:30:56 +02:00			`sha512sums="`
main/file: upgrade to 5.46 https://mailman.astron.com/pipermail/file/2024-November/001435.html 2024-12-04 18:29:17 +01:00			`a6cb7325c49fd4af159b7555bdd38149e48a5097207acbe5e36deb5b7493ad6ea94d703da6e0edece5bb32959581741f4213707e5cb0528cd46d75a97a5242dc file-5.46.tar.gz`
main/file: Import patch file instead of downloading it from GitHub As noted by Celeste at [0], it's in general not recommended to use URL-based patches. Back when the patch was merged, that was deemed OK for 'master' though. As the download of the patch file is now indeed failing due to a changed checksum, use the opportunity to import the patch into the repo (as was done on the stable branches via e89c62d8 for example). Please note that the checksum has changed because the patch was downloaded with the '?full_index=1' option. [0]: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/77814#note_470256 2025-01-02 09:27:18 +01:00			`bebada4d58c4b937f3c8a55e842402f3af334c2767652c8d1e1b1c2cc73f0b3125bdb4cf97265a4ec1f00d51a13d66b534ce2faa2103e463e6461e55736daf4d file-5.46-pr-579-net147-fix-stack-overrun.patch`
main/file: upgrade to 5.41 2021-10-20 19:30:56 +02:00			`"`
No results found.