Source Mage code commit list

[Treeve Jelbert <scm AT sourcemage.org>]

GIT changes to master grimoire by Treeve Jelbert <treeve AT sourcemage.org>:

 crypto/libssh2/DETAILS         |    8 ++++----
 crypto/libssh2/HISTORY         |    6 ++++++
 libs/double-conversion/DETAILS |    4 ++--
 libs/double-conversion/HISTORY |    3 +++
 x11/xcompmgr/DETAILS           |   11 +++++++----
 x11/xcompmgr/HISTORY           |    4 ++++
 6 files changed, 26 insertions(+), 10 deletions(-)

New commits:
commit c258f0da497317d854c9a466dbb7205ad0680cc5
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>

    libssh2: => 1.8.1  SECURITY FIX

commit ba58e07b783ec92a92f8f0dbc7a264507d0fcd4d
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>

    double-conversion: => 3.1.4

commit 508c5be17255edfd53581c18d759e0043f1b8b7e
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>

    xcompmgr: => 1.1.8

diff --git a/crypto/libssh2/DETAILS b/crypto/libssh2/DETAILS
index bc75416..0426be3 100755
--- a/crypto/libssh2/DETAILS
+++ b/crypto/libssh2/DETAILS
@@ -1,16 +1,16 @@
            SPELL=libssh2
-         VERSION=1.8.0
-  SECURITY_PATCH=2
+         VERSION=1.8.1
+  SECURITY_PATCH=3
       PATCHLEVEL=1
           SOURCE=$SPELL-$VERSION.tar.gz
          SOURCE2=$SOURCE.asc
   SOURCE2_IGNORE=signature
       SOURCE_GPG=ssh2.gpg:$SOURCE2:UPSTREAM_KEY
 SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
-   SOURCE_URL[0]=http://www.libssh2.org/download/$SOURCE
+   SOURCE_URL[0]=https://www.libssh2.org/download/$SOURCE
   SOURCE2_URL[0]=${SOURCE_URL[0]}.asc
       LICENSE[0]=BSD
-        WEB_SITE=http://www.libssh2.org/
+        WEB_SITE=https://www.libssh2.org/
          ENTERED=20070130
         KEYWORDS="crypto"
            SHORT="a library implementing the SSH2 protocol"
diff --git a/crypto/libssh2/HISTORY b/crypto/libssh2/HISTORY
index 8cb0724..6896d8a 100644
--- a/crypto/libssh2/HISTORY
+++ b/crypto/libssh2/HISTORY
@@ -1,3 +1,9 @@
+2019-03-25 Treeve Jelbert <treeve AT sourcemage.org>
+       * DETAILS: version 1.8.1
+         SECURITY_PATCH++ fixes:
+         CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858
+         CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 
CVE-2019-3863
+
 2017-01-13 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
        * PRE_BUILD, libssh2-1.8.0-libgcrypt-prefix.patch, DEPENDS: add patch 
from
          gentoo to fix build if gcrypt is selected as a dependency
diff --git a/libs/double-conversion/DETAILS b/libs/double-conversion/DETAILS
index 8a20f62..60fd617 100755
--- a/libs/double-conversion/DETAILS
+++ b/libs/double-conversion/DETAILS
@@ -1,6 +1,6 @@
            SPELL=double-conversion
-         VERSION=3.1.0
-     
SOURCE_HASH=sha512:ba797a7203bc7eb8ba697dc758a3341578f0405b5ab42fbd5a22d9fac09d11dd8cb5ed9ff9ff369e8ae9397ec74c04c62fca29d1bc469c6d2ea1a84a6dff9188
+         VERSION=3.1.4
+     
SOURCE_HASH=sha512:715a34ace2ff74b79d80a8c003c16cfbf958ebc92264e28cc572e1a12a786e1df9678abb46f032c2be387495e1a3d02957b12fa4a245ec6cfe19ca637519ac3c
           SOURCE=$SPELL-$VERSION.tar.gz
 SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
        WEB_SITE=https://github.com/google/$SPELL
diff --git a/libs/double-conversion/HISTORY b/libs/double-conversion/HISTORY
index 37e9871..d2cf2b7 100644
--- a/libs/double-conversion/HISTORY
+++ b/libs/double-conversion/HISTORY
@@ -1,3 +1,6 @@
+2019-03-25 Treeve Jelbert <treeve AT sourcemage.org>
+       * DETAILS: version 3.1.4
+
 2018-10-08 Treeve Jelbert <treeve AT sourcemage.org>
        * DETAILS: version 3.1.0
 
diff --git a/x11/xcompmgr/DETAILS b/x11/xcompmgr/DETAILS
index 078d618..974eb1a 100755
--- a/x11/xcompmgr/DETAILS
+++ b/x11/xcompmgr/DETAILS
@@ -1,10 +1,13 @@
            SPELL=xcompmgr
-         VERSION=1.1.6
+         VERSION=1.1.8
           SOURCE=$SPELL-$VERSION.tar.bz2
 SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
-   SOURCE_URL[0]=http://xorg.freedesktop.org/releases/individual/app/$SOURCE
-     
SOURCE_HASH=sha512:c1dd2ab42575fcf9d53fc923b4fe98ee4b2617e2bd652b8f20d34404e8547f8dfecb6bcd14d1d54da1a618ccb8e822b89e75d57f0320e9d55edbfb0dc83ddcbd
-        WEB_SITE=http://xorg.freedesktop.org/
+   SOURCE_URL[0]=https://xorg.freedesktop.org/releases/individual/app/$SOURCE
+         SOURCE2=$SOURCE.sig
+  SOURCE2_URL[0]=${SOURCE_URL[0]}.sig
+      SOURCE_GPG=xorg.gpg:$SOURCE.sig:UPSTREAM_KEY
+  SOURCE2_IGNORE=signature
+        WEB_SITE=https://xorg.freedesktop.org/
      GATHER_DOCS=off
          ENTERED=20040622
       LICENSE[0]=GPL
diff --git a/x11/xcompmgr/HISTORY b/x11/xcompmgr/HISTORY
index a993ab6..5333fab 100644
--- a/x11/xcompmgr/HISTORY
+++ b/x11/xcompmgr/HISTORY
@@ -1,3 +1,7 @@
+2019-03-25 Treeve Jelbert <treeve AT sourcemage.org>
+       * DETAILS: version 1.1.8
+       * DETAILS: add gpg checking
+
 2012-12-24 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
        * DETAILS: version 1.1.6