vars/build.vars: updates {alsa_lib,expat,gdbm,libarchive,libassuan,libgcrypt,libuv,cmake,libxml2,npth,pcre,tiff,util_linux} to v{1.1.6,2.2.5,1.14.1,3.3.2,2.5.1,1.8.2,1.19.2,3.7.2,2.9.8,1.5,8.42,4.0.9,2.32} (via Redfoxmoon.)

vars/cmake{,_host}.vars: build w/ libuv (via Redfoxmoon.)
patches/alsa_lib-1.1.6.local.patch: updated (via Redfoxmoon.)
patches/expat-2.2.5.local.patch: updated (via Redfoxmoon.)
patches/libgcrypt-1.8.2.local.patch: added (via Redfoxmoon.)
patches/libuv-1.19.2.local.patch: added (via Redfoxmoon.)
patches/tiff/CVE-2017-18013.patch: added (via Redfoxmoon.)
patches/tiff/CVE-2018-5784.patch: added (via Redfoxmoon.)
patches/tiff/CVE-2018-7456.patch: added (via Redfoxmoon.)

2 files changed, 34 insertions, 28 deletions

diff --git a/vars/build.vars b/vars/build.vars
index 63afa828..2e13af42 100644
--- a/vars/build.vars
+++ b/vars/build.vars
@@ -285,8 +285,8 @@ HOST_PACKAGES_DEPS_PACKAGES="
 cmake_host llvm_host clang_host file_host libffi_host glib_host gperf_host
 infounzip_host infozip_host intltool_host python2_host python3_host ruby_host";
 HOST_PACKAGES_DEPS_PREFIX="${PREFIX}";
-: ${PKG_CMAKE_HOST_SHA256SUM:=7d73ee4fae572eb2d7cd3feb48971aea903bb30a20ea5ae8b4da826d8ccad5fe};
-: ${PKG_CMAKE_HOST_VERSION:=3.6.3};
+: ${PKG_CMAKE_HOST_SHA256SUM:=dc1246c4e6d168ea4d6e042cfba577c1acd65feea27e56f5ff37df920c30cae0};
+: ${PKG_CMAKE_HOST_VERSION:=3.7.2};
 : ${PKG_CMAKE_HOST_URL:=https://cmake.org/files/v${PKG_CMAKE_HOST_VERSION%.*}/cmake-${PKG_CMAKE_HOST_VERSION}.tar.gz};
 : ${PKG_CMAKE_HOST_CONFIGURE_ARGS:="--parallel=${DEFAULT_BUILD_CPUS} --prefix=${PREFIX}"};
 : ${PKG_LLVM_HOST_SHA256SUM:=6e82ce4adb54ff3afc18053d6981b6aed1406751b8742582ed50f04b5ab475f9};
@@ -348,18 +348,18 @@ libpng libjpeg_turbo tiff giflib libffi gdbm geoip pcre glib gzip libarchive
 libatomic_ops musl_compat libbsd libpipeline libevent libfetch libogg libvorbis libunistring
 libgpg_error libassuan libfirm libgcrypt libksba libudns lua ncurses ncursestw
 ncursesw libnettle gnutls libreadline npth popt file zstd rpm xz libsolv tdnf
-shared_mime_info sqlite3 w32api w32lib cmake qrencode util_linux";
+shared_mime_info sqlite3 w32api w32lib libuv cmake qrencode util_linux";
 NATIVE_PACKAGES_DEPS_PREFIX="${PREFIX_NATIVE}";
 NATIVE_PACKAGES_DEPS_PYTHON="${PREFIX}/bin/python";
-: ${PKG_EXPAT_SHA256SUM:=d9e50ff2d19b3538bd2127902a89987474e1a4db8e43a66a4d1a712ab9a504ff};
-: ${PKG_EXPAT_VERSION:=2.2.0};
+: ${PKG_EXPAT_SHA256SUM:=d9dc32efba7e74f788fcc4f212a43216fc37cf5f23f4c2339664d473353aedf6};
+: ${PKG_EXPAT_VERSION:=2.2.5};
 : ${PKG_EXPAT_URL:=http://download.openpkg.org/components/cache/expat/expat-${PKG_EXPAT_VERSION}.tar.bz2};
-: ${PKG_LIBXML2_SHA256SUM:=ffb911191e509b966deb55de705387f14156e1a56b21824357cdf0053233633c};
-: ${PKG_LIBXML2_VERSION:=2.9.4};
+: ${PKG_LIBXML2_SHA256SUM:=0b74e51595654f958148759cfef0993114ddccccbb6f31aee018f3558e8e2732};
+: ${PKG_LIBXML2_VERSION:=2.9.8};
 : ${PKG_LIBXML2_URL:=ftp://xmlsoft.org/libxml2/libxml2-${PKG_LIBXML2_VERSION}.tar.gz};
 : ${PKG_LIBXML2_CONFIGURE_ARGS_EXTRA:="--with-python=no"};
 : ${PKG_ALSA_LIB_SHA256SUM:=91bb870c14d1c7c269213285eeed874fa3d28112077db061a3af8010d0885b76};
-: ${PKG_ALSA_LIB_VERSION:=1.1.4.1};
+: ${PKG_ALSA_LIB_VERSION:=1.1.6};
 : ${PKG_ALSA_LIB_URL:=ftp://ftp.alsa-project.org/pub/lib/alsa-lib-1.1.4.1.tar.bz2};
 : ${PKG_ALSA_LIB_CONFIGURE_ARGS_EXTRA:="--disable-python --with-versioned=no"};
 : ${PKG_APR_SHA256SUM:=131f06d16d7aabd097fa992a33eec2b6af3962f93e6d570a9bd4d85e95993172};
@@ -403,8 +403,8 @@ NATIVE_PACKAGES_DEPS_PYTHON="${PREFIX}/bin/python";
 : ${PKG_LIBJPEG_TURBO_VERSION:=1.5.2};
 : ${PKG_LIBJPEG_TURBO_URL:=http://ftp.uni-erlangen.de/gentoo/distfiles/libjpeg-turbo-${PKG_LIBJPEG_TURBO_VERSION}.tar.gz};
 : ${PKG_LIBJPEG_TURBO_CONFIGURE_ARGS_EXTRA:=--without-simd --with-jpeg8};
-: ${PKG_TIFF_SHA256SUM:=59d7a5a8ccd92059913f246877db95a2918e6c04fb9d43fd74e5c3390dac2910};
-: ${PKG_TIFF_VERSION:=4.0.8};
+: ${PKG_TIFF_SHA256SUM:=6e7bdeec2c310734e734d19aae3a71ebe37a4d842e0e23dbb1b8921c0026cfcd};
+: ${PKG_TIFF_VERSION:=4.0.9};
 : ${PKG_TIFF_URL:=ftp://download.osgeo.org/libtiff/tiff-${PKG_TIFF_VERSION}.tar.gz};
 : ${PKG_TIFF_CONFIGURE_ARGS_EXTRA:=--disable-cxx};
 : ${PKG_GIFLIB_SHA256SUM:=df27ec3ff24671f80b29e6ab1c4971059c14ac3db95406884fc26574631ba8d5};
@@ -416,12 +416,12 @@ NATIVE_PACKAGES_DEPS_PYTHON="${PREFIX}/bin/python";
 : ${PKG_LIBFFI_URL:=ftp://sourceware.org/pub/libffi/libffi-${PKG_LIBFFI_VERSION}.tar.gz};
 : ${PKG_LIBFFI_CFLAGS_CONFIGURE_EXTRA:=-D_WIN64};
 : ${PKG_LIBFFI_PATCHES_EXTRA:="${BUILD_WORKDIR}/chainport/libffi-${PKG_LIBFFI_VERSION}.midipix.patch"};
-: ${PKG_GDBM_SHA256SUM:=9d252cbd7d793f7b12bcceaddda98d257c14f4d1890d851c386c37207000a253};
-: ${PKG_GDBM_VERSION:=1.13};
+: ${PKG_GDBM_SHA256SUM:=cdceff00ffe014495bed3aed71c7910aa88bf29379f795abc0f46d4ee5f8bc5f};
+: ${PKG_GDBM_VERSION:=1.14.1};
 : ${PKG_GDBM_URL:=ftp://ftp.gnu.org/gnu/gdbm/gdbm-${PKG_GDBM_VERSION}.tar.gz};
 : ${PKG_GEOIP_URLS_GIT:="geoip-api-c=https://github.com/maxmind/geoip-api-c@master"};
-: ${PKG_PCRE_SHA256SUM:=244838e1f1d14f7e2fa7681b857b3a8566b74215f28133f14a8f5e59241b682c};
-: ${PKG_PCRE_VERSION:=8.41};
+: ${PKG_PCRE_SHA256SUM:=69acbc2fbdefb955d42a4c606dfde800c2885711d2979e356c0636efde9ec3b5};
+: ${PKG_PCRE_VERSION:=8.42};
 : ${PKG_PCRE_URL:=ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-${PKG_PCRE_VERSION}.tar.gz};
 : ${PKG_GLIB_SHA256SUM:=fe22998ff0394ec31e6e5511c379b74011bee61a4421bca7fcab223dfbe0fc6a};
 : ${PKG_GLIB_VERSION:=2.54.0};
@@ -434,10 +434,9 @@ NATIVE_PACKAGES_DEPS_PYTHON="${PREFIX}/bin/python";
 : ${PKG_GZIP_CONFIGURE_ARGS:=--host=${DEFAULT_TARGET} --prefix= --target=${DEFAULT_TARGET}};
 : ${PKG_GZIP_MAKEFLAGS_BUILD_EXTRA:=OBJA= prefix=};
 : ${PKG_GZIP_MAKEFLAGS_INSTALL_EXTRA:="OBJA="};
-: ${PKG_LIBARCHIVE_SHA256SUM:=691c194ee132d1f0f7a42541f091db811bc2e56f7107e9121be2bc8c04f1060f};
-: ${PKG_LIBARCHIVE_VERSION:=3.2.2};
+: ${PKG_LIBARCHIVE_SHA256SUM:=ed2dbd6954792b2c054ccf8ec4b330a54b85904a80cef477a1c74643ddafa0ce};
+: ${PKG_LIBARCHIVE_VERSION:=3.3.2};
 : ${PKG_LIBARCHIVE_URL:=http://www.libarchive.org/downloads/libarchive-${PKG_LIBARCHIVE_VERSION}.tar.gz};
-: ${PKG_LIBARCHIVE_CONFIGURE_ARGS_EXTRA:=--without-xml2};
 : ${PKG_LIBARCHIVE_LDFLAGS_CONFIGURE_EXTRA:=-L${PREFIX_NATIVE}/lib};
 : ${PKG_LIBATOMIC_OPS_URLS_GIT:="libatomic_ops=https://github.com/ivmai/libatomic_ops@master"};
 : ${PKG_MUSL_COMPAT_URLS_GIT:=musl_compat=https://github.com/Redfoxmoon3/musl-compat.git@master};
@@ -471,18 +470,19 @@ NATIVE_PACKAGES_DEPS_PYTHON="${PREFIX}/bin/python";
 : ${PKG_LIBGPG_ERROR_SHA256SUM:=f628f75843433b38b05af248121beb7db5bd54bb2106f384edac39934261320c};
 : ${PKG_LIBGPG_ERROR_VERSION:=1.25};
 : ${PKG_LIBGPG_ERROR_URL:=https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-${PKG_LIBGPG_ERROR_VERSION}.tar.bz2};
-: ${PKG_LIBASSUAN_SHA256SUM:=22843a3bdb256f59be49842abf24da76700354293a066d82ade8134bb5aa2b71};
-: ${PKG_LIBASSUAN_VERSION:=2.4.3};
+: ${PKG_LIBASSUAN_SHA256SUM:=47f96c37b4f2aac289f0bc1bacfa8bd8b4b209a488d3d15e2229cb6cc9b26449};
+: ${PKG_LIBASSUAN_VERSION:=2.5.1};
 : ${PKG_LIBASSUAN_URL:=https://www.gnupg.org/ftp/gcrypt/libassuan/libassuan-${PKG_LIBASSUAN_VERSION}.tar.bz2};
+: ${PKG_LIBASSUAN_CONFIGURE_ARGS_EXTRA:=--with-libgpg-error-prefix=${PREFIX_NATIVE}};
 : ${PKG_LIBFIRM_URLS_GIT:="libfirm=http://pp.info.uni-karlsruhe.de/git/libfirm.git@master bfirm=${DEFAULT_GITROOT}/compilers/bfirm@main"};
 : ${PKG_LIBFIRM_BASE_DIR:=${BUILD_WORKDIR}/cparser+libfirm-build};
 : ${PKG_LIBFIRM_BUILD_DIR:=build/libfirm};
 : ${PKG_LIBFIRM_CONFIGURE:=bfirm/configure};
 : ${PKG_LIBFIRM_CONFIGURE_ARGS:="--source-dir=../../libfirm --prefix="};
-: ${PKG_LIBGCRYPT_SHA256SUM:=3b67862e2f4711e25c4ce3cc4b48d52a58a3afdcd1d8c6a57f93a1c0ef03e5c6};
-: ${PKG_LIBGCRYPT_VERSION:=1.7.4};
+: ${PKG_LIBGCRYPT_SHA256SUM:=c8064cae7558144b13ef0eb87093412380efa16c4ee30ad12ecb54886a524c07};
+: ${PKG_LIBGCRYPT_VERSION:=1.8.2};
 : ${PKG_LIBGCRYPT_URL:=https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-${PKG_LIBGCRYPT_VERSION}.tar.bz2};
-: ${PKG_LIBGCRYPT_CONFIGURE_ARGS_EXTRA:=--disable-asm --disable-padlock-support --disable-aesni-support --disable-pclmul-support --disable-sse41-support --disable-drng-support --disable-avx-support --disable-avx2-support gcry_cv_gcc_inline_asm_avx2=no gcry_cv_gcc_inline_asm_avx=no gcry_cv_gcc_inline_asm_bmi2=no gcry_cv_gcc_inline_asm_pclmul=no gcry_cv_gcc_inline_asm_sse41=no gcry_cv_gcc_inline_asm_ssse3=no --disable-amd64-as-feature-detection};
+: ${PKG_LIBGCRYPT_CONFIGURE_ARGS_EXTRA:=--with-libgpg-error-prefix=${PREFIX_NATIVE} --disable-asm --disable-padlock-support --disable-aesni-support --disable-pclmul-support --disable-sse41-support --disable-drng-support --disable-avx-support --disable-avx2-support --disable-amd64-as-feature-detection};
 : ${PKG_LIBKSBA_SHA256SUM:=41444fd7a6ff73a79ad9728f985e71c9ba8cd3e5e53358e70d5f066d35c1a340};
 : ${PKG_LIBKSBA_VERSION:=1.3.5};
 : ${PKG_LIBKSBA_URL:=https://www.gnupg.org/ftp/gcrypt/libksba/libksba-${PKG_LIBKSBA_VERSION}.tar.bz2};
@@ -518,8 +518,8 @@ NATIVE_PACKAGES_DEPS_PYTHON="${PREFIX}/bin/python";
 : ${PKG_LIBREADLINE_VERSION:=7.0};
 : ${PKG_LIBREADLINE_URL:=ftp://ftp.gnu.org/gnu/readline/readline-${PKG_LIBREADLINE_VERSION}.tar.gz};
 : ${PKG_LIBREADLINE_CONFIGURE_ARGS_EXTRA:="--with-curses --disable-static"};
-: ${PKG_NPTH_SHA256SUM:=bca81940436aed0734eb8d0ff8b179e04cc8c087f5625204419f5f45d736a82a};
-: ${PKG_NPTH_VERSION:=1.3};
+: ${PKG_NPTH_SHA256SUM:=294a690c1f537b92ed829d867bee537e46be93fbd60b16c04630fbbfcd9db3c2};
+: ${PKG_NPTH_VERSION:=1.5};
 : ${PKG_NPTH_URL:=https://www.gnupg.org/ftp/gcrypt/npth/npth-${PKG_NPTH_VERSION}.tar.bz2};
 : ${PKG_POPT_SHA256SUM:=e728ed296fe9f069a0e005003c3d6b2dde3d9cad453422a10d6558616d304cc8};
 : ${PKG_POPT_VERSION:=1.16};
@@ -563,8 +563,11 @@ NATIVE_PACKAGES_DEPS_PYTHON="${PREFIX}/bin/python";
 : ${PKG_W32API_MAKEFLAGS_BUILD:="DESTDIR=${PREFIX_NATIVE}"};
 : ${PKG_W32LIB_URLS_GIT:="w32lib=git://git.midipix.org/w32lib"};
 : ${PKG_W32LIB_CONFIGURE_ARGS:="--host=${DEFAULT_TARGET} --prefix= --target=${DEFAULT_TARGET}"};
-: ${PKG_CMAKE_SHA256SUM:=7d73ee4fae572eb2d7cd3feb48971aea903bb30a20ea5ae8b4da826d8ccad5fe};
-: ${PKG_CMAKE_VERSION:=3.6.3};
+: ${PKG_LIBUV_SHA256SUM:=7cbcf2017e7116cf9da8ec1c6a146d578536b1e479458438873c991f984a53d7};
+: ${PKG_LIBUV_VERSION:=1.19.2};
+: ${PKG_LIBUV_URL:=https://dist.libuv.org/dist/v${PKG_LIBUV_VERSION}/libuv-v${PKG_LIBUV_VERSION}.tar.gz};
+: ${PKG_CMAKE_SHA256SUM:=dc1246c4e6d168ea4d6e042cfba577c1acd65feea27e56f5ff37df920c30cae0};
+: ${PKG_CMAKE_VERSION:=3.7.2};
 : ${PKG_CMAKE_URL:=https://cmake.org/files/v${PKG_CMAKE_VERSION%.*}/cmake-${PKG_CMAKE_VERSION}.tar.gz};
 : ${PKG_CMAKE_CFLAGS_CONFIGURE_EXTRA:="-g0 -O2"};
 : ${PKG_CMAKE_CONFIGURE_ARGS:="--parallel=${DEFAULT_BUILD_CPUS} --prefix="};
@@ -572,8 +575,8 @@ NATIVE_PACKAGES_DEPS_PYTHON="${PREFIX}/bin/python";
 : ${PKG_QRENCODE_VERSION:=3.4.4};
 : ${PKG_QRENCODE_URL:=https://fukuchi.org/works/qrencode/qrencode-${PKG_QRENCODE_VERSION}.tar.bz2};
 : ${PKG_QRENCODE_CONFIGURE_ARGS_EXTRA:=--disable-sdltest};
-: ${PKG_UTIL_LINUX_SHA256SUM:=d5950e4b2839d00aa3781f439bfada8091bc6ed8180d8262c53b4e4304e2d299};
-: ${PKG_UTIL_LINUX_VERSION:=2.31};
+: ${PKG_UTIL_LINUX_SHA256SUM:=ce43afee3182f1bddb0be83f68bd378770efb9b6fdd8f464333ff8e07903db56};
+: ${PKG_UTIL_LINUX_VERSION:=2.32};
 : ${PKG_UTIL_LINUX_URL:=https://www.kernel.org/pub/linux/utils/util-linux/v${PKG_UTIL_LINUX_VERSION}/util-linux-${PKG_UTIL_LINUX_VERSION}.tar.gz};
 : ${PKG_UTIL_LINUX_CONFIGURE_ARGS_EXTRA:=--disable-agetty --disable-lslogins --disable-wall --disable-write};
 
diff --git a/vars/cmake.vars b/vars/cmake.vars
index 7fb8f0dd..ae269b2b 100644
--- a/vars/cmake.vars
+++ b/vars/cmake.vars
@@ -19,6 +19,7 @@ pkg_cmake_configure() {
 		-DCMAKE_USE_SYSTEM_BZIP2=ON					\
 		-DCMAKE_USE_SYSTEM_CURL=ON					\
 		-DCMAKE_USE_SYSTEM_EXPAT=OFF					\
+		-DCMAKE_USE_SYSTEM_LIBUV=ON					\
 		-DCMAKE_USE_SYSTEM_LIBARCHIVE=ON				\
 		-DCMAKE_USE_SYSTEM_ZLIB=ON					\
 		-DCMAKE_VERBOSE_MAKEFILE=ON					\
@@ -26,6 +27,8 @@ pkg_cmake_configure() {
 		-DCURL_LIBRARY="${PKG_PREFIX}/lib/libcurl.lib.a"		\
 		-DCURSES_NCURSES_LIBRARY="${PKG_PREFIX}/lib/libncurses.lib.a"	\
 		-DKWSYS_LFS_WORKS=YES						\
+		-DLibUV_INCLUDE_DIR="${PKG_PREFIX}/include"			\
+		-DLibUV_LIBRARY="${PKG_PREFIX}/lib/libuv.1.0.0.lib.a"		\
 		-DLibArchive_INCLUDE_DIR="${PKG_PREFIX}/include"		\
 		-DLibArchive_LIBRARY="${PKG_PREFIX}/lib/libarchive.lib.a"	\
 		-DLIBLZMA_HAS_AUTO_DECODER=YES					\