This and the few previous commits together fixes #5701

Jason Donenfeld authored 6 years ago and Andy Postnikov committed 6 years ago

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>

This includes upstream change to add ld --no-as-needed option
as some DSOs provide plugins via constructor mechanism and would
get incorrectly not linked in.

This fixes breakage uncovered by musl 1.1.20 upgrade.

While at it modernize

Disable gspell for now since we don't package it currently.

See: https://github.com/AlDanial/cloc#license-

The GPL `or later`-clause is contained in the comment header of various
files, including the cloc script itself.

CVE-2018-16056, CVE-2018-16057, CVE-2018-16058

fixes #9405

Andy Postnikov authored 6 years ago and Natanael Copa committed 6 years ago

CVE-2018-15908, CVE-2018-15909, CVE-2018-15910, CVE-2018-15911
CVE-2018-10194

fixes #9382