main/at-spi2-core/APKBUILD

 # Contributor: Natanael Copa <ncopa@alpinelinux.org>
 # Maintainer: Rasmus Thomsen <oss@cogitri.dev>
 pkgname=at-spi2-core
-pkgver=2.42.0
+pkgver=2.44.0
 pkgrel=0
 pkgdesc="Protocol definitions and daemon for D-Bus at-spi"
 url="https://www.freedesktop.org/wiki/Accessibility/AT-SPI2/"
@@ -28,5 +28,5 @@ package() {
 }
 
 sha512sums="
-befcab94b3aa99471723238d9666fc6667041b058a2bac3b012cfa15a91950996431296f33c921764e0ec4ffd0cc41ebe00be461a8460d6f4d2bafff19a38e10  at-spi2-core-2.42.0.tar.xz
+6d74a56d7ad6c643985e98aebbbf0cdaad69c03b8030f8968bd9cce9357805cd846d71d35d2cc4a193770cd6d4a83cbfb98ef082e17719f3dee7b839c48bda44  at-spi2-core-2.44.0.tar.xz
 "

main/subversion/APKBUILD

 # Contributor: Łukasz Jendrysik <scadu@yandex.com>
 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 pkgname=subversion
-pkgver=1.14.1
-pkgrel=8
-_py3c_ver=1.1
+pkgver=1.14.2
+pkgrel=0
+_py3c_ver=1.4
 pkgdesc="Replacement for CVS, another versioning system (svn)"
 url="https://subversion.apache.org/"
 arch="all"
@@ -20,11 +20,13 @@ source="https://archive.apache.org/dist/subversion/subversion-$pkgver.tar.bz2
 	subversion-1.7.0-deplibs.patch
 	subversion-perl-deplibs.patch
 	subversion-1.12.0-linking.patch
-	fix-use-after-free.patch
 	svnserve.confd
 	svnserve.initd"
 
 # secfixes:
+#   1.14.2-r0:
+#     - CVE-2021-28544
+#     - CVE-2022-24070
 #   1.14.1-r0:
 #     - CVE-2020-17525
 #   1.12.2-r0:
@@ -135,12 +137,11 @@ py() {
 }
 
 sha512sums="
-0a70c7152b77cdbcb810a029263e4b3240b6ef41d1c19714e793594088d3cca758d40dfbc05622a806b06463becb73207df249393924ce591026b749b875fcdd  subversion-1.14.1.tar.bz2
-aa95bbe1a80eec9e32d3dab4b0771a35fc467052757077fa17b42ceba78a5fe7fb1fa99079240aeeea5538abff778518b706f3bf16dbce2cd4f7dc1900c61b24  py3c-1.1.tar.gz
+20ada4688ca07d9fb8da4b7d53b5084568652a3b9418c65e688886bae950a16a3ff37710fcfc9c29ef14a89e75b2ceec4e9cf35d5876a7896ebc2b512cfb9ecc  subversion-1.14.2.tar.bz2
+db71db2c19a16ba5a430b676beb357faee5b67b161478932af13dd06be23b5505da85dbaf5b2447f95590fea55b833ee33fa19d3350ba3117f3364a9ab012ee6  py3c-1.4.tar.gz
 fb219c45b80602d919176cc191394df09f90d0f5c7d24e6a36b166bd92777ecae67eeac1e49c0ffbb0e724396b3d2094dbb0bef17d01dc87d418b1cd554bd7c4  subversion-1.7.0-deplibs.patch
 fd6e5f45cff4d3cf0d885a34c822b32141b13b199d99ad8e1b04d641c9c1ee27e73f5c556a4ad54a900b6d39cc14afad17b6738d8af44c76758f1a27b4d49f9a  subversion-perl-deplibs.patch
 7d46f2ee0bbba53b6dc9312b35000b1433a46edb09f61030da1ff66951bc204fc90598e5b07ce2554d46508d5a9e8193152131ae21050901c7b40cb034fb5cc3  subversion-1.12.0-linking.patch
-ded55257f3efeaa6d70ab15ad5082be9d4544e729a907541575dbac024605633eaaf00957850ae7cf63c549ccb6204dd6e00c664765a8fc4e66a8c2f2b2c0c1d  fix-use-after-free.patch
 7fe993443d4d3ef5e1e75f60e85036ee0b2bb2636c2c830210e64f525f95ae4c10ca1dc4504fc36915ec9391815becbe7cbf5f589c28609386d8d079ed02c630  svnserve.confd
 f6392193cc65aaceee9b6e5e66f80af4b095ba4007e8536e8b1c4e8b2c75610d7f5596b83e5edd504672f021c074887fc6464cf4fc1dfe9446741105f11cd855  svnserve.initd
 "

main/subversion/fix-use-after-free.patch

---- subversion-1.14.1/subversion/libsvn_repos/authz.c
-+++ subversion-1.14.1.uaf/subversion/libsvn_repos/authz.c
-@@ -130,6 +130,30 @@
- static svn_object_pool__t *filtered_pool = NULL;
- static svn_atomic_t authz_pool_initialized = FALSE;
- 
-+/*
-+ * Ensure that we will initialize authz again if the pool which
-+ * our authz caches depend on is cleared.
-+ *
-+ * HTTPD may run pre/post config hooks multiple times and clear
-+ * its global configuration pool which our authz pools depend on.
-+ * This happens in a non-threaded context during HTTPD's intialization
-+ * and HTTPD's main loop, so it is safe to reset static variables here.
-+ * (And any applications which cleared this pool while SVN threads
-+ * were running would crash no matter what.)
-+ *
-+ * See issue #4880, "Use-after-free of object-pools in
-+ * subversion/libsvn_repos/authz.c when used as httpd module"
-+ */
-+static apr_status_t
-+deinit_authz(void *data)
-+{
-+  /* The two object pools run their own cleanup handlers. */
-+  authz_pool = NULL;
-+  filtered_pool = NULL;
-+  authz_pool_initialized = FALSE;
-+  return APR_SUCCESS;
-+}
-+
- /* Implements svn_atomic__err_init_func_t. */
- static svn_error_t *
- synchronized_authz_initialize(void *baton, apr_pool_t *pool)
-@@ -143,6 +167,7 @@
-   SVN_ERR(svn_object_pool__create(&authz_pool, multi_threaded, pool));
-   SVN_ERR(svn_object_pool__create(&filtered_pool, multi_threaded, pool));
- 
-+  apr_pool_cleanup_register(pool, NULL, deinit_authz, apr_pool_cleanup_null);
-   return SVN_NO_ERROR;
- }
- 

main/util-linux/APKBUILD

@@ -9,7 +9,6 @@ url="https://git.kernel.org/cgit/utils/util-linux/util-linux.git"
 arch="all"
 license="GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND
 	LGPL-2.1-or-later AND BSD-3-Clause AND BSD-4-Clause-UC AND Public-Domain"
-checkdepends="bash findutils xz"
 makedepends_build="
 	autoconf
 	automake
@@ -50,6 +49,7 @@ subpackages="
 	wipefs:_mv_bin
 	"
 if [ -z "$BOOTSTRAP" ]; then
+	checkdepends="bash findutils xz procps coreutils"
 	makedepends_build="$makedepends_build asciidoctor"
 	makedepends_host="$makedepends_host
 		linux-pam-dev
@@ -64,9 +64,9 @@ if [ -z "$BOOTSTRAP" ]; then
 		runuser:_mv_bin
 		py3-libmount:_py3
 		"
-	options="!check"
 	_bootstrap_config="--enable-runuser --with-python=3 --with-econf"
 else
+	options="!check"
 	_bootstrap_config="--without-python --without-econf --disable-asciidoc --disable-login"
 fi
 subpackages="$subpackages $pkgname-doc $pkgname-misc"

testing/bsd-games/APKBUILD

 # Contributor: Maxim Karasev <begs@disroot.org>
 # Maintainer: Maxim Karasev <begs@disroot.org>
 pkgname=bsd-games
-pkgver=3.1
+pkgver=3.2
 pkgrel=0
 pkgdesc="traditional text mode games from BSD"
 url="https://github.com/msharov/bsd-games"
@@ -29,5 +29,5 @@ package() {
 }
 
 sha512sums="
-3f311e89481913b734a21fc7d0765628637af8251228d5a38349c27cc702c307240e81711785bbd7428e208a142bd07597630d29e97e2c7bf5bd9cac1ebc6ada  bsd-games-3.1.tar.gz
+cf5f5a9e5d215ee553486580f9a7dfc9801d254a2806172df201dfc42ecbb05326db7bc25b7624eb8a8e541ad61ec319d258687609bddae2bc07edcbade2291a  bsd-games-3.2.tar.gz
 "

testing/labwc/APKBUILD

@@ -2,7 +2,7 @@
 # Maintainer: Patrycja Rosa <alpine@ptrcnull.me>
 pkgname=labwc
 pkgver=0.5.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Wayland stacking compositor"
 url="https://github.com/labwc/labwc"
 arch="all"
@@ -19,7 +19,8 @@ makedepends="
 	wlroots-dev
 	"
 subpackages="$pkgname-doc"
-source="https://github.com/labwc/labwc/archive/$pkgver/labwc-$pkgver.tar.gz"
+source="https://github.com/labwc/labwc/archive/$pkgver/labwc-$pkgver.tar.gz
+	remove-aports-git-version.patch"
 
 build() {
 	abuild-meson . output -Dman-pages=enabled
@@ -36,4 +37,5 @@ package() {
 
 sha512sums="
 bb73bd97dd8f92701abbb415da70dc51947651b993076a3ecb50eee4289798a5008758077bc08c94554c38caf910d164bbd18f3a6ec7dd4348a082564ac85eb3  labwc-0.5.1.tar.gz
+494e9fa10db3cd1c610378ba4657d1a8ec0ebe8fc4efd549e5df4675c460cb09def0c10463b5a6f16de41f70a2f60c0ee8e934558caa4c16a80d19177686dc4d  remove-aports-git-version.patch
 "

testing/labwc/remove-aports-git-version.patch

+--- a/meson.build
++++ b/meson.build
+@@ -28,13 +28,6 @@
+ )
+
+ version='"@0@"'.format(meson.project_version())
+-git = find_program('git', native: true, required: false)
+-if git.found()
+-  git_commit = run_command([git, 'describe', '--dirty'])
+-  if git_commit.returncode() == 0
+-    version = '"@0@"'.format(git_commit.stdout().strip())
+-  endif
+-endif
+ add_project_arguments('-DLABWC_VERSION=@0@'.format(version), language: 'c')
+
+ wlroots_version = ['>=0.15.0', '<0.16.0']

testing/py3-tzlocal/APKBUILD

 # Maintainer: prspkt <prspkt@protonmail.com>
 pkgname=py3-tzlocal
-pkgver=4.2
-pkgrel=0
+pkgver=2.1
+pkgrel=2
 pkgdesc="Python tzinfo object for the local timezone"
 url="https://github.com/regebro/tzlocal"
 arch="noarch"
@@ -22,6 +22,4 @@ package() {
 	python3 setup.py install --prefix=/usr --root="$pkgdir"
 }
 
-sha512sums="
-5d1000bd8756ca2678655dbeedcfd6ef8d709503293303c98a48af234aca0d1525913585d679759c6fd7d4c5ef046c98384ee6e7a9eba769f81d05173ff0d77f  tzlocal-4.2.tar.gz
-"
+sha512sums="5419f3316dfcbf0355cc6f0790454fe6cecfa8b1ae17bfa7bf8aff89b0af3e63c94ffe9c22b11f612e53826a33e7179ff71bc2a86f6a358cdff36c7ae34e2453  tzlocal-2.1.tar.gz"

testing/winetricks/APKBUILD

 # Contributor: Leonardo Arena <rnalrd@alpinelinux.org>
 # Maintainer:
 pkgname=winetricks
-pkgver=20220328
+pkgver=20220411
 pkgrel=0
 pkgdesc="Winetricks is an easy way to work around problems in Wine"
 url="https://github.com/Winetricks/winetricks"
@@ -17,5 +17,5 @@ package() {
 }
 
 sha512sums="
-be114d6c924fc0b2acacfa6e8b2bf2457a8f959bb215818b00fb013f9e8b23c4665d58e4d303b94974ad1b4790d4c7a1f5e8abfa273c80d3729d0b25a8fa45db  winetricks-20220328.tar.gz
+c4e77c5e62d2df56db6aa75979cc775f26472917108b0498c975458fd6f7ecbef52c329b7b6f33c12510176e105190bc538447b39348a42b7f1a8e07e5d92d09  winetricks-20220411.tar.gz
 "