ddrescue: add README about a possible security risk, and how to migrate that risk by writing zeros to the unfinished parts of the clone

ddrescue/README

@@ -0,0 +1,28 @@
+CAUTION:
+
+I would like to point that relates to an unfinished image. 
+
+In any event, anything less than a 100% recovery will leave portions on 
+the target image/drive that have not been written to by ddrescue. 
+
+If copying to a brand new hard drive, those areas are (hopefully) likely 
+to be zeros. But in any other case, those areas will contain whatever data 
+was there previously. For someone that uses their system for data recovery 
+on a regular basis, and is using image files or reusing hard drives, those 
+areas could contain data from a previous recovery! This could be a privacy 
+issue in some cases, but also could cause an issue with running any other 
+sort of repair/file recovery tools on the recovered image/drive. 
+
+The unrecovered parts could contain "garbage" data that could affect
+accurate recovery. In these cases I would recommend using the fill mode 
+of ddrescue to fill any unfinished/untried areas with zeros. 
+
+Example command:
+
+ddrescue --fill-mode=?/*- /dev/zero recovered_image logfile
+
+This would write zeros to any portion of the recovery that was not
+successfully read from the source.
+
+Reference:
+https://lists.gnu.org/archive/html/bug-ddrescue/2013-11/msg00011.html

libmp4v2/.footprint

@@ -31,9 +31,10 @@ drwxr-xr-x	root/root	usr/lib/
 lrwxrwxrwx	root/root	usr/lib/libmp4v2.so -> libmp4v2.so.2.0.0
 lrwxrwxrwx	root/root	usr/lib/libmp4v2.so.2 -> libmp4v2.so.2.0.0
 -rwxr-xr-x	root/root	usr/lib/libmp4v2.so.2.0.0
-drwxr-xr-x	root/root	usr/man/
+drwxr-xr-x	root/root	usr/share/
-drwxr-xr-x	root/root	usr/man/man1/
+drwxr-xr-x	root/root	usr/share/man/
--rw-r--r--	root/root	usr/man/man1/mp4art.1.gz
+drwxr-xr-x	root/root	usr/share/man/man1/
--rw-r--r--	root/root	usr/man/man1/mp4file.1.gz
+-rw-r--r--	root/root	usr/share/man/man1/mp4art.1.gz
--rw-r--r--	root/root	usr/man/man1/mp4subtitle.1.gz
+-rw-r--r--	root/root	usr/share/man/man1/mp4file.1.gz
--rw-r--r--	root/root	usr/man/man1/mp4track.1.gz
+-rw-r--r--	root/root	usr/share/man/man1/mp4subtitle.1.gz
+-rw-r--r--	root/root	usr/share/man/man1/mp4track.1.gz

libmp4v2/Pkgfile

@@ -1,19 +1,17 @@
 # Description: Functions for accessing ISO-IEC:14496-1:2001 MPEG-4 standard.
-# URL: http://code.google.com/p/mp4v2/
+# URL: https://code.google.com/archive/p/mp4v2/
 # Maintainer: Danny Rawlins, crux at romster dot me
 # Packager: Matt Housh, jaeger at morpheus dot net
 
 name=libmp4v2
 version=2.0.0
-release=1
+release=2
-source=(http://mp4v2.googlecode.com/files/mp4v2-$version.tar.bz2)
+source=(https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/mp4v2/mp4v2-$version.tar.bz2)
 
 build() {
 	cd mp4v2-$version
 
-	./configure \
+	./configure --prefix=/usr
-		--prefix=/usr \
-		--mandir=/usr/man
 
 	make
 	make DESTDIR=$PKG install

webkitgtk/.footprint

@@ -289,11 +289,11 @@ drwxr-xr-x	root/root	usr/lib/girepository-1.0/
 -rw-r--r--	root/root	usr/lib/girepository-1.0/WebKit2-4.0.typelib
 -rw-r--r--	root/root	usr/lib/girepository-1.0/WebKit2WebExtension-4.0.typelib
 lrwxrwxrwx	root/root	usr/lib/libjavascriptcoregtk-4.0.so -> libjavascriptcoregtk-4.0.so.18
-lrwxrwxrwx	root/root	usr/lib/libjavascriptcoregtk-4.0.so.18 -> libjavascriptcoregtk-4.0.so.18.4.9
+lrwxrwxrwx	root/root	usr/lib/libjavascriptcoregtk-4.0.so.18 -> libjavascriptcoregtk-4.0.so.18.4.12
--rwxr-xr-x	root/root	usr/lib/libjavascriptcoregtk-4.0.so.18.4.9
+-rwxr-xr-x	root/root	usr/lib/libjavascriptcoregtk-4.0.so.18.4.12
 lrwxrwxrwx	root/root	usr/lib/libwebkit2gtk-4.0.so -> libwebkit2gtk-4.0.so.37
-lrwxrwxrwx	root/root	usr/lib/libwebkit2gtk-4.0.so.37 -> libwebkit2gtk-4.0.so.37.14.9
+lrwxrwxrwx	root/root	usr/lib/libwebkit2gtk-4.0.so.37 -> libwebkit2gtk-4.0.so.37.14.12
--rwxr-xr-x	root/root	usr/lib/libwebkit2gtk-4.0.so.37.14.9
+-rwxr-xr-x	root/root	usr/lib/libwebkit2gtk-4.0.so.37.14.12
 drwxr-xr-x	root/root	usr/lib/pkgconfig/
 -rw-r--r--	root/root	usr/lib/pkgconfig/javascriptcoregtk-4.0.pc
 -rw-r--r--	root/root	usr/lib/pkgconfig/webkit2gtk-4.0.pc

webkitgtk/.md5sum

@@ -1 +1 @@
-2fe3cadbc546d93ca68a13756c2be015  webkitgtk-2.14.2.tar.xz
+7fe3cb2699e64f969b285823c5ae2516  webkitgtk-2.14.5.tar.xz

webkitgtk/Pkgfile

@@ -1,14 +1,14 @@
 # Description: Small, efficient and fast rendering engine for Web Browsers.
-# URL: http://www.webkitgtk.org/
+# URL: https://www.webkitgtk.org/
 # Maintainer: Danny Rawlins, crux at romster dot me
 # Packager: Brett Goulder, predatorfreak at dcaf-security dot org
  # Depends on: cmake gst-plugins-base gtk gtk3 harfbuzz-icu libgudev libsecret libsoup libwebp ruby xorg-libxt
 # Optional: enchant libnotify
 
 name=webkitgtk
-version=2.14.2
+version=2.14.5
 release=1
-source=(http://webkitgtk.org/releases/$name-$version.tar.xz)
+source=(https://webkitgtk.org/releases/$name-$version.tar.xz)
 
 build() {
 	cd $name-$version