Graphics/drm-*-kmod: Update pkg-message
Update pkg-message in drm-stable-kmod, drm-next-kmod and drm-devel-kmod and
point people to drm-legacy-kmod for the legacy drm drivers.
Approved by: jmd (maintainer, implicit)
graphics/drm-devel-kmod: enable experimental i386 support.
Alongside update to a later snapshot which brings vmwgfx.
Obtained from: FreeBSDDesktop
graphics/drm-devel-kmod: Fix runtime
Fix runtime after stolen memory handling was comitted. Use FreeBSD 1200086
as delimiter, since FreeBSD versions wasn't bumped for the stolen memory
commit.
With these updates, drm-kmods are current with what's in ports head.
Approved by: portmgr (drm-drivers blanket)
- Update xca to 2.1.2
- The new version works fine with OpenSSL 1.1.1
- Drop Qt4 option and move to Qt5
- Fix portlint warning
- Project moved to github
- Update WWW in pkg-descr
- Take maintainership
Approved by: ports-secteam (eadler)
multimedia/gnome-mpv: chase compiler used by mpv
On GCC architectures OPENCV option in multimedia/ffmpeg appears to
require consumers to pass -L${_GCC_RUNTIME}. So, use modern GCC where
this is implicit.
//usr/local/lib/libopencv_core.so.3.4: undefined reference to `std::__detail::_List_node_base::_M_hook(std::__detail::_List_node_base*)@GLIBCXX_3.4.15'
//usr/local/lib/libopencv_core.so.3.4: undefined reference to `std::__throw_bad_function_call()@GLIBCXX_3.4.14'
PR: 233120
Submitted by: linimon
Approved by: ports-secteam blanket
mail/imapfilter: Drop LibreSSL patch and unbreak build with OpenSSL 1.1.1
The patch added in ports r435498 broke OpenSSL 1.1.x compatibility.
A different fix for LibreSSL was committed upstream so the patch
is no longer needed since imapfilter 2.6.11 [1].
[1] c1865ba1ab
PR: 232132
Approved by: bofh (maintainer timeout, 1 month)
Approved by: ports-secteam blanket
Add support of -fuse-ld=lld
Merge support from upstream gcc for -fuse-ld=lld. It's already committed and
should appear in a future release.
PR: 233174
Submitted by: brooks
Sponsored by: The FreeBSD Foundation
Remove a sneaked change in r484853
Sponsored by: The FreeBSD Foundation
Approved by: ports-secteam (miwi)
- Fix X509 build after r484765 openssl fix
- Fix patch URL for KERB_GSSAPI
- Add FLAVORs for x509 and gssapi since they are distinct types of
OpenSSH rather than feature flags.
Approved by: portmgr (implicit)
Update to 7.9p1.
- Fixes build on 12, head, and openssl-devel.
- GSSAPI and HPN are currently marked BROKEN as I don't want to block
the main update for anyone.
http://www.openssh.com/txt/release-7.8http://www.openssh.com/txt/release-7.9
- Fix HPN for 7.9p1
- DOCS is required for HPN but it's not exclusively a flavor so needs to be
in the default list.
- Fix a build-time OpenSSL version comparison [1]
PR: 233157 [1]
Reported by: Robert Schulze <rs@bytecamp.net> [1]
Obtained from: upstream c0a35265907533be10ca151ac797f34ae0d68969 [1]
- Update KERB_GSSAPI for 7.9p1
Approved by: portmgr (implicit)
- Fix building against Lua(JIT). The configuration switch change since version 1.3.2.
When building without poudriere, it would always pick LuaJIT over Lua if both are installed,
basically ignoring the configuration knob.
- Bump PORTREVISION
PR: 233142 (based on)
Submitted by: Ralf van der Enden <tremere@cainites.net>
Approved by: ports-secteam (miwi)
Update to 2.6.1
Changelog:
- Security fix with btsync:// protocol
- Fixed crashes when reading damaged database
- Removed false positive "Cannot get list of trackers" error message
- Fixed joining multicasts on 172.16.0.0/12 networks
- Fixed showing duplicated peers and devices on OS X
- Fixed failure to save settings in WebUI sometimes
- Fixed decrypting files on encrypted peer
Changelog: https://help.resilio.com/hc/en-us/articles/206216855-Sync-2-x-change-log
PR: 232345
Reported by: Volodymyr Kostyrko <arcade@b1t.name> (maintainer)
Sponsored by: Netzkommune GmbH
Approved by: ports-secteam (miwi)
Fix build with NLS disabled
Details:
- Unconditionally depend on gettext-tools at build time since
msgfmt is still required to create vlc.appdata.xml
PR: 232967
Reported by: Trond.Endrestol@ximalas.info
Approved by: ports-secteam (riggs)
Add patch to stop xfburn crashing when trying to burn an audio CD.
Reported and tested by: Holger Wagemann <Holger.Wagemann@posteo.de>
Approved by: ports-secteam (miwi)
graphics/drm-legacy-kmod: Update snapshot
This improves debugging output in some cases. No other functional changes.
Approved by: maintainer (jmd, implicit)
Approved by: ports-secteam (riggs)
Security update from 1.15.5 to 1.15.6.
Temporary disable third-party upstream_fair module, it should
be updated to build with the modern version of the nginx.
While I'm here fix some whitespaces.
Security: 84ca56be-e1de-11e8-bcfd-00e04c1ea73d
Approved by: ports-secteam (miwi)
<ChangeLog>
*) Security: when using HTTP/2 a client might cause excessive memory
consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).
*) Security: processing of a specially crafted mp4 file with the
ngx_http_mp4_module might result in worker process memory disclosure
(CVE-2018-16845).
*) Feature: the "proxy_socket_keepalive", "fastcgi_socket_keepalive",
"grpc_socket_keepalive", "memcached_socket_keepalive",
"scgi_socket_keepalive", and "uwsgi_socket_keepalive" directives.
*) Bugfix: if nginx was built with OpenSSL 1.1.0 and used with OpenSSL
1.1.1, the TLS 1.3 protocol was always enabled.
*) Bugfix: working with gRPC backends might result in excessive memory
consumption.
</ChangeLog>
mail/rss2email2: Add workaround for filtering out bad tags
This can apparently be triggered with malformed RSS feeds.
Traceback (most recent call last):
File "/usr/share/rss2email/rss2email.py", line 711, in run
tagline = ",".join(taglist)
TypeError: sequence item 1: expected string or Unicode, NoneType found
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734327
- Reset maintainer due to the long timeout
PR: 214934
Submitted by: jonathan@invertedearth.net
Approved by: srg@guglielmo.us (maintainer timeout, ~2 years)
Approved by: ports-secteam runtime fix blanket
mail/nullmailer: Unbreak build with Clang 6 (C++14 by default)
inject.cc:221:3: error: non-constant-expression cannot be narrowed from type 'size_t' (aka 'unsigned long') to 'unsigned int' in initializer list [-Wc++11-narrowing]
X(Errors-To, T,F,F,F,F), // 5
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
http://beefy12.nyi.freebsd.org/data/head-amd64-default/p483866_s340093/logs/nullmailer-1.13_3,1.log
PR: 230496
Submitted by: Tod McQuillin <devin@spamcop.net>
Approved by: ports-secteam blanket
Update to 1.14.1
Changelog:
- Security: when using HTTP/2 a client might cause excessive memory
consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).
- Security: processing of a specially crafted mp4 file with the
ngx_http_mp4_module might result in worker process memory disclosure
(CVE-2018-16845).
- Bugfix: working with gRPC backends might result in excessive memory
consumption.
Security: 84ca56be-e1de-11e8-bcfd-00e04c1ea73d
Sponsored by: Netzkommune HmbH
Approved by: ports-secteam (miwi)
lang/erlang, lang/erlang-runtime*: Indicate which port supports OpenSSL 1.1
With some patching [1], Erlang 19.x supports OpenSSL 1.1.x (lang/erlang,
lang/erlang-runtime19).
However, previous versions are now marked as broken with OpenSSL 1.1.x.
PR: 225898
Submitted by: brnrd [1]
Obtained from: Upstream
Approved by: portmgr (miwi)
- While major 6.4 update still cooking (authors dropped openssl support at all
in favor of libressl), mark OpenSMTPd as BROKEN with openssl 1.1.x api
- Use https in pkg-descr url
Approved by: ports-secteam (miwi)
