www/firefox: fix tab crashing when not using pulseaudio
Submitted by: Ka Ho Ng
Approved by: ports-secteam blanket
Differential Revision: https://reviews.freebsd.org/D26303
net/enet: update to 1.3.16
From ChangeLog: https://github.com/lsalzman/enet/blob/master/ChangeLog
* fix bug in unreliable fragment queuing
* use single output queue for reliable and unreliable packets for saner
ordering
* revert experimental throttle changes that were less stable than prior
algorithm
Reported by: portscout
Approved by: ports-secteam (blanket, runtime fix)
lang/php74: Upgrade from 7.4.9 to 7.4.10
Changelog:
Core:
Fixed bug #79884 (PHP_CONFIG_FILE_PATH is meaningless).
Fixed bug #77932 (File extensions are case-sensitive).
Fixed bug #79806 (realpath() erroneously resolves link to link).
Fixed bug #79895 (PHP_CHECK_GCC_ARG does not allow flags with equal sign).
Fixed bug #79919 (Stack use-after-scope in define()).
Fixed bug #79934 (CRLF-only line in heredoc causes parsing error).
Fixed bug #79947 (Memory leak on invalid offset type in compound assignment).
COM:
Fixed bug #48585 (com_load_typelib holds reference, fails on second call).
Exif:
Fixed bug #75785 (Many errors from exif_read_data).
Gettext:
Fixed bug #70574 (Tests fail due to relying on Linux fallback behavior for gettext()).
LDAP:
Fixed memory leaks.
OPcache:
Fixed bug #73060 (php failed with error after temp folder cleaned up).
Fixed bug #79917 (File cache segfault with a static variable in inherited method).
PDO:
Fixed bug #64705 (errorInfo property of PDOException is null when PDO::__construct() fails).
Session:
Fixed bug #79724 (Return type does not match in ext/session/mod_mm.c).
Standard:
Fixed bug #79930 (array_merge_recursive() crashes when called with array with single reference).
Fixed bug #79944 (getmxrr always returns true on Alpine linux).
Fixed bug #79951 (Memory leak in str_replace of empty string).
XML:
Fixed bug #79922 (Crash after multiple calls to xml_parser_free()).
Sponsored by: Bounce Experts
Approved by: ports-secteam (joneum, implicit for PHP Updates)
lang/php73: Upgrade from 7.3.21 to 7.3.22
Changelog:
Core:
Fixed bug #79884 (PHP_CONFIG_FILE_PATH is meaningless).
Fixed bug #77932 (File extensions are case-sensitive).
Fixed bug #79806 (realpath() erroneously resolves link to link).
Fixed bug #79895 (PHP_CHECK_GCC_ARG does not allow flags with equal sign).
Fixed bug #79919 (Stack use-after-scope in define()).
Fixed bug #79934 (CRLF-only line in heredoc causes parsing error).
COM:
Fixed bug #48585 (com_load_typelib holds reference, fails on second call).
Exif:
Fixed bug #75785 (Many errors from exif_read_data).
Gettext:
Fixed bug #70574 (Tests fail due to relying on Linux fallback behavior for gettext()).
LDAP:
Fixed memory leaks.
OPcache:
Fixed bug #73060 (php failed with error after temp folder cleaned up).
PDO:
Fixed bug #64705 (errorInfo property of PDOException is null when PDO::__construct() fails).
Standard:
Fixed bug #79930 (array_merge_recursive() crashes when called with array with single reference).
Fixed bug #79944 (getmxrr always returns true on Alpine linux).
Fixed bug #79951 (Memory leak in str_replace of empty string).
XML:
Fixed bug #79922 (Crash after multiple calls to xml_parser_free()).
Sponsored by: Bounce Experts
Approved by: ports-secteam (joneum, implicit for PHP Updates)
net/mpd5: import r2272 from upstream
net/mpd5: improve logging in rare case of libpdel failure.
net/mpd5: remove required_files from startup script
net/mpd5: update to version 5.9
Approved by: ports-secteam
Security: CVE-2020-7465, CVE-2020-7466
converters/recode: fix info file, add LICENCE, quiet portlint/portclippy
This has been broken for almost 10 months, and again 3 months of silence
from the maintainer, so let me step in to just fix it for the nonce.
- Add LICENSE=GPLv2+
- Add USES=makeinfo to fix .info file in clean-room builds (poudriere) [1]
- Reshuffle a few lines to please portclippy and portlint
- Bump PORTREVISION to flush out the broken packages and force rebuild
- Add DISABLED example to strip library in order to also please
stage-qa with DEVELOPER=yes (would require maintainer approval),
in post-install (just remove @: and the comment line to enable).
PR: 241879 [1]
Submitted by: Victor Sudakov <vas@sibptus.ru> [1]
Approved by: portmgr@ (blanket, see next line)
Approved by: ports-secteam@ (blanket: add dependency to fix broken .info, add LICENSE, fix portlint/portclippy issues)
Approved by: portmgr (with hat)
gnupg: Update to 2.2.21
* gpg: Improve symmetric decryption speed by about 25%.
See commit 144b95cc9d.
* gpg: Support decryption of AEAD encrypted data packets.
* gpg: Add option --no-include-key-block. [#4856]
* gpg: Allow for extra padding in ECDH. [#4908]
* gpg: Only a single pinentry is shown for symmetric encryption if
the pinentry supports this. [#4971]
* gpg: Print a note if no keys are given to --delete-key. [#4959]
* gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
shown. [#2103]
* gpgsm: Certificates without a CRL distribution point are now
considered valid without looking up a CRL. The new option
--enable-issuer-based-crl-check can be used to revert to the
former behaviour.
* gpgsm: Support rsaPSS signature verification. [#4538]
* gpgsm: Unless CRL checking is disabled lookup a missing issuer
certificate using the certificate's authorityInfoAccess. [#4898]
* gpgsm: Print the certificate's serial number also in decimal
notation.
* gpgsm: Fix possible NULL-deref in messages of --gen-key. [#4895]
* scd: Support the CardOS 5 based D-Trust Card 3.1.
* dirmngr: Allow http URLs with "LOOKUP --url".
* wkd: Take name of sendmail from configure. Fixes an OpenBSD
specific bug. [#4886]
Release-info: https://dev.gnupg.org/T4897
security/gnupg: Update to 2.2.22
Also, sort plist. The new gpgsplit binary is getting installed as
gpgsplit2 to avoid a conflict with security/gnupg1.
Noteworthy changes in version 2.2.22
====================================
* gpg: Change the default key algorithm to rsa3072.
* gpg: Add regular expression support for Trust Signatures on all
platforms. [#4843]
* gpg: Fix regression in 2.2.21 with non-default --passphrase-repeat
option. [#4991]
* gpg: Ignore --personal-digest-prefs for ECDSA keys. [#5021]
* gpgsm: Make rsaPSS a de-vs compliant scheme.
* gpgsm: Show also the SHA256 fingerprint in key listings.
* gpgsm: Do not require a default keyring for --gpgconf-list. [#4867]
* gpg-agent: Default to extended key format and record the creation
time of keys. Add new option --disable-extended-key-format.
* gpg-agent: Support the WAYLAND_DISPLAY envvar. [#5016]
* gpg-agent: Allow using --gpgconf-list even if HOME does not
exist. [#4866]
* gpg-agent: Make the Pinentry work even if the envvar TERM is set
to the empty string. [#4137]
* scdaemon: Add a workaround for Gnuk tokens <= 2.15 which wrongly
incremented the error counter when using the "verify" command of
"gpg --edit-key" with only the signature key being present.
* dirmngr: Better handle systems with disabled IPv6. [#4977]
* gpgpslit: Install tool. It was not installed in the past to avoid
conflicts with the version installed by GnuPG 1.4. [#5023]
(We're installing it as gpgsplit2 to avoid conflict with security/gnupg1)
* gpgtar: Handle Unicode file names on Windows correctly (requires
libgpg-error 1.39). [#4083]
* gpgtar: Make --files-from and --null work as documented. [#5027]
* Build the Windows installer with the new Ntbtls 0.2.0 so that TLS
connections succeed for servers demanding GCM.
Release-info: https://dev.gnupg.org/T5030
security/gnupg: Update to 2.2.23
Importing an OpenPGP key having a preference list for AEAD algorithms
will lead to an array overflow and thus often to a crash or other
undefined behaviour.
Importing an arbitrary key can often easily be triggered by an attacker
and thus triggering this bug. Exploiting the bug aside from crashes is
not trivial but likely possible for a dedicated attacker. The major
hurdle for an attacker is that only every second byte is under their
control with every first byte having a fixed value of 0x04.
Software distribution verification should not be affected by this bug
because such a system uses a curated list of keys.
Security: CVE-2020-25125
audio/bjumblr-lv2: fix build on GCC architectures
Require C++11 compiler because of -std=c++11.
Include climits in FileChooser.hpp because of INT64_MAX (GCC doesn't do that by default).
PR: 248134
Approved by: portmgr (blanket: build fix)
databases/mysql57-server: fix build on current (temporary fix)
- add temporary work around to use llvm from ports on recent currents
Approved by: ports-secteam (with hat)
fix build on current
- add temporary work around to use llvm from ports on recent currents
Sponsored by: Netzkommune GmbH
Approved by: ports-secteam (with hat)
deskutils/xfce4-generic-slider: fix build on GCC architectures
Use C11 compiler:
/usr/local/include/xfce4/libxfce4util/xfce-kiosk.h:37: error: redefinition of typedef 'XfceKiosk'
/usr/local/include/xfce4/libxfce4util/xfce-kiosk.h:35: error: previous declaration of 'XfceKiosk' was here
Approved by: portmgr (fix build blanket)
databases/grass7: fix build on 11i386
When I added the option for compiling with openmp, like other ports, I don't use compiler:openmp but directly the default compiler because it works just as well. However, on FreeBSD 11, grass only builds well with LLVM90.
While I'm here I added with-proj-[includes|libs] to be more thorough
Approved by: tcberner
Differential Revision: https://reviews.freebsd.org/D25712
Approved by: ports-secteam (joneum)
x11-clocks/wmbinclock: fix build in current
Another case of -fno-common issue.
While here, add a couple of missing xorg modules and remove a noop REINPLACE_CMD
PR: 249048
Submitted by: logix@foobar.franken.de
Approved by: ports-secteam (blanket, build fix, -fno-common)
security/snuffleupagus: update to 0.5.1, build fix
From ChangeLog: https://github.com/jvoisin/snuffleupagus/releases/tag/v0.5.1
* Add support for syslog
* Improve OSX support
* Improve marginally of php8+ compatibility
* Improve php7.4 compatibility
* Improve the default ruleset
* Improve the documentation
* Improve the gitlab CI
Includes build fix for -fno-common issue.
Pet linters.
PR: 248974
Submitted by: franco@opnsense.org (maintainer)
Approved by: ports-secteam (blanket, build fix, -fno-common)
devel/xboard: fix build in 13-current
Another case of -fno-common
This fixes the slave port devel/xboard-devel too.
While here, add missing USE_XORG modules.
PR: 248984
Reported by: kalten@gmx.at
Approved by: ports-secteam (blanket, build fix, -fno-common)
