Commit Graph

513826 Commits

Author SHA1 Message Date
Kubilay Kocak
94f4d76a17 MFH: r546039 devel/libhtp: Update to 0.5.33
- Sort pkg-plist (ports compliance)

Changelog:

  https://github.com/OISF/libhtp/blob/0.5.33/ChangeLog

PR:	248483

Approved by:	ports-secteam (blanket: bugfix release(s))
2020-08-24 03:20:54 +00:00
Piotr Kubaj
67843114b6 MFH: r545795
net/intel-ixl-kmod: fix runtime on powerpc64

It looks like the fix for powerpc64 wasn't committed to the upstream yet. Take the patch that was committed to head and use it to patch this port (from https://svnweb.freebsd.org/base/head/sys/dev/ixl/ixl_pf_main.c?view=patch&r1=358698&r2=358697&pathrev=358698)

Approved by:	portmgr (fix runtime blanket)
2020-08-22 23:54:58 +00:00
Piotr Kubaj
8558cf8ea6 MFH: r545792
net/intel-ixl-kmod: enable building on powerpc64

ixl has been fixed in head some time ago on powerpc64.

Approved by:	portmgr (fix build blanket)
2020-08-22 23:16:17 +00:00
Piotr Kubaj
9cf627f4c9 MFH: r545790
net/appkonference: fix build on powerpc64

Approved by:	portmgr (fix build blanket)
2020-08-22 23:06:44 +00:00
Piotr Kubaj
dbc473a3e6 MFH: r545783
science/hdf: update to 4.2.15 to fix build on powerpc64

Newest version builds on powerpc64 just fine.

Approved by:	portmgr (fix build blanket)
2020-08-22 20:45:25 +00:00
Matthias Andree
911f67192b MFH: r545759
net/chrony: security update to 3.5.1

This upstream update essentially contains one Git commit:
https://git.tuxfamily.org/chrony/chrony.git/commit/?h=3.5-stable&id=f00fed20092b6a42283f29c6ee1f58244d74b545

It is to fix a symlink vulnerability when writing the pidfile.

Changelog: https://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2020/08/msg00000.html

Security:	CVE-2020-14367
Security:	719f06af-e45e-11ea-95a1-c3b8167b8026

Approved by:	ports-secteam (blanket, upstream update contains only security fix)
2020-08-22 11:04:21 +00:00
Niclas Zeising
ed8689817b MFH: r545744
sysutils/htop: Fix build with -fno-common

Fix the build of sysutils/htop with -fno-common, which is the default in
llvm 11 (and gcc 10)

PR:		248823
Submitted by:	Yasuhiro KIMURA

Approved by:	ports-secteam (joenum, implicit, -fno-common fixes)
2020-08-22 08:34:21 +00:00
Niclas Zeising
95cfc359a0 MFH: r545570
security/gnupg1: Build with -fcommon

With llvm 11, builds are using -fno-common by default.
I've tried to fix gnupg1 to build with this, but it is qyite hard and
requires a lot of patches.  In the meantime, upstream code has changed
significantly, and gnupg1 is old, so just switch it to use -fcommon instead,
to make it build.

Approved by:	ports-secteam (joenum, implicit, -fno-common fixes)
2020-08-22 08:33:27 +00:00
Niclas Zeising
72b0226846 MFH: r545562
net/bird2: Fix build with -fno-common

Fix the build of net/bird2 when compiled with -fno-common, which is the
default with llvm 11.

Approved by:	ports-secteam (joenum, implicit, -fno-common fixes)
2020-08-22 08:32:20 +00:00
Niclas Zeising
7322156a00 MFH: r545563
net/bird: Fix build with -fno-common

Fix the build of net/bird when compiled with -fno-common, which is the
default with llvm 11.

Approved by:	ports-secteam (joenum, implicit, -fno-common fixes)
2020-08-22 08:30:55 +00:00
Jan Beich
bcb4ffc0af MFH: r545619
emulators/{citra,yuzu}: replace ALSA with OSS (a la r545611)

OSS is enabled if neither pulseaudio, jackit, sndio are installed.
Unlike www/firefox it's not yet possible to override cubeb backend.

Approved by:	ports-secteam (joneum)
2020-08-22 03:28:38 +00:00
Kyle Evans
577a98da1c MFH: r545616
mail/mmh: fix build with -fno-common

mmh had just a minor build issue with -fno-common, fixed with a trivial
patch to extern the variable in question.

PR:		248812
Approved by:	satanist+freebsd@bureaucracy.de (maintainer)

Approved by:	ports-secteam (implicit: -fno-common build fix)
2020-08-21 18:20:13 +00:00
Jan Beich
d899c734c1 MFH: r545611
gecko: add native OSS support, replacing ALSA as fallback

OSS is always built but during runtime only selected by default if
neither pulseaudio, jackit or sndio are installed. In particular,
Gnome and KDE users would still be offered PulseAudio by default due
to integration with multi-app volume widgets, current song bars,
screensharing with audio, etc. that prefer to talk over DBus.
Those can opt out via media.cubeb.backend=oss in about:config.

Submitted by:	Ka Ho Ng <khng300@gmail.com> (based on)
Approved by:	ports-secteam blanket
2020-08-21 16:39:03 +00:00
Jan Beich
1fe9f1a6da MFH: r545203 r545254 r545473
www/firefox: update to 80.0

Changes:	https://www.mozilla.org/firefox/80.0/releasenotes/
Approved by:	ports-secteam blanket
2020-08-21 16:38:22 +00:00
Jan Beich
29af900ce7 MFH: r545204
www/firefox-esr: update to 68.12.0

Changes:	https://www.mozilla.org/firefox/68.12.0/releasenotes/
Approved by:	ports-secteam blanket
2020-08-21 16:36:17 +00:00
Rene Ladan
70855b22be MFH: r545587
multimedia/w_scan: schedule for removal on 2020-09-01, software is abandonded.

While here fix build by slapping -fcommon on it.

Approved by:	ports-secteam (joneum)
2020-08-21 11:48:12 +00:00
Li-Wen Hsu
baa937028b MFH: r545176
Update to 2.235.5

Approved by:	swils (maintainer, implicitly)
Security:	09ea1b08-1d3e-4bf2-91a1-d6573f4da3d8
Sponsored by:	The FreeBSD Foundation

Approved by:	ports-secteam (joneum)
2020-08-21 10:39:04 +00:00
Jan Beich
ff63e4795d MFH: r545498
x11/waybar: install icons font by default

Default config uses icons for cpu, memory, speaker/mic, etc.

Approved by:	ports-secteam (joneum)
2020-08-21 10:10:10 +00:00
Sunpoet Po-Chuan Hsieh
3be4757427 MFH: r545347
Update to 7.72.0

Changes:	https://curl.haxx.se/changes.html
Security:	b905dff4-e227-11ea-b0ea-08002728f74c

Approved by:	ports-secteam (joneum)
2020-08-21 10:00:58 +00:00
Mathieu Arnold
39e5eb05d3 MFH: r542640 r545578 r545579
Update to 9.11.22 and 9.16.6.

Security:	CVE-2020-8620, CVE-2020-8621, CVE-2020-8622,
		CVE-2020-8623, CVE-2020-8624
Approved by:	ports-secteam (blanket)
2020-08-21 09:16:43 +00:00
Bradley T. Hughes
a312bc24ed MFH: r545565
www/node: build with python < 3.7

r535334 introduced a patch for tools/genv8constants.py that only worked
with Python >= 3.7. The "text" argument added to Python's
subprocess.Popen() is an alias for "universal_newlines", which works on
all versions of Python, including 2.7.

PR:		248167
Submitted by:	James French <james@french.id.au>
Reported by:	Miroslav Lachman <000.fbsd@quip.cz>
Sponsored by:	Miles AS

Approved by:	ports-secteam (joneum)
2020-08-20 21:37:04 +00:00
Kyle Evans
e8608b73fa MFH: r545542
biology/paml: fix the build with LLVM 11

LLVM 11 switched from -fcommon to -fno-common by default. This revealed a
slight misposition of names in paml.h, which caused one symbol per enum
that's not used anywhere.

The fix just moves the names back so that the enums are named that, rather
than creating new unused symbols.

Reviewed by:	zeising
Approved by:	jrm (maintainer)

Approved by:	ports-secteam (joneum)
2020-08-20 21:11:43 +00:00
Niclas Zeising
1082f94997 MFH: r545535
dns/adns: Update to 1.6.0

Update dns/adns to 1.6.0.
This fixes several security issues in adns.
This fixes the build with -fno-common, which is the default with llvm 11.

PR:		248780
Approved by:	pi@ (maintainer)
Security:	08de38d2-e2d0-11ea-9538-0c9d925bbbc0

Approved by:	ports-secteam (joenum)
2020-08-20 19:30:16 +00:00
Niclas Zeising
40c4caaf53 MFH: r545468
devel/ocl-icd: FIx build with -fno-common

Fix the build of devel/ocl-icd with -fno-common, which is the default with
llvm 11.

Approved by:	ports-secteam (joenum)
2020-08-20 19:28:21 +00:00
Niclas Zeising
c9e57b4d41 MFH: r545467
security/ykpers: Fix build with -fno-common

Add a patch from upstream to fix the build with -fno-common, which is the
default with llvm 11.

Approved by:	ports-secteam (joenum)
2020-08-20 19:27:39 +00:00
Niclas Zeising
21b9a64528 MFH: r545453
multimeida/libv4l: Fix build with -fno-common

Add a patch from upstream to fix the build of multimedia/libv4l with
-fno-common, which is the default with llvm 11.

PR:		248738
Reported by:	dim

Approved by:	ports-secteam (joenum)
2020-08-20 19:26:59 +00:00
Niclas Zeising
de99979bf2 MFH: r545441
print/texlive-base: Fix build with -fno-common

Fix the build of print/texlive-base when built with -fno-common, which is
the default with llvm 11.

Approved by:	ports-secteam (joenum)
2020-08-20 19:26:21 +00:00
Niclas Zeising
5837e0b304 MFH: r545440
devel/binutils: fix build with -fno-common

Add a patch from upstream to fix the build of devel/binutils when compiled
with -fno-common, which is the default with llvm 11.

PR:		248701

Approved by:	ports-secteam (joenum)
2020-08-20 19:23:30 +00:00
Niclas Zeising
af27ca5fdd MFH: r545322
graphics/freeglut: fix for -fno-common

Fix the build of graphics/freeglut when built with -fno-common, which is the
default with llvm 11.

Approved by:	ports-secteam (joenum)
2020-08-20 19:22:40 +00:00
Niclas Zeising
1701f3dcbc MFH: r545317
graphics/argyllcms: Fix -fno-common build

Fix the build with -fno-common (default with llvm 11)
While here, remove a useless REINPLACE_CMD.

Approved by:	ports-secteam (joenum)
2020-08-20 19:21:40 +00:00
Dmitri Goutnik
848067739b MFH: r545532
textproc/elasticsearch6: Update to 6.8.12

Changes:	https://www.elastic.co/guide/en/elasticsearch/reference/6.8/release-notes-6.8.12.html
PR:		248761
Submitted by:	Juraj Lutter <juraj@lutter.sk> (maintainer)
Security:	fbca6863-e2ad-11ea-9d39-00a09858faf5

Approved by:	ports-secteam (joneum)
2020-08-20 19:07:19 +00:00
Li-Wen Hsu
c6c3f09be3 MFH: r545512
www/pecl-solr: Fix build for php 7.4

PR:		247364
Submitted by:	hagabard@gmail.com
Approved by:	Hung-Yi Chen <gaod@hychen.org> (maintainer)

Approved by:	portmgr (blanket: build fix)
2020-08-20 09:32:55 +00:00
Rodrigo Osorio
0255083316 MFH: r543580 r543582 r543637 r544331 r545124
net/rsync upgrade to 3.2.2

Major changes and bugfixes:
 3.1.3 -> 3.2.0
 * Avoid potential out-of-bounds read in daemon mode
 * Fix defaul list list of skip-compress files for non-daemon transfers
 * Fix xattr filter rules losing an 'x' attribute in a non-local transfer
 * zlib fixes for CVE-2016-9843, CVE-2016-9842, CVE-2016-9841, and CVE-2016-9840
 * Fixed a crash in the --iconv code
 * Checksum enhancements, including the addition of xxhash
 * The checksum preference order of the negotiation can be customized or forced
 * Compression enhancements, including the addition of zstd and lz4 compression algorithms
 * Added openssl & preliminary gnutls support to the rsync-ssl script
 * Added the proxy protocol daemon parameter that allows your rsyncd to know the real remote
   IP when it is setup behind a proxy

 3.2.0 -> 3.2.1
 * Fix potential issue with MD5 assembly-language code
 * option --backup-dir=STR now implies --backup

 3.2.1 -> 3.2.2
 * Avoid a crash when a daemon module enables transfer logging without setting a log format value

Full release message: https://download.samba.org/pub/rsync/NEWS#3.2.2

Security: CVE-2016-9843 CVE-2016-9842 CVE-2016-9841 CVE-2016-9840
MFH after: 2 weeks

rsync: Unbreak fetch

rsync: Unbreak and fix depends

rsync now depends on stuff in LOCALBASE. Previously, clang only needed to know
about LOCALBASE if POPT or ICONV was enabled. When those options are off, xxhash
and zstd were not found by configure.

Also, a depend on libssl was missing, and there were some noop reinplaces.

With hat: portmgr

- Fix fetch
- Fix license and add LICENSE_FILE
- Add missing dependency on liblz4
- Whitespace fixes
- Switch to options helpers

Approved by:	portmgr blanket

net/rsync upgrade to 3.2.3

major changes:
 - Fix multiple bugs in xattr code.
 - Restored the ability to use --bwlimit=0 to specify no bandwidth limit.
 - Fix a bug when combining --delete-missing-args with --no-implied-dirs & -R where rsync might create the destination path of a missing arg.
 - Fixed an issue where hard-linked devices could cause the rdev_major value to get out of sync between the sender and the receiver.
 - Rsync now complains about a missing --temp-dir before starting any file transfers.
 - A completely empty source arg is now a fatal error.

See full changelog: https://download.samba.org/pub/rsync/NEWS#3.2.3

Also, fix build issue with ACL option (patch is not required anymore)

PR:		248318 247795

Approved by:	ports-secteam (joenum)
2020-08-20 07:17:51 +00:00
Xin LI
f11f676491 MFH: r545496
Fix build.

Approved by:	ports-secteam (build fix blanket)
2020-08-20 04:44:42 +00:00
Alan Somers
edf11c1a36 MFH: 544720
sysutils/openzfs-kmod: fix the build with a nonstandard SRC_BASE

ports that need FreeBSD's src code should check $SRC_BASE rather than assume
/usr/src. For example, it should be possible to build openzfs-kmod with a
command like this:

env SRC_BASE=$HOME/freebsd/base/head make

Approved by:    ports-secteam (joneum)
2020-08-20 02:01:09 +00:00
Torsten Zuehlsdorff
377bcefffd MFH: r545456
lang/php74: Update from 7.4.8 to 7.4.9

Changelog:

    Apache:
        Fixed bug #79030 (Upgrade apache2handler's php_apache_sapi_get_request_time to return usec).
    COM:
        Fixed bug #63208 (BSTR to PHP string conversion not binary safe).
        Fixed bug #63527 (DCOM does not work with Username, Password parameter).
    Core:
        Fixed bug #79740 (serialize() and unserialize() methods can not be called statically).
        Fixed bug #79783 (Segfault in php_str_replace_common).
        Fixed bug #79778 (Assertion failure if dumping closure with unresolved static variable).
        Fixed bug #79779 (Assertion failure when assigning property of string offset by reference).
        Fixed bug #79792 (HT iterators not removed if empty array is destroyed).
        Fixed bug #78598 (Changing array during undef index RW error segfaults).
        Fixed bug #79784 (Use after free if changing array during undef var during array write fetch).
        Fixed bug #79793 (Use after free if string used in undefined index warning is changed).
        Fixed bug #79862 (Public non-static property in child should take priority over private static).
        Fixed bug #79877 (getimagesize function silently truncates after a null byte) (cmb)
    Fileinfo:
        Fixed bug #79756 (finfo_file crash (FILEINFO_MIME)).
    FTP:
        Fixed bug #55857 (ftp_size on large files).
    Mbstring:
        Fixed bug #79787 (mb_strimwidth does not trim string).
    Phar:
        Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile function). (CVE-2020-7068)
    Reflection:
        Fixed bug #79487 (::getStaticProperties() ignores property modifications).
        Fixed bug #69804 (::getStaticPropertyValue() throws on protected props).
        Fixed bug #79820 (Use after free when type duplicated into ReflectionProperty gets resolved).
    Standard:
        Fixed bug #70362 (Can't copy() large 'data://' with open_basedir).
        Fixed bug #78008 (dns_check_record() always return true on Alpine).
        Fixed bug #79839 (array_walk() does not respect property types).

Sponsored by:	Bounce Experts

Approved by:	ports-secteam (joneum, implicit for PHP Updates)
2020-08-19 22:02:34 +00:00
Torsten Zuehlsdorff
3e22221a37 MFH: r545455
lang/php73: Update from 7.3.20 to 7.3.21

Changelog:

    Apache:
        Fixed bug #79030 (Upgrade apache2handler's php_apache_sapi_get_request_time to return usec).
    Core:
        Fixed bug #79877 (getimagesize function silently truncates after a null byte).
        Fixed bug #79778 (Assertion failure if dumping closure with unresolved static variable).
        Fixed bug #79792 (HT iterators not removed if empty array is destroyed).
    COM:
        Fixed bug #63208 (BSTR to PHP string conversion not binary safe).
        Fixed bug #63527 (DCOM does not work with Username, Password parameter).
    Curl:
        Fixed bug #79741 (curl_setopt CURLOPT_POSTFIELDS asserts on object with declared properties).
    Fileinfo:
        Fixed bug #79756 (finfo_file crash (FILEINFO_MIME)).
    FTP:
        Fixed bug #55857 (ftp_size on large files).
    Mbstring:
        Fixed bug #79787 (mb_strimwidth does not trim string).
    Phar:
        Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile function). (CVE-2020-7068)
    Standard:
        Fixed bug #70362 (Can't copy() large 'data://' with open_basedir).
        Fixed bug #79817 (str_replace() does not handle INDIRECT elements).
        Fixed bug #78008 (dns_check_record() always return true on Alpine).

Sponsored by:	Bounce Experts

Approved by:	ports-secteam (joneum, implicit for PHP Updates)
2020-08-19 22:01:00 +00:00
Torsten Zuehlsdorff
9b2de6de80 MFH: r545454
lang/php72: Update from 7.2.22 to 7.2.23

Changelog:

    Core:
        Fixed bug #79877 (getimagesize function silently truncates after a null byte) (cmb)
    Phar:
        Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile function). (CVE-2020-7068)

Sponsored by:	Bounce Experts

Approved by:	ports-secteam (joneum, implicit for PHP Updates)
2020-08-19 21:58:59 +00:00
Joseph Mingrone
4ee9ed7b55 MFH: r545266 r545308
www/chromium: Update to version 84.0.4147.135

Upstream changes:
https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_18.html

Approved by:	cem
Differential Revision:	https://reviews.freebsd.org/D26117

www/chromium: unbreak with libglvnd

[188/188] LINK gn
ERROR at //build/config/linux/pkg_config.gni:103:17: Script returned non-zero exit code.
    pkgresult = exec_script(pkg_config_script, args, "value")
                ^----------
Package gbm was not found in the pkg-config search path.
Perhaps you should add the directory containing `gbm.pc'
to the PKG_CONFIG_PATH environment variable
Package 'gbm', required by 'virtual:world', not found
Could not run pkg-config.

See //third_party/minigbm/BUILD.gn:122:3: whence it was called.
  pkg_config("libgbm") {
  ^---------------------
See //ui/gfx/linux/BUILD.gn:41:5: which caused the file to be included.
    "//third_party/minigbm",
    ^----------------------

Approved by:	ports-secteam (blanket: security and build fix)
2020-08-19 18:18:09 +00:00
Piotr Kubaj
e844fa2df2 MFH: r545336
lang/racket: fix build on non-x86

Even without JIT option available, FUTURES is enabled by default, breaking build. Make FUTURES also x86-only.

Approved by:	portmgr (fix build blanket)
2020-08-19 15:35:29 +00:00
Piotr Kubaj
2c38c9554e MFH: r545326
audio/geonkick-lv2: fix build on GCC architectures

-lstdc++fs is necessary for gcc.

Approved by:	portmgr (fix build blanket)
2020-08-19 13:50:37 +00:00
Li-Wen Hsu
4ec222c83a MFH: r545313
math/units: Add a default option READLINE to tuggle readline support

This makes sure the readline support is tuggled in the build time and not
affected by the libreadline installed or not during build/run time.

PR:		248631
Submitted by:	ports-units@shalott.net
Approved by:	jharris@widomaker.com (maintainer)

Approved by:	portmgr (blanket: build, run, dependency fix)
2020-08-19 11:20:02 +00:00
Piotr Kubaj
49b609a5c6 MFH: r545302
deskutils/terminal-image-viewer: fix build on GCC architectures

-lstdc++fs is necessary for GCC:
/usr/local/bin/ld: tiv.cpp:(.text.startup+0x19cc): undefined reference to `std::experimental::filesystem::v1::__cxx11::directory_iterator::operator++()'

Approved by:	portmgr (fix build blanket)
2020-08-19 10:38:39 +00:00
Piotr Kubaj
93286c0b32 MFH: r545294
science/simgrid: fix build on non-aarch64, non-x86

Add libunwind to LIB_DEPENDS only on aarch64, amd64 and i386. Port builds fine without it on powerpc64

Approved by:	portmgr (fix build blanket)
2020-08-19 09:29:16 +00:00
Ganael LAPLANCHE
ad176ca4ac MFH: r545276
Fix sssd startup following libldb changes

PR:		239022
Submitted by:	patrik@hildingsson.se
Approved by:	lukas.slebodnik@intrak.sk (maintainer timeout)

Approved by:	ports-secteam (joneum)
2020-08-19 09:21:08 +00:00
Niclas Zeising
7e200874af MFH: r545235
devel/libunwind: Fix build with -fno-common

Fix the build of devel/libunwind with -fno-common (the default on FreeBSD
current after the llvm 11 update).
Add an upstream patch (pulling it from the official github mirror) to fix
the build woth -fno-common.

Approved by:	ports-secteam (joenum)
2020-08-19 08:42:48 +00:00
Niclas Zeising
e84388b685 MFH: r545265
emulators/tpm-emulator: Fix -fno-common

Fix the build with -fno-common, which is the default in llvm 11.

Approved by:	ports-secteam (joenum)
2020-08-19 08:39:53 +00:00
Niclas Zeising
24f4959a80 MFH: r545264
security/trousers: fix security issues

Fix three security issues in security/trousers:

* CVE-2020-24332
  If the tcsd daemon is started with root privileges,
  the creation of the system.data file is prone to symlink attacks

* CVE-2020-24330
  If the tcsd daemon is started with root privileges,
  it fails to drop the root gid after it is no longer needed

* CVE-2020-24331
  If the tcsd daemon is started with root privileges,
  the tss user has read and write access to the /etc/tcsd.conf file

Add patches to fix potential use-after-free
Fix build with -fno-common

Security:	e37a0a7b-e1a7-11ea-9538-0c9d925bbbc0

Approved by:	ports-secteam (joenum)
2020-08-19 08:37:56 +00:00
Niclas Zeising
9d6a279f53 MFH: r545262
x11-drivers/xf86-video-intel: Update snapshot

Update the snapshot of x11-driver/xf86-video-intel
- Fix build with -fno-common
- Fix MIT-SHM detection
- Drop SNA/UXA options in favor of xorg.conf(5)
- Add hyphen to output names for consistency with modesetting(4x)
- Add UDEV and XVMC options
- Add "make test" support
- Drop unused dependencies
- Switch to upstream versioning scheme
- Document all patches
- Simplify and deprecate _WITH_GETLINE
- Fix most style warnings

PR:		236003
Submitted by:	jbiech

Approved by:	ports-secteam (joenum)
2020-08-19 08:37:00 +00:00
Niclas Zeising
189d3fae83 MFH: r545261
x11-drivers/xf86-video-openchrome: fix -fno-common

Fix the build with -fno-common, which is the default with llvm 11.

Approved by:	ports-secteam (joenum)
2020-08-19 08:35:52 +00:00