Revert two commits that we're supposed to be MFH'd to the 2015Q4 branch, but
instead because pointyhat, ended up in 2014Q4.
Identified by: kwm
Approved by: portmgr (bapt)
net/turnserver: Fix build with No-SSLv3
turnserver will not build if OpenSSL was built without SSLv3
(--no-ssl3).
LibreSSL 2.3.0 has removed SSLv3 support completely.
This change fixes the build when SSLv3 is not available
While I'm here, add LICENSE_FILE
PR: 203700
Submitted by: cpbsdmail gmail com
Approved by: mom040267 gmail com (maintainer)
Approved by: portmgr (erwin)
- Update to 11.14.2
- Update home page in pkg-descr [1]
Security: 94268da0-8118-11e4-a180-001999f8d30b
Reported by: Hans Potter Selasky <hps at selasky.org> [1]
Approved by: ports-secteam (delphij)
Upgrade to 1.4.0 and fix core dumps with clang
- Fix Savannah bug #33633 (coredump in prs -d:GB:)
- Accept entirely empty comment lines (lacking the initial space).
- Fix Savannah bug bug #33153: "prs" includes "AUTO NULL DELTA"s.
- NEWS: Point out the change of tar file format used for the
distribution file. Also mention the recent updates to googletest
and gnulib.
- Fix crash when built with clang by forcing gcc
- Moves license to makes portlint happy
PR: ports/189975
Submitted by: rodrigo
Approved by: portmgr
r374144:
Rename bs and fish to avoid conflicts with games/bs and shells/fish.
While here, get on board with @dir.
r374594:
Fix a bounds-checking typo in trek. The number of sectors was being used
to check input for the quadrant, and NSECTS > NQUADS.
r374674:
Since r367027, the setgid games have been installed as setgid root
instead of setgid root. The port redefines BINGRP when necessary,
but since BINGRP was being passed in MAKE_ARGS, it overrode those
redefinitions. Passing BINGRP in MAKE_ENV instead should allow
uidfix to still work, while making sure that the games are installed
with the correct group.
r374681:
Revert the contents of r374674, as it broke packaging as a regular
user. Instead, set the group and mode manually in the plist.
Approved by: portmgr (antoine)
- Re-add PKGNAMEPREFIX for www/linux-f10-flashplugin11
- Honor LINUXBASE in pkg-plist
- Reduce diff between linux-c6-flashplugin11 and linux-f10-flashplugin11
- Update to 11.2r202.418
- Update to 11.2r202.425
Approved by: ports-secteam (delphij)
Fix multiple xserver security advisories in the 1.12.4 xserver.
The patches where not ported to 1.7.7 so mark it forbidden. This version
is not default anymore and will be removed in the 1.14 update that currently
being tested.
Obtained from: xserver upstream
Security: 27b9b2f0-8081-11e4-b4ca-bcaec565249c
Approved by: portmgr (bapt)
- Update Thunderbird to 31.3.0
- Update gmp-api to 35.0
- Update openh264 to 1.2
- Update NSS to 3.17.3
- Update Firefox to 34.0.5
- Update Firefox ESR 31.3.0
- Update libxul to 31.3.0
- Improve CONFIGURE_TARGET handling
- Always build using client.mk
- Switch to clang by default on systems without libc++
(/stable/8 and /stable/9)
- Drop lang/python2 dependency, only lang/python27 is required
to build
- Use DuckDuckGo searchplugin from upstream (has suggestions
and purposes)
- Backport a few about:memory fixes
- Backport Web Notifications libnotify integration
- Add GTK3 option for www/firefox. Adwaita is a bit broken
since Gtk 3.14, see:
https://bugzilla.mozilla.org/show_bug.cgi?id=1073117
PR: 195559
Submitted by: Jan Beich
Security: http://vuxml.org/freebsd/7ae61870-9dd2-4884-a2f2-f19bb5784d09.html
Approved by: portmgr (bapt)
OpenH264 is a codec library which supports H.264 encoding and decoding.
It is suitable for use in real time applications such as WebRTC.
WWW: http://www.openh264.org/
PR: 194356
Submitted by: Jan Beich
Approved by: portmgr (bapt)
Add local patch to fix the build on FreeBSD 8.
FreeBSD 8 does not have support for the TCP_KEEPIDLE, TCP_KEEPINTVL and
TCP_KEEPCNT options (the values are always hardcoded). We can fix it by only
calling setsockopt(2) with those options if they are defined.
At least for now, I have decided not to upstream this change because it
basically affects only FreeBSD 8 these days (the other BSDs, Linux and OS X
have had support for those options for many years).
Approved by: ports-secteam (delphij)
- Clarify LICENSE
- Add LICENSE_FILE
- Fix UB caused by absent return statements which leads to crashes on 10.0+
- Drop @dirrm* from plist
Approved by: ports-secteam (rea)
- Fix binary referencing STAGEDIR
- Clarify LICENSE
- Add LICENSE_FILE
- Remove useless pkg-message
- Change huge REINPLACE to more maintainable patch
- Use BSD_INSTALL_* for correct perms and stripping
- Use @sample for highscore and set binary permissions in plist
- Drop @dirrm* from plist
Approved by: ports-secteam (rea)
Update Perforce related ports to 2014.2/962050.
Fix typo in fallback URI on a couple of the ports.
Differential Revision: https://reviews.freebsd.org/D1229
Approved by: mat (mentor), erwin (mentor)
Approved by: portmgr (rea)
- Fix an incorrect usage of stagedir. The program was looking for its files in
stagedir.
PR: 195109
Reported by: Nils M. Holm <bsdbugs@t3x.org>
Tested by: Nils M. Holm <bsdbugs@t3x.org>
Approved by: portmgr (rea)
www/chromium:
- fix crash on startup on systems which do not have libexecinfo in base
(typically 8.X and 9.X)
- conditionally bump PORTREVISION
PR: ports/193610
Submitted by: Rob Belics
Patch by: Tomek
Approved by: ports-secteam (rea)
Add patches for a couple of issues I found while researching #190055:
- Use GID_MAX instead of LONG_MAX, they are not the same on 64-bit.
- Correctly restore the egid after reading the krb5 credential cache.
Approved by: ports-secteam (rea)
irc/konversation-kde4:
- Update to 1.5.1. This release addresses several minor bugs and a low-risk
DoS security defect in the Blowfish ECB support [1].
[1] https://www.kde.org/info/security/advisory-20141104-1.txt
Approved by: ports-secteam (rea)
Update to 0.6.3 to fix CVE-2014-0017.
While here, get rid of a lot of cruft:
- Use an https in MASTER_SITES and stop using a snapshot URL for the
tarballs.
- Switch to an out-of-source CMake build with USES=cmake:outsource, and get
rid of all the messing around with CMAKE_SOURCE_PATH and *_WRKSRC.
- Move the LICENSE block to the right place to pet portlint.
- Explicitly set CMAKE_ARGS with some options which we were already
implicitly assuming to be set.
- Disable examples and tests via CMAKE_ARGS instead of using an ugly sed
call.
- Do not pass WITH_OPENSSL=ON/OFF to CMake, this has no effect in the build
system.
- Stop gratuitously including bsd.port.options.mk.
- Remove sed calls and patches related to the libssh_threads. I fixed some
of the problems a few releases ago upstream, and the things I've removed
now just look unnecessary.
PR: 187595
Approved by: fluffy (implicit, and 230 days of timeout)
Security: f8c88d50-5fb3-11e4-81bd-5453ed2e2b49
Approved by: ports-secteam (ray)
www/chromium
- Update to 38.0.2125.104 (bugfix release)
- Drop patch which should be fixed in general by
0845050678%5E%21/#F0
Approved by: portmgr (erwin)
patch-parser.c:
Replace allready applied patch with new patch from upstream to unbreak the
xmlcatalog command.
patch-uri.c:
Revert uri.c commit that causes the document chain to fail.
Reported by: antoine@
Tested by: bapt@
Approved by: portmgr (bapt@)
devel/matreshka: Fix build on i386 platforms
The author of matreshka informed me that GPRBuild 2014 has a bug in
it that suppresses flags like -msse2 and -march. It's been fixed in the
Pro version, but not the GPL version. He worked around the bug instead,
and this commit brings in the essential part of that workaround. The
GPRBuild bug prevented Matreshka from building on i386 on all releases
and all platforms.
While here, remove @dirrm from pkg-plist, strip the installed libraries,
convert to USES=pgsql and tighten the makefile up a bit.
Approved by: portmgr
- Update Firefox to 33.0
- Update Firefox ESR to 31.2.0
- Update NSS to 3.17.2
- Update Thunderbird to 31.2.0
- Update libxul to 31.2.0 (and mark as BROKEN)
- Disable SSL 3.0 with pref (Upstream bug 1076983)
- (workaround) replace USE_GCC=yes with USES=compiler:gcc-c++11-lib in
order to fix runtime for PGO and powerpc/powerpc64 on libc++ systems
- Add OSS audio fallback for HTML5 audio from upstream bug;
not exposed yet because WebRTC still needs ALSA or PulseAudio
- Kill @dirrm from gecko@ ports per CHANGES from 20140922
- Drop workaround for LLVM PR 19007: base and lang/clang34 have the fix
- Improve workaround comment for LLVM PR 15840, partially rejecting
r348851 by marino@ until bug 193555
PR: 194356
Submitted by: Jan Beich
Security: http://www.vuxml.org/freebsd/9c1495ac-8d8c-4789-a0f3-8ca6b476619c.html
- Mark OVERWRITE_BASE and security/openssh-portable-base as DEPRECATED.
These will be removed on January 1 2015.
Really ports should not be touching the base system at all.
This option is a big foot-shoot problem:
1. Recent versions of FreeBSD such as 9.3, 10.0, 10.1+, now remove all ssh
files from /usr if you 'make delete-old' with WITHOUT_SSH. This results in
removing the overwrite base files.
2. Uninstalling the package leaves the system with no ssh.
3. Running installworld without WITHOUT_SSH results in overwriting the
package, or giving false-positive 'pkg check -s' errors.
4. The port fails to pass QA checks because it removes system files.
- Update to 2.4.13
- Update plist for pkg-1.3
- Remove pkg-message as ALT_PKGDEP has not worked properly since 2008.
See https://github.com/freebsd/portupgrade/issues/61
Changes:
* portinstall/upgrade -P[P] now supported with pkgng
* pkg_fetch now supports pkgng
* Fixed pkg-1.3 delete support to not recurse
* Fixed portupgrade -b support with pkgng
* Improved portsclean performance with pkgng (#59)
* Use service(8) for rc script restarting
* Show command executions with PORTUPGRADE_DEBUG in environment
* Deprecate rc script handling in lieu of pkg's HANDLE_RC_SCRIPTS in pkg.conf
- Update to checkin 2161660, which matches 2.4.13
- Update @dir usage
Changes:
* portinstall/upgrade -P[P] now supported with pkgng
* pkg_fetch now supports pkgng
* Fixed pkg-1.3 delete support to not recurse
* Fixed portupgrade -b support with pkgng
* Improved portsclean performance with pkgng (#59)
* Use service(8) for rc script restarting
* Show command executions with PORTUPGRADE_DEBUG in environment
* Deprecate rc script handling in lieu of pkg's HANDLE_RC_SCRIPTS in pkg.conf
- Switch LocationforecastLTS to the new API (1.2), previous one is no longer
available
- Drop @dirm* in pkg-plist
- Bump PORTREVISION
Obtained from: Upstream repository ('trunk' branch)
Approved by: portmgr (erwin@)
- Fix build problem (plist generation) with export_xvid.so symlink
- Make port ready for ffmpeg 2.4 and later
- Pet portlint
- Bump PORTREVISION
- Resolve merge conflicts by getting port on par with head
PR: 194161
Submitted by: cyberbotx@cyberbotx.com (maintainer)
Approved by: portmgr(erwin)
- Update slib and slib-guile to 3b4
- Fix build for lang/slib with new texinfo [1]
- Convert slib-guile @exec/@unexec directives to post install/deinstall scripts
- Add new port slib-guile2 based on slib-guile
- Remove dirrms
Approved by: ports-secteam (rea)
Nuke OpenMAP rather than try to fix it. It is ten years out of date and
clearly of no interest to anyone since nobody has complained about it in
all those years.
Approved by: portmgr (bapt)
- bump PORTREVISION
PR: 194123
Submitted by: mva
Reviewed by: eadler
MFH: r370211
- update to bugzilla 4.4.6
Summary
=======
The following security issues have been discovered in Bugzilla:
* The 'realname' parameter is not correctly filtered on user account
creation, which could lead to user data override.
* Several places were found in the Bugzilla code where cross-site
scripting attacks could be used to access sensitive information.
* Private comments can be shown to flagmail recipients who aren't in
the insider group
* Specially formatted values in a CSV search results export could be
used in spreadsheet software to attack a user's computer.
Security: CVE-2014-1572
CVE-2014-1571
CVE-2014-1571
MFH: r370268
- add CPE information
[1] additional MFH revisions: r370209, 370211
Approved by: portmgr (erwin)
Document the latest phpMyAdmin vulnerability.
- while here fix the '>' breakage in the rsyslogd entry.
Security: 3e8b7f8a-49b0-11e4-b711-6805ca0b3d42
MFH: r369772
- Document CVE-2014-7187 fixed in bash-4.3.27_1
MFH: r369780
Document CVE-2014-6277 and CVE-2014-6278 for bash.
MFH: r369783
Fix bash entries to also mark bash-static vulnerable
MFH: r369787
Document Jenkins vulnerabilities
Security: CVE-2014-3661
Security: CVE-2014-3662
Security: CVE-2014-3663
Security: CVE-2014-3664
Security: CVE-2014-3680
Security: CVE-2014-3681
Security: CVE-2014-3666
Security: CVE-2014-3667
Security: CVE-2013-2186
Security: CVE-2014-1869
Security: CVE-2014-3678
Security: CVE-2014-3679
MFH: r369790
Fix Jenkins entry to note that XSS is an issue, not as compiler
MFH: r369791
Update grammar of DoS in Jenkins entry
MFH: r369793
Update Jenkins entry 549a2771-49cc-11e4-ae2c-c80aa9043978 to be readable.
MFH: r369853
- Update the rsyslog entry to reflect the new versions
Reviewed by: bdrewery
MFH: r369859
www/rt42 < 4.2.8 is vulnerable to shellshock related exploits through
its SMIME integration.
Security: 81e2b308-4a6c-11e4-b711-6805ca0b3d42
MFH: r369863
Fix rsyslog entry for pkgname matching
MFH: r370209
- document bugzilla security issues
Approved by: portmgr (erwin)
Fix x11-toolkits/py-kivy due to cython update.
Cython changes its temporary variable handling and now fails on the file:
kivy/graphics/sahder/pyx
This has already been fixed upstream so just backport that fix.
Also, update the USE_PYTHON et al variables.
PR: 194065
Reported by: John Marino (marino@FreeBSD.org)
Obtained from: https://github.com/kivy/kivy/commit/b2bc566
- Update to patchlevel 4.3.29.
This addresses the local crash from CVE-2014-6277. Note that
the fixes applied in 4.3.25_2 (and upstream 4.3.27) already made
this non-exploitable remotely.
This makes 'bashcheck' [1] fully green now. It had a soft warning
before for CVE-2014-6277.
[1] https://github.com/hannob/bashcheck
Security update to 4.2.8
The SMIME integration has led to www/rt42 being vulnerable to
shellshock related exploits.
Also contains minor fixes to Oracle DB schema updates from 4.2.7. No
changes for other RDBMS backends.
While here:
- Drop @dirrmtry from pkg-plist (mostly) and use @dir() to set the
permissions on ${LOCALBASE}/etc/rt42/
Approved by: portmgr (erwin)
Release Notes: http://bestpractical.com/release-notes/rt/4.2.8
Security: 81e2b308-4a6c-11e4-b711-6805ca0b3d42
net/syncthing-cli: fix fetch
The archive of text.go that I had was regenerated due to a mistake on my part,
this fixes it.
PR: 194059
Reported by: marino
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
