x11-toolkits/gtk30: prefer warnings over crashes on bad behavior
devel/glib20 and x11-toolkits/gtk20 don't use --disable-debug.
Neither does gtk3 package on Debian or ArchLinux.
https://bugzilla.mozilla.org/show_bug.cgi?id=1351246#c9
$ cat >a.c
#include <gdk/gdk.h>
int main() {
gdk_get_default_root_window();
return 0;
}
$ cc a.c $(pkg-config --cflags --libs gtk+-3.0)
$ ./a.out
Segmentation fault
vs. (new behavior)
$ ./a.out
(process:40995): Gdk-CRITICAL **: gdk_screen_get_root_window: assertion 'GDK_IS_SCREEN (screen)' failed
Pointy hat to: kwm (r372768 broke consistency)
Approved by: ports-secteam blanket
net-mgmt/observium: Remove ImageMagick dependency, revert PHP 7.1 support
The ImageMagick dependency is not valid. There is a stale script called
glue.py which requires PIL and ImageMagick (convert) to function, but is
used by the software or required for normal operation.
PHP 7.1 support has been rescinded after further testing. A few edge
cases remain that only exist in this community edition release. The
problems have been fixed in the non-free codebase and will make the next
community edition cut.
Approved by: ports-secteam (with hat)
Security Update to 4.7.0
As well as being the first stable release from the 4.7 branch, this
includes fixes for PMASA-2017-8 where it can be possible to bypass a
configuration restriction forbidding password-less accounts. This
depends on the upstream PHP version -- sites using php-7 are not
vulnerable, sites using php-5.6 are.
ChangeLog: https://www.phpmyadmin.net/files/4.7.0/
Security: 68611303-149e-11e7-b9bb-6805ca0b3d42
Approved by: ports-secteam (junovitch)
databases/maria55*: reset maintainer
The maintainer was not involved in any of the last 13 releases and still
is not responding to PRs (many, many timeouts). Maintainership of this
port probably should have been reset a couple of years ago.
databases/mariadb55-client: Fix stage QA
Remove files from stage directory that aren't supposed to be packaged
to satisfy QA checks. No revump necessary.
PR: 214669
databases/mariadb55-server: Fix vulnerabilities
- Add vulnerability patch from upstream
- Improve OQGraph BROKEN message
- Take maintaintership
Security: 7c27192f-0bc3-11e7-9940-b499baebfeaf
Security: 4d2f9d09-ddb7-11e6-a9a5-b499baebfeaf
Security: CVE-2017-3313
Security: CVE-2017-3302
Approved by: ports-secteam (junovitch)
audio/oss: update to 4.2.b2017 (maintenance release)
- Add a note about origin to avoid users from Linux blaming FreeBSD
for 4Front's bugs and vice versa
- Disable SSE on amd64 to avoid kernel panic[1]
Changes: http://opensound.com/forum/viewtopic.php?f=19&t=5841
PR: 212263
Submitted by: Jakub Adler <jakubadler@gmail.com> [1]
Approved by: ports-secteam (junovitch)
Adress CVE-2017-6410 in devel/kf5-kio and x11/kdelibs4
Using a malicious PAC file, and then using exfiltration methods in the PAC
function FindProxyForURL() enables the attacker to expose full https URLs.
This is a security issue since https URLs may contain sensitive
information in the URL authentication part (user:password@host), and in the
path and the query (e.g. access tokens).
This attack can be carried out remotely (over the LAN) since proxy settings
allow ``Detect Proxy Configuration Automatically''
This setting uses WPAD to retrieve the PAC file, and an attacker who has access
to the victim's LAN can interfere with the WPAD protocols (DHCP/DNS+HTTP)
and inject his/her own malicious PAC instead of the legitimate one.
Reviewed by: mat, rakuco
Approved by: rakuco (mentor), mat (mentor)
Obtained from: https://marc.info/?l=kde-announce&m=148831226706885&w=2
Security: CVE-2017-6410
Differential Revision: https://reviews.freebsd.org/D9908
Centralize all cmake/modules/FindHUNSPELL.cmake patches in one file.
While here, note that the addition of hunspell-1.6 was done upstream too.
Approved by: ports-secteam (junovitch), rakuco (mentor)
Invoking blanket approval for a "fix that do[es] not result in a change
in contents of the resulting package.":
Chase distfile removal/relocation.
Approved by: ports-secteam (blanket)
Remove dependency of DEPRECATED mail/p5-Net-SMTP-SSL from devel/git
PR: 214335
Obtained from: git development mailing list
Sponsored by: Rubicon Communications (Netgate)
Update devel/git to 2.11.1
Sponsored by: Rubicon Communications (Netgate)
Fix devel/git PLIST when HTMLDOCS is on
Reported by: dankm on IRC
- Update devel/git to 2.12.1
- Replace git-send-email patch by a version that works [1]
PR: 214335 [1]
Submitted by: OlivierW <olivierw1+bugzilla-freebsd@hotmail.com> [1]
Sponsored by: Rubicon Communications (Netgate)
Approved by: ports-secteam (junovitch)
- update to version 5.51
- address issue with fortune [1]
- address master_sites for distribution as main site is no longer operational
- attach xorg library dependencies
- attach license
- adjust make_args for destdir support
PR: 217182 [1]
Reported by:>>>>Richard Narron <comet.berkeley@gmail.com>
Approved by: ports-secteam (with hat)
Update to new upstream release 0.68 (security fixes)
Additional minor updates on top of cy@'s patch (USE_GNOME, USE_XORG,
LDFLAGS).
ChangeLog: http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
[436321]
Add forgotten patch for Linux -> BSD portability.
[436323]
Remove leftover files.
The reference to these had been removed as of r184036 on 2007-02-03 already.
Submitted by: cy@
Security: CVE-2017-6542
Security: 9b973e97-0a99-11e7-ace7-080027ef73ec
Differential Revision: https://reviews.freebsd.org/D10023
Approved by: ports-secteam@ (junovitch@)
Fix MAKE_JOBS support.
- This port uses ax_am_jobserver [1] which uses CPU_COUNT from
ax_count_cpus [2] to force -j to match the number of CPUs in
the system rather than the amount already specified by -j to
'gmake all'. The ax_count_cpus script is broken on FreeBSD
and the ax_am_jobserver code has no current support for
FreeBSD and uses a bashism, thus this always builds with 1
CPU. Forcing ax_am_jobserver to use our MAKE_JOBS_NUMBER
value fixes the problem.
I plan to do an exp-run to fix this for the entire tree.
[1] https://www.gnu.org/software/autoconf-archive/ax_am_jobserver.html
[2] https://www.gnu.org/software/autoconf-archive/ax_count_cpus.html
Approved by: portmgr (implicit)
Add missing Qt4 xml dependency to fix build failure when TEST option is ON
Register Qt4 corelib dependency
Fix LICENSE and add LICENSE_FILE
Approved by: portmgr (blanket)
Approved by: ports-secteam (blanket)
Update to upstream version 2.2.0
Detailed log:
- New option to prefer embedded image metadata over video content (command line
argument: -m)
- Fixed 'Resource temporarily unavailable' errors when using ffmpeg < 3.0
- Restored deinterlace functionality using the libavfilter library (additional
ffmpeg dependency)
- Additional video mime types added to the thumbnailer file
- Take rotation metadata into account when generating thumbnails
PR: 216648
Submitted by: stl@ossuary.net
Approved by: ports-secteam (junovitch), clutton@zoho.com (maintainer)
Add default OPTION for READLINE so users can disable it for custom builds
PR: 213513
Reported by: rozhuk.im@gmail.com
Approved by: ports-secteam (junovitch)
- Backport several patches of OpenBSD that add more linux code for
font handling.
- Disabled WebRTC support because it does not work properly on BSD
and more patches are needed.
- Update pkg-plist
- Bump PORTREVISION
Approved by: ports-secteam (junovitch)
devel/renpy: update to 6.99.12.4
6.99.12.4.2187: February 28, 2017
This release fixes a number of bugs, including one that would
cause the renpy.input function to crash. It improves the console
(accessed with shift+O), and updates translations.
Changes: https://www.renpy.org/doc/html/changelog.html#ren-py-6-99-12-4
Approved by: ports-secteam (junovitch)
Default path includes the string %%LOCALBASE%%. This was intended to be replaced
with the real value of LOCALBASE by the port Makefile at some point, but it
isn't at the moment.
Set this value in the Makefile by defining CPPFLAGS accordingly.
PR: 217451
Submitted by: Dan McGregor <dan.mcgregor@usask.ca>
Approved by: ports-secteam (blanket)
print/hplip: Apply shebangfix to hpps and pstotiff filters
This was causing some print jobs to fail with this error in
/var/log/cups/error_log:
[Job XX] env: python: No such file or directory
[Job XX] PID XXXXX (/usr/local/libexec/cups/filter/hpps) stopped with status 127 (File too large)
Tidy up a few other items in the port Makefile whilst here.
Approved by: ports-secteam (junovitch)
Fix build without NLS, adding %%NLS%% to pkg-plist.
Broken since r433466, update to 1.43.4, which added .mo files to
pkg-plist but forgot to add the %%NLS%% prefixes.
PR: 217378
Submitted by: Andrew Romanenko
Reported by: Andrew Romanenko
Pointyhat: Matthias Andree
Approved by: ports-secteam (junovitch@)
devel/hg-git: update past 0.8.5
Update hg-git to 0.8.5 + recent commits for compatibility with current Mercurial
Attempting to use the previous version of hg-git with current hg results
in an error stating the extension only supports version 3.6 of Mercurial.
While here, add NO_ARCH and adjust python version.
PR: 212714
Submitted by: matthew@reztek.cz
Approved by: maintainer timeout (month+)
Approved by: ports-secteam (junovitch)
Update to 67
Note that all FreeBSD patches have been upstreamed and more
In particular the requirement for /dev/fd has gone
sysutils/py-diffoscope: update to version 71
sysutils/py-diffoscope: update to v77
PR: 216729
Approved by: portmgr (swills)
Security: CVE-2017-0359
Sponsored by: The FreeBSD Foundation
net-mgmt/icinga2:
- Add $PREFIX/sbin to PATH in icinga2.in to fix some API issues (icingaweb2-module-director now works!) [1]
- Remove SIGPIPE trap in icinga2.in which was fixed upstream
- Bump PORTREVISION
PR: 217266 [1]
Submitted by: Philip Jocks
Approved by: ports-secteam (junovitch)
- Update to 0.3.0.3-alpha
MFH reason is that tor-devel 0.3.0.1 gives the following warning:
"[warn] Please upgrade! This version of Tor (0.3.0.1-alpha) is not recommended, according to the directory authorities. Recommended versions are: 0.2.4.27,0.2.4.28,0.2.5.12,0.2.5.13,0.2.7.6,0.2.7.7,0.2.8.9,0.2.8.10,0.2.8.11,0.2.8.12,0.2.9.9,0.3.0.2-alpha,0.3.0.3-alpha"
PR: 216949
Submitted by: yuri@rawbw.com (maintainer)
Approved by: ports-secteam (with hat)
- Deprecate ports-mgmt/fbsdmon
From the PR:
"The web site used by this port, http://fbsdmon.org, has been taken
over by cybersquatters. That means that users are sending their
system info to an unknown party. The port has had no maintainer
for almost two years and the original maintainer (and previous owner
of the website) is not responding to email."
Since there's no way to force this port to be deinstalled from users'
machines, to stop data being sent to an unknown party, also do the
following:
- Modify the port to never send data to fbsdmon.org, bump PORTREVISION
- Mark the port IGNOREd for ports users, but allow package to be built
and set extended 6 month EXPIRATION_DATE (or should it be extended
to a year?) to give a modified package chance to replace original one
on users machines
PR: 217099
Submitted by: asomers
Approved by: ports-secteam (with hat)
security/nss: stop excessive getpid(2) calls
FreeBSD implements pthread_atfork(3) and (as required by a nearby
code comment) deregisters callbacks located in dlclose(3)ed shared
objects. Take advantage of it instead of looping with getpid(2).
Submitted by: cem
Approved by: ports-secteam (junovitch)
sysutils/py-salt: Teach the Salt master and minion startup scripts to set
pidfile=.
On a restart this will cause the rc framework to wait for the processes to
exit before trying to start, instead of failing to start because the previous
processes have not gone away yet.
PR: 217154
Approved by: Christer Edwards <christer.edwards@gmail.com> (maintainer),
bdrewery (mentor, implicit)
Approved by: ports-secteam (junovitch)
multimedia/x265: always build shared library with -fPIC
This should unbreak build on sparc64, powerpc64 and reduce text
relocations on i386.
Approved by: ports-secteam blanket
ports_env: Fix OPSYS not being exported.
This was causing excessive 'uname -s' executions during Poudriere dependency
calculations. The reasoning is due to HAVE_COMPAT_IA32_KERN having a newline
quoted at the end of it as '\ ' by bmake:
# make -f Mk/bsd.port.mk -V 'HAVE_COMPAT_IA32_KERN=${HAVE_COMPAT_IA32_KERN:Q}' | cat -v
HAVE_COMPAT_IA32_KERN=YES\
This resulted in the following being executed:
export HAVE_COMPAT_IA32_KERN="YES OPSYS=FreeBSD"
With hat: portmgr
Approved by: portmgr (implicit)
devel/renpy: update to 6.99.12.3
6.99.12.3.2123: February 12, 2017
This release fixes a number of bugs. It also adds and renames gui
variables so that every text property can be controlled by a gui
variable, and adds support for the new Ren'Py Interactive Director.
Changes: https://www.renpy.org/doc/html/changelog.html#ren-py-6-99-12-3
Approved by: ports-secteam (delphij)
- Address a possible XSS attack from commit 829d478f1 and 3891782cf
A CVE has been requested for 829d478f1
- A lot of other updates:
db92edd1...454292b2
Submitted by: dereks_lifeofadishwasher.com
Security: CVE in progress
Differential Revision: https://reviews.freebsd.org/D9550
Approved by: ports-secteam
sysutils/polkit: Fix directory permissions to allow reading config files
If the $LOCALBASE/etc/polkit-1 directory is owned by root and set 700,
then polkit which is running as the polkitd user cannot read the config
files in $LOCALBASE/etc/polkit-1/rules.d/* resulting in this error:
Loading rules from directory /usr/local/etc/polkit-1/rules.d
Error opening rules directory: Error opening directory \
'/usr/local/etc/polkit-1/rules.d': Permission denied \
(g-file-error-quark, 2)
Loading rules from directory /usr/local/share/polkit-1/rules.d
To fix this, change the $LOCALBASE/etc/polkit-1 to be set 755, and the
$LOCALBASE/etc/polkit-1/localauthority to be set 700.
This was sense checked with Fedora Linux which does the same, and with
Debian/Ubuntu which have /etc/polkit-1/localauthority as owned by
root:polkitd and set 750.
PR: 202615
Reported by: rozhuk.im@gmail.com
Approved by: ports-secteam (junovitch)
Update mail/postfixadmin to 3.0.2 (security fix)
SECURITY FIX: don't allow to delete protected aliases
(CVE-2017-5930, PR#23).
Following non-security bugs were fixed:
- Fix VacationHandler for PostgreSQL
- AliasHandler: restrict mailbox subquery to allowed and specified domains to improve performance on setups with
+lots of mailboxes
- Allow switching between dovecot: password schemes while still accepting passwords hashed using the previous dov
+ecot: scheme
- FetchmailHandler: use a valid date as default for 'date'
- Fix date formatting in non-english languages when using PostgreSQL
PR: 216932
Submitted by: lukasz@wasikowski.net
Approved by: maintainer, mat (mentor)
Differential Revision: https://reviews.freebsd.org/D9521
Approved by: ports-secteam
Update to upstream version 3.2.3; promote X265 to default OPTION
Details:
- Update to upstream version 3.2.3, bugfix release, no upstream
feature changes
- HEVC is becoming so widespread that it warrants promoting the
X265 option to default [1]
PR: 216471 [1]
Submitted by: scottro11@gmail.com [1]
Update to upstream version 3.2.4
Details:
- patch-ffserver__config.c has been upstreamed
- Fix two potential heap overflows in lavf/mov.c
Security: CVE-2017-5024
CVE-2017-5025
Approved by: ports-secteam (junovitch)
The late mount option is required for systems with a seperate boot partition
(e.g. systems with an encrypted root partition) where it is impossible for the
fdescfs module to be autoloaded when /boot/kernel isn't available yet. Change
pkg-message accordingly.
Also change 'fdesc' mount point name to 'fdescfs' to simplify things: this way
'mount fdescfs' will work just as fine as 'umount fdescfs'. The less things to
remember - the better it is.
PR: 216985
Submitted by: John Smith <godevilove@ya.ru>
Approved by: ports-secteam (blanket)
games/xtux: It has been brought to my attention that UTF-8 is acceptable,
so this commit restores the original author's name
Reported by: danfe
Approved by: portmgr (with hat)
sysutils/py-salt: Restore install arguments post r427901 to fix syspaths.py
Without PYDISTUTILS_INSTALL_TARGET setting the install arguments, salt
will be built with an invalid syspaths.py, particularly if installed
somewhere other than /usr/local.
As of 2016.11.0, the arguments caused an error, which was traced back to
https://github.com/saltstack/salt/pull/31097/files.
The removed code was deprecated, but included instructions on how to
make the arguments continue to work: simply move them earlier in the
command (ie., "python setup.py <args> install" instead of
"python setup.py install <args>").
PR: 215885
Submitted by: Erick Turnquist <jhujhiti@adjectivism.org>
Approved by: Christer Edwards (maintainer)
Approved by: ports-secteam (feld)
Update to 9.9.9-P6, 9.10.4-P6 and 9.11.0-P3.
While there, remove the RPZ_PATCH for BIND9 9.9, it has not been updated
for years, and, it does not build any more.
Security: CVE-2017-3135
Sponsored by: Absolight
shells/lshell: update to 0.9.18.20160916
- pass maintainership to submitter
- switch to github
- add NO_ARCH, update project web-page and remove unneded patch
This release fixing some vulnerabilities, that defeats the purpose
of the package entirely, so this is why MFH is requested.
PR: 215989
Submitted by: Damien Fleuriot <dam@my.gd>
Approved by: ports-secteam (feld)
Update e2fsprogs to new upstream release 1.43.4.
This is predominantly a bug-fix release, it however ceases installing
the *ext4dev files, which have been replaced by *ext4 for quite a while,
and adds two translations [fi, ms].
While here, reset PORTREVISION on two slave ports.
ChangeLog: <http://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.43.4>
Note in particular this part of the ChangeLog:
«Replace a test file but which had a "non-commercial use-only" copyright
permission file with a newer version from the Cyrus imapd package which
now has a 4-clause BSD license, which was making some lawyers nervous,
even though the test file in question was only used in lib/et's
regression testing and was never included in any compiled binary.
(Addresses Debian Bug: #840733)»
PR: 216774
Reported by: Thomas Zander (riggs@)
Approved by: ports-secteam (junovitch@)
www/firefox: attempt to unbreak aarch64 after r431737
gfx/skia/skia/src/core/SkBitmapProcState_matrixProcs.cpp:(.text._ZN17SkBitmapProcState16chooseMatrixProcEb+0xc4): undefined reference to `RepeatX_RepeatY_Procs_neon'
gfx/skia/skia/src/core/SkBitmapProcState_matrixProcs.cpp:(.text._ZN17SkBitmapProcState16chooseMatrixProcEb+0x144): undefined reference to `ClampX_ClampY_Procs_neon'
gfx/skia/skia/src/core/SkBlitter_RGB16.cpp:(.text._ZN22SkRGB16_Opaque_Blitter5blitVEiiih+0x3c): undefined reference to `SkRGB16BlitterBlitV_neon(unsigned short*, int, unsigned long, unsigned int, unsigned int)'
[...]
/usr/bin/ld: libxul.so: hidden symbol `_Z24SkRGB16BlitterBlitV_neonPtimjj' isn't defined
/usr/bin/ld: final link failed: Bad value
c++: error: linker command failed with exit code 1 (use -v to see invocation)
Reported by: pkg-fallout
Approved by: ports-secteam blanket
- Fix building with -Wp,-MT,path. Namely this fixes building
the emulators/virtualbox-ose port.
PR: 212818
Obtained from: 026ba6b9fd
Approved by: portmgr (implicit)
www/uwsgi: Further rc script security improvements
This update introduces a dedicated user for uwsgi and introduces the
uwsgi_socket_owner setting which by default is set to www:www. The
previous change to socket mode of 600 has been modified to 660 as well.
This change further increases security while restoring compatibility.
Differential Revision: https://reviews.freebsd.org/D9398
Approved by: ports-secteam (with hat)
Update to the most recent commit on GitHub which fixes many bugs:
Bugfixes:
- gbsplay:
- cpu emulation fixes:
- RLCA/RLA/RRCA/RRA did not set ZF
- fix botched SBC zero flag handling
- fix slight bug in ADC/SBC
- fix INC/DEC SP, CP A and half-carry flag in DEC
- fix PUSH/POP AF
- fix trigger handling on noise channel
- fix error on midi plugout where a write to the file could occur
before the file was opened
- fix garbled screen on exit in verbose mode (gbsplay -v)
- fix status display: respect channel in left/right total volume
- fix impulse generator: generate a header file at compile-time
Enhancements:
- gbsplay:
- more accurate sound:
- calculate LFSR correctly
- play first nibble on DAC-channel from fresh buffer
- correct noise channel speed
- use more DMG-like DC-offsets
- more accurate cpu cycle accounting
- remove DC offset from DAC-channel
- show register contents in verbose mode (gbsplay -v)
- add basic GBR file support
- support ugetab int vector extension (gbs spec 1.04u)
- add 'iodumper' plugout for testing
- add support for blargg-gb-tests debug output
Approved by: ports-secteam blanket
multimedia/vdr-plugin-epgsearch: unbreak with clang 4.0
createcats.c:67:42: error: ordered comparison between pointer and zero ('char *' and 'int')
if (fgets(buffer, sizeof(buffer), f) > 0) {
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ ~
epgsearchext.c:1506:50: error: ordered comparison between pointer and zero ('char *' and 'int')
while (fgets(buffer, sizeof(buffer), f) > 0) {
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ ~
c++: warning: treating 'c' input as 'c++' when in C++ mode, this behavior is deprecated [-Wdeprecated]
PR: 216217
Reported by: antoine (via exp-run)
Approved by: ports-secteam blanket
graphics/svgalib: unbreak with clang 4.0
In file included from gl/grlib.c:7:
gl/inlstring.h:71:9: error: asm-specifier for input or output variable conflicts with asm clobber list
: "cx", "di");
^
gl/inlstring.h:281:17: error: asm-specifier for input or output variable conflicts with asm clobber list
:"ax", "0", "1", "2");
^
gl/inlstring.h:297:17: error: asm-specifier for input or output variable conflicts with asm clobber list
:"ax", "0", "1", "2");
^
gl/inlstring.h:314:17: error: asm-specifier for input or output variable conflicts with asm clobber list
:"ax", "0", "1", "2");
^
PR: 216154
Reported by: antoine (via exp-run)
Submitted by: dim
Approved by: portmgr blanket
Approved by: ports-secteam blanket
Update to 4.4.12
Changelog:
Fixes a bug. When -N is used, the input is not supposed to be split
using $IFS, but leading and trailing IFS whitespace was still removed.
Approved by: ports-secteam (feld)
gecko: unbreak with clang/libc++ 4.0
In file included from mozilla/ipc/contentproc/plugin-container.cpp:7:
In file included from ../../dist/include/nsXPCOM.h:10:
In file included from ../../dist/include/nscore.h:20:
In file included from ../../dist/include/mozilla/mozalloc.h:16:
In file included from objdir/dist/stl_wrappers/new:44:
In file included from objdir/dist/system_wrappers/new:3:
/usr/include/c++/v1/new:132:1: error: function declared '[[noreturn]]' after its first declaration
_LIBCPP_NORETURN _LIBCPP_FUNC_VIS void __throw_bad_alloc(); // not in C++ spec
^
/usr/include/c++/v1/__config:273:30: note: expanded from macro '_LIBCPP_NORETURN'
# define _LIBCPP_NORETURN [[noreturn]]
^
../../dist/include/mozilla/throw_gcc.h:35:1: note: declaration missing '[[noreturn]]' attribute is here
__throw_bad_alloc(void)
^
PR: 216186
Submitted by: dim
Obtained from: upstream
Approved by: ports-secteam blanket
- Fix build when CC is absolute path
Upstream build scripts have some machinery to include compiler-specific
.mak file depending on compiler used. This is handled in an ugly way by the
port, roughly, upstream makefile includes ${CC}.mak and ports Makefile
copies that from default .mak. This is breaks when CC is an absolute path
and is useless anyway, as even if it was implemented properly, customized
.mak files are for compilers we'll never use such as gcc 3.2, intel and suncc.
So make upstream makefile always include the default .mak.
PR: 215253
Approved by: maintainer timeout (mi@aldan.algebra.com, 6 weeks)
Approved by: ports-secteam (with hat)
Move forward to 5.0-gtk3 release.
Changes: <http://rawtherapee.com/blog/rawtherapee-5-released>
Fix compilation on FreeBSD 11+, and enable OpenMP.
Use devel/openmp for libomp.
Code generation improvements: On i386, use SSE2 instead of only SSE [1]
when compiler optimizations are requested (which they are by default) RT
code uses mostly SSE2 for SIMD). Fix i386 SSE2 crashes with GCC(*) (use
clang there), and clean up a bit.
(*) GCC does not get the stack properly aligned in i386 for SSE2 and
causes SIGBUS on startup when trying to access an 8-byte aligned
double[8] array with SIMD instructions. One workaround is -mstackrealign
(which RT does on Win32), the other is to use clang - we don't get
OpenMP on i386 anyhow, so clang 3.4 in 10.3 is sufficient.
Drop -fexpensive-optimizations, clang does not support it, and gcc 5.4
includes it in -O2 and -O3.
Note that the upstream discourages the use of 32-bit architectures for
rawtherapee.
Approved by: ports-secteam@ (junovitch)
Update to 1.1.4: A specially-crafted Opus packet could cause an
integer wrap-around in the SILK LSF stabilization code.
Reported as CVE-2017-0381, but upstream does not believe that any
remote code execution is possible.
https://git.xiph.org/?p=opus.git;a=commit;h=70a3d641b760b3d313b6025f82aed93a4607
Requested by: jbeich
Approved by: ports-secteam (feld)
www/uwsgi: Change default socket mode to 600 for security
This change may be a disruptive for some users, but the default mode
of 777 is a disaster waiting to happen.
Approved by: ports-secteam (with hat)
databases/mariadb101-server: Update to 10.1.21
- Update to 10.1.21
- Fix patches that no longer cleanly apply
- Rename patches to new naming scheme
Security: 4d2f9d09-ddb7-11e6-a9a5-b499baebfeaf
Approved by: ports-secteam (feld)
databases/mysql56: Update to 5.6.35
- Port improvements from MySQL 5.7 port
- Use system libs instead of bundled
- Fix many open PRs
- Change MAINTAINER
PR: 216244 192657 198812 199751 205093
PR: 209618 211248 205983 209338
databases/mysql56-server: Rollback rc script changes
databases/mysql56-server: Do not install my.cnf sample
An issue was discovered where users of mysql did not have a my.cnf and
the recent update was causing mysqld to find a sample my.cnf and load
its parameters. This was causing errors on startup for users of innodb
as the parameters used to init the database did not match the ones in
the sample config file it was now reading.
databases/mysql56-server: Fix build with LibreSSL
- Fix CMake SSL detection
- Always set WITH_SSL=${OPENSSLBASE}
PR: 216311
Approved by: Mahdi Moktari <mokhi64@gmail.com> (maintainer)
Differential Revision: D9272
Revert r432035 part 2, it breaks build with openssl from base
With hat: portmgr
databases/mysql56-server: Fix OpenSSL linking
- Force dynamic linking with OpenSSL
Approved by: ports-secteam (feld)
net/rabbitmq: add full path to the daemon(8) call in rc script.
This allows the script to work in crontab, where /usr/sbin is not
in PATH.
Submitted by: Dmitriy Simakov
Approved by: ports-secteam (feld)
multimedia/x265: unbreak on aarch64[1] and mips
/usr/bin/ld: common/CMakeFiles/common.dir/common.cpp.o: relocation R_AARCH64_ADR_PREL_PG_HI21 against external symbol `__stderrp@@FBSD_1.0' can not be used when making a shared object; recompile with -fPIC
/usr/bin/ld: common/CMakeFiles/common.dir/common.cpp.o(.text+0x1e0): unresolvable R_AARCH64_ADR_PREL_PG_HI21 relocation against symbol `__stderrp@@FBSD_1.0'
/usr/bin/ld: final link failed: Bad value
/usr/bin/ld: x265: hidden symbol `__sync_fetch_and_add_4' in /usr/lib/libgcc.a(stdatomic.o) is referenced by DSO
/usr/bin/ld: final link failed: Nonrepresentable section on output
PR: 216473 [1]
Reported by: pkg-fallout
Submitted by: mikael.urankar@gmail.com [1]
Approved by: portmgr blanket
Approved by: ports-secteam blanket
print/texlive-texmf: unbreak on aarch64 on real hardware
=======================<phase: package >============================
===> Building package for texlive-texmf-20150523_3
pkg-static: Warning: @exec is deprecated, please use @[pre|post][un]exec
====>> Killing timed out build after 3600 seconds
====>> Cleaning up wrkdir
===> Cleaning for texlive-texmf-20150523_3
pkg-static: lstat(/wrkdirs/usr/ports/print/texlive-texmf/work/stage/usr/local/share/texmf-dist/fonts/type1/public/pl/plti7.pfm): No such file or directory
pkg-static: lstat(/wrkdirs/usr/ports/print/texlive-texmf/work/stage/usr/local/share/texmf-dist/fonts/type1/public/pl/plti8.pfb): No such file or directory
pkg-static: lstat(/wrkdirs/usr/ports/print/texlive-texmf/work/stage/usr/local/share/texmf-dist/fonts/type1/public/[...]
Reported by: pkg-fallout (runaway_proces)
Approved by: portmgr blanket (unblocking 172 ports)
Approved by: ports-secteam blanket
mail/pear-Mail_Queue: overloading isError static mismatch
Since devel/pear was upgraded to 1.10.1, mail/pear-Mail_Queue
was broken and could not be used, giving the following error:
PHP Fatal error: Cannot make static method PEAR::isError() non
static in class Mail_Queue in /usr/local/share/pear/Mail/Queue.php on line 126
Upstream bug report: http://pear.php.net/bugs/bug.php?id=20976
PR: 215325
Submitted by: ml@netfence.it
Reported by: ml@netfence.it
Approved by: Jochen Neumeister (maintainer), rakuco (mentor)
Approved by: ports-secteam (feld), rakuco (mentor)
Fix graphics/py-poppler-qt4: fails to build with clang 4.0
PyList_SET_ITEM() is supposed to be void, but as a macro it's an
expression and has a pointer value. Clang 4.0 trips on the bogus
pointer comparison; given the comparison, it should be PyList_SetItem()
which returns -1 on failure.
PR: 216228
Approved by: portmgr blanket, rakuco (mentor)
Approved by: ports-secteam (junovitch), rakuco (mentor)
security/libgcrypt: update to 1.7.6
Noteworthy changes in version 1.7.6
* Bug fixes:
- Fix AES CTR self-check detected failure in the SSSE3 based
implementation.
- Remove gratuitous select before the getrandom syscall.
PR: 216305
Exp-run by: antoine
Approved by: ports-secteam (feld)
- Relax dependency version requirement for pyflakes, fixing the runtime failure:
The 'pyflakes<1.1,>=0.8.1' distribution was not found and is required by flake8
- Update WWW
PR: 213960
Submitted by: pete@nomadlogic.org
Approved by: maintainer timeout (wg, 5 weeks)
Approved by: ports-secteam (with hat)
Update to 4.4.11
Changelog:
Under certain circumstances, bash will evaluate arithmetic expressions as
part of reading an expression token even when evaluation is suppressed. This
happens while evaluating a conditional expression and skipping over the
failed branch of the expression.
There is a race condition in add_history() that can be triggered by a fatal
signal arriving between the time the history length is updated and the time
the history list update is completed. A later attempt to reference an
invalid history entry can cause a crash.
Depending on compiler optimizations and behavior, the `read' builtin may not
save partial input when a timeout occurs.
Subshells begun to run command and process substitutions may attempt to
set the terminal's process group to an incorrect value if they receive
a fatal signal. This depends on the behavior of the process that starts
the shell.
Approved by: ports-secteam (junovitch)
Update to 4.4.7
Changelog:
- Out-of-range negative offsets to popd can cause the shell to crash attempting
to free an invalid memory block.
- When performing filename completion, bash dequotes the directory name being
completed, which can result in match failures and potential unwanted
expansion.
Approved by: ports-secteam (junovitch)
Update to 0.9.11
This includes a security fix for CVE-2016-9941 and CVE-2016-9942
* Drop files/patch-libvncclient_h264.c -- upstream has dropped h264 support
* Switch from USE_OPENSSL to USES+=ssl
* PORTREVISION bump in ports that link against libvncserver.so (with
their default OPTIONS settings) due to change in ABI version of
libvncserver.so
PR: 215802
Submitted by: vlad-fbsd@acheronmedia.com
Security: 64be967a-d379-11e6-a071-001e67f15f5a
Bump PORTREVISION chasing ABI version increment in libvncserver --
this port was missed from r432083, and this change should be MFH'd as
well.
Approved by: ports-secteam (junovitch)
science/openbabel: unbreak with GCC >= 6
GCC defaults to C++14 since 6.0 which no longer converts istream to
bool by default. Instead of fixing just downgrade to C++98.
PR: 216036
Approved by: ports-secteam blanket
Fix py-pykde4 against newest clang
PyList_SET_ITEM() is supposed to be void, but as a macro it's an
expression and has a pointer value. Clang 4.0 trips on the bogus
pointer comparison; given the comparison, it should be PyList_SetItem()
which returns -1 on failure.
As the produced code may be changed by this, bump PORTREVISION.
PR: 216253
Submitted by: Adriaan de Groot <groot@kde.org>
Reported by: jbeich
Reviewed by: rakuco, tcberner
Approved by: rakuco (mentor)
Differential Revision: https://reviews.freebsd.org/D9253
PR: 216253
Approved by: ports-secteam (junovitch), rakuco (mentor)
net-im/folks: ignore warnings in system headers
Pass -isystem to avoid adding -Wno-foo each time Clang bumps into an
issue with a header from another port.
PR: 216031
Approved by: ports-secteam blanket
www/webkit2-gtk3: attempt to unbreak on aarch64
./Source/JavaScriptCore/assembler/ARM64Assembler.h:2760:2: error: "The cacheFlush support is missing on this platform."
#error "The cacheFlush support is missing on this platform."
^
./Source/JavaScriptCore/assembler/MacroAssemblerARM64.h:133:17: error: class member cannot be redeclared
static bool shouldBlindForSpecificArch(uintptr_t value) { return value >= 0x00ffffff; }
^
./Source/JavaScriptCore/assembler/MacroAssemblerARM64.h:132:17: note: previous declaration is here
static bool shouldBlindForSpecificArch(uint64_t value) { return value >= 0x00ffffff; }
^
Reported by: pkg-fallout
Approved by: ports-secteam blanket
Add a dependency on misc/py-tqdm.
The dependency on tqdm was introduced in 0.7.7 but was not mentioned in the
release announcement.
PR: 216306
Approved by: ports-secteam (blanket approval)
Add "dual dhclient" script, which can be specified as dhclient_program in
rc.conf in order to launch the base system dhclient for IPv4 and the ISC
dhcp client for IPv6.
I'm not sure if this will be useful to anyone else, but adding this trivial
port will simplify the configuration of IPv6 on Amazon EC2 instances. I
hope this port becomes redundant in the future due to the base system
gaining support for IPv6 DHCP.
Approved by: portmgr (mat)
Add a patch to avoid providing our own implementation of __rtdsc
when built with clang version 4 or higher (which has its own).
PR: 216162
Approved by: ports-secteam blanket
comms/telldus-core: unbreak with clang 4.0
service/SettingsConfuse.cpp:47:13: error: ordered comparison between pointer and zero ('cfg_t *' and 'int')
if (d->cfg > 0) {
~~~~~~ ^ ~
service/SettingsConfuse.cpp:50:17: error: ordered comparison between pointer and zero ('cfg_t *' and 'int')
if (d->var_cfg > 0) {
~~~~~~~~~~ ^ ~
service/SettingsConfuse.cpp:61:13: error: ordered comparison between pointer and zero ('cfg_t *' and 'int')
if (d->cfg > 0) {
~~~~~~ ^ ~
service/SettingsConfuse.cpp:73:13: error: ordered comparison between pointer and zero ('cfg_t *' and 'int')
if (d->cfg > 0) {
~~~~~~ ^ ~
PR: 216052
Submitted by: Johan Ström (maintainer)
Approved by: ports-secteam blanket
lang/spidermonkey24: prefer pre-C++11 decltype from libc++
libc++ 4.0 started to use it within <string> in a way incompatible
with __typeof__ which broke build but upstream switched to C++11 long
ago to notice -Wmacro-redefined.
PR: 216010
Approved by: ports-secteam (junovitch)
multimedia/libvpx: unbreak SHARED=off after r394231
/usr/bin/strip: '.../stage/usr/local/lib/libvpx.so.*.*.*': No such file
Approved by: ports-secteam blanket
- Minor fix in OSVERSION check. The last comparison should be "< 1200000"
Reported by: Tomoaki AOKI <junchoon@dec.sakura.ne.jp>
Approved by: ports-secteam (blanket)
Update 1.8.19p1 --> 1.8.19p2.
Major changes between sudo 1.8.19p2 and 1.8.19p1:
* Fixed a crash in visudo introduced in sudo 1.8.9 when an IP address
or network is used in a host-based Defaults entry. Bug #766
* Added a missing check for the ignore_iolog_errors flag when
the sudoers plugin generates the I/O log file path name.
* Fixed a typo in sudo's vsyslog() replacement that resulted in
garbage being logged to syslog.
Approved by: maintainer (garga)
Approved by: portmgr (junovitch)
Differential Revision: D9181
Change ownership of rundeck/server/lib et al.
Address poudriere issues
bump PORTREVISION
MFH because to allow running out of the box, as it fails with the
directories root-owned
PR: 202732
Submitted by: Mark C Ballew (ballew sublinear net)
Differential Revision: https://reviews.freebsd.org/D9205
Approved by: ports-secteam (blanket), adamw (mentor)
Update to 1.23.1
Unbreak fetch (project moved to Github)
Take maintainership for now
PR: 214277 (based on)
Submitted by: Niclas <zappe_1337@hotmail.com>
Approved by: ports-secteam (blanket)
Fix sysutils/lsof on arm.
This fixes the case where ARM_NARCH and ARM_NMMUS are 0, since the lsof(1) sources get hacky
access to kernel structures.
PR: 216065
Submitted by: samm os2 kiev ua
Obtained from: Vic Abell (author)
Approved by: ports-secteam (blanket), adamw (mentor)
Upgrade CPU flags to use SSE2 by default on i386.
Reported by: Ingo Weyrich
Further cleanup, 11-RELEASE build fixes.
Prune unused dependencies via -Wl,--as-needed.
Build with as few requirements as works for 10.3-RELEASE and
11.0-RELEASE, i386 and amd64. This should use the base CC on anything
but 10.3-RELEASE amd64, where we use GCC 4.9 for OpenMP support.
Specifically, 11.0-RELEASE compilations do *not* work with GCC 4.9 and
the result fails with SIGBUS with apparent bogus SSE code generation and
misalignment.
Fix sound theme support via libcanberra (change Linux ifdefs to !Apple
ifdefs).
Apply -DPROC_TARGET_NUMBER="1" (i. e. build an executable with generic
tuning) only when building packages and unless -march is in CFLAGS.
USE_GNOME upgraded from gtkmm20 to gtkm24, and add devel/openmp as
requisite on amd64 (rather than implicit clang or gcc libs), bumping
PORTREVISION.
Silence cmake developer warnings, and be sure to export linker flags to
cmake (so it finds -lomp in its configuration phase)
[-DCMAKE_POLICY_DEFAULT_CMP0056:STRING=NEW]
Cleanups: leverage USES=localbase, and drop/avoid duplicate definitions
and dead code from the Makefile and support for unsupported older
FreeBSD releases.
Based in part on v0.3 patch of...
PR: 215675
Submitted by: jbeich@
Approved by: ports-secteam (junovitch@)
Don't use @dir for directories that may have filesystems mounted. It may
not be possible to change their mode and timestamp like @dir tries to do.
PR: 215769
Approved by: ports-secteam (junovitch)
Update MAINTAINER on my ports (and created by line) to my @FreeBSD.org email
Differential Revision: https://reviews.freebsd.org/D9125
mail/dovecot2-pigeonhole: lib-sieve: Fixed handling of an early explicit keep during multiscript execution.
Applies to LDA/LMTP context in general, not only when sieve_before/sieve_after are used.
Action side-effects and the message snapshot would be lost at the final stage where the implicit
keep is evaluated.
This happened because the keep action itself is not actually executed, but rather its presence
is noted to determine whether more scripts need to be executed.
So, when finally execution of the actual keep action is due, i.e. when there are no more scripts in the
sequence, it overrides the explicit keep from the last script.
This didn't take the side-effects and message snapshot into account.
Obtained from: 7724855383
Differential Revision: https://reviews.freebsd.org/D9177
Merging r431147 to pick up the maintainer change as well.
Approved by: ports-secteam (junovitch), adamw (mentor)
- Fix creation of folder from desktop context menu
- Bump PORTREVISION
While I'm here, switch to optional extra build target (when NLS option is
unset)
PR: 214207
Reported by: Marko Cupac
Approved by: ports-secteam (feld@)
mail/phpmailer: Update from 5.2.20 to 5.2.22
- SECURITY: Fix CVE-2017-5223, local file disclosure vulnerability if content
passed to msgHTML() is sourced from unfiltered user input
- Add simple contact form example
- Emoji in test content
Security: CVE-2017-5223
Approved by: ports-secteam (feld)
net-mgmt/rancid3: Port cleanup
Fix some variables in post-install, make Comware support include a
version number that matches PORTVERSION
PR: 215832
- add missing fix for rancid version
s/3.1.99/@VERSION@/
PR: 215832
net-mgmt/rancid3: Update to 3.6.2
Approved by: ports-secteam (with hat)
- Fix build on HEAD
In file included from ../../services/ui/ws/window_manager_state.cc:5:
In file included from ../../services/ui/ws/window_manager_state.h:10:
In file included from /usr/include/c++/v1/memory:599:
/usr/include/c++/v1/__config:58:2: error: "_LIBCPP_TRIVIAL_PAIR_COPY_CTOR" is no longer supported. use _LIBCPP_DEPRECATED_ABI_DISABLE_PAIR_TRIVIAL_COPY_CTOR instead
#error "_LIBCPP_TRIVIAL_PAIR_COPY_CTOR" is no longer supported. \
^
1 error generated.
PR: 214654
Submitted by: dim
Reported by: jbeich
Reviewed by: rene
Approved by: chromium (rene)
Approved by: ports-secteam (feld)
news/nzbget: Switch default option from GNUTLS to OPENSSL
There are a series of reports of TLS handshake failures from users of the port.
Upstream responds to this reports with "Use OpenSSL instead of GNU TLS".
Therefore the maintainer decided to switch the default option to OPENSSL.
PR: 215788
Submitted by: Toxic (maintainer)
Approved by: ports-secteam (junovitch)
gecko: attempt to unbreak aarch64
../../xpcom/reflect/xptcall/xptcall.o:(.data.rel.ro._ZTV14nsXPTCStubBase+0x28): undefined reference to `nsXPTCStubBase::Stub3()'
../../xpcom/reflect/xptcall/xptcall.o:(.data.rel.ro._ZTV14nsXPTCStubBase+0x30): undefined reference to `nsXPTCStubBase::Stub4()'
[...]
../../xpcom/build/Unified_cpp_xpcom_build0.o:(.data.rel.ro._ZL16kFrozenFunctions+0x180): undefined reference to `NS_InvokeByIndex'
../../js/xpconnect/src/Unified_cpp_js_xpconnect_src1.o: In function `XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)':
obj-aarch64-unknown-freebsd11.0/js/xpconnect/src/Unified_cpp_js_xpconnect_src1.cpp:(.text._ZN16XPCWrappedNative10CallMethodER14XPCCallContextNS_8CallModeE+0xd24): undefined reference to `NS_InvokeByIndex'
../../dom/xslt/xpath/Unified_cpp_dom_xslt_xpath2.o: In function `txXPCOMExtensionFunctionCall::evaluate(txIEvalContext*, txAExprResult**)':
obj-aarch64-unknown-freebsd11.0/dom/xslt/xpath/Unified_cpp_dom_xslt_xpath2.cpp:(.text._ZN28txXPCOMExtensionFunctionCall8evaluateEP14txIEvalContextPP13txAExprResult+0xa5c): undefined reference to `NS_InvokeByIndex'
/usr/bin/ld: libxul.so: hidden symbol `_ZN14nsXPTCStubBase7Stub234Ev' isn't defined
/usr/bin/ld: final link failed: Bad value
Reported by: pkg-fallout
Approved by: ports-secteam blanket
Remove WANT_OPENLDAP_SASL from a few ports as it prevents users from easily
installing a desktop environment and samba.
WANT_OPENLDAP_SASL must not be used in invidual ports Makefiles.
Note: there is a wip to rewrite the handling of openldap in ports
With hat: portmgr
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D9083
www/rubygem-jekyll: Fix RUN_DEPENDS
- Does not work with the latest liquid release so depend on
textproc/rubygem-liquid3
- Does not work with the latest rouge release so depend on
textproc/rubygem-rouge1
PR: 213500
Reported by: freebsdbug@patpro.net
Reviewed by: mat
Approved by: mat
Differential Revision: https://reviews.freebsd.org/D8978
Approved by: ports-secteam (with hat)
- Update to 0.5.3.20170102.
- Switch to code maintained by the Debian Project.
- This version fixes multiple vulnerabilities.
- Add LICENSE.
- Add NLS option.
- Change default Japanese character encoding to UTF-8.
PR: 215822
Reported by: Daniel <d.stoye@cms.hu-berlin.de>
Security: http://www.vuxml.org/freebsd/eafa3aec-211b-4dd4-9b8a-a664a3f0917a.html
Approved by: ports-secteam (with hat)
irc/quassel: Fix erroneously empty value for PLIST variable
This was causing the build of slave port irc/quassel-core to hang during
the ports build step which generates temporary packing list, as the sed
command to perform PLIST_SUB did not have a filename argument provided.
Reported by: Steve Hay <hay.steve@gmail.com>
Approved by: ports-secteam (junovitch)
devel/nasm: unbreak with clang 4.0
checking for strspn... no
configure: error: NASM requires ANSI C (specifically, "strspn")
[...]
conftest.c:56:13: error: this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
char strspn ();
^
void
Regressed by: https://github.com/llvm-mirror/clang/commit/162749f9c543
Approved by: portmgr blanket
Approved by: ports-secteam blanket
Update to 1.54.1
Unbreak fetch (project moved to Github)
Clean up and fix some broken dependencies
Regenerate patches with 'make makepatch'
Use standard options descriptions when possible
PR: 213692 (based on)
Submitted by: <timon@timon.net.nz>
Approved by: maintainer timeout
Approved by: ports-secteam (blanket)
emulators/snes9x: unbreak with libc++ 3.9
unix/unix.cpp:1451:9: error: cannot initialize a variable of type 'char *' with an rvalue of type
'const char *'
char *slash = strrchr(path, SLASH_CHAR);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~
unix/unix.cpp:1452:9: error: cannot initialize a variable of type 'char *' with an rvalue of type
'const char *'
char *dot = strrchr(path, '.');
^ ~~~~~~~~~~~~~~~~~~
PR: 212343
Regressed by: https://github.com/llvm-mirror/libcxx/commit/b4aa97130b8b
- update to 3.1.4
Changelog:
20161105
Bugfix (introduced: Postfix 1.1): the postsuper command did not count a
successful rename operation after error recovery.
20161204
Bugfix (introduced: Postfix 3.1): cut-and-paste error in the "postfix
tls deploy-server-cert" command, causing the wrong certfile and keyfile
to be used.
Robustness: create a new keyfile when "postfix tls new-server-cert" is
invoked and main.cf specifies a non-existent keyfile.
20161206
Bugfix (introduced: Postfix 3.0): when receiving a MAIL FROM...SMTPUTF8
command while smtpd_delay_reject=no, enable SMTPUTF8 support before
processing smtpd_sender_restrictions.
20161220
Bugfix (introduced: Postfix 2.1.0): the Postfix SMTP daemon did not query
sender_canonical_maps when rejecting unknown senders with
"smtpd_reject_unlisted_recipient = yes" or with reject_unlisted_sender.
Approved by: ports-secteam (junovitch@)
Update to upstream version 1.2.10; update maintainer mail address
Detailed log:
- Update to upstream 1.2.10; this includes an important runtime fix
in gzwrite.c that produced corrupt gzip files
- New maintainer email address: lbartoletti@tuxfamily.org
While on it:
- Pet portlint
PR: 215782
Submitted by: lbartoletti@tuxfamily.org (maintainer)
Approved by: ports-secteam (junovitch)
Unbundle libass from mplayer / mencoder
Log:
- Use libass from ports instead of bundled version (this likely
addresses some vulnerabilities since bundled libass is from 2013)
- New default OPTION ASS
- Bump portrevision
Reported by: jbeich
Approved by: ports-secteam (junovitch)
databases/php70-interbase: Allow creation of multiple connections to Interbase
Currently the first connection to the database is closed
when a second one is opened. This bug was already reported to upstream:
https://bugs.php.net/bug.php?id=72175
Reported by: Marc Muncke <m.muncke@computer1020.at>
Reviewed by: Marc Muncke <m.muncke@computer1020.at>
Approved by: ports-secteam (junovitch)
www/typo3: Update from 7.6.14 to 7.6.15
Changelog: https://wiki.typo3.org/TYPO3_CMS_7.6.15
This fixes also a security issue with the mailtransport.
PR: 215756
Submitted by: Jochen Neumeister <joneum@bsdproject.de>
Reviewed by: freebsd-ports@charlieroot.de (maintainer)
Approved by: ports-secteam (junovitch)
www/typo3: Update from 6.2.29 to 6.2.30
Changelog: https://wiki.typo3.org/TYPO3_CMS_6.2.30
This fixes also a security issue with the mailtransport.
PR: 215756
Submitted by: Jochen Neumeister <joneum@bsdproject.de>
Reviewed by: freebsd-ports@charlieroot.de (maintainer)
Approved by: ports-secteam (junovitch)
MFH: r430420 r430422 r430423 r430426
textproc/rubygem-rails-dom-testing1: create port
Create port for 1.x version of rubygem-rails-dom-testing for the ports that
still need the older version.
devel/rubygem-actionview: switch to rubygem-rails-dom-testing 1.x dep
mail/rubygem-actionmailer4: switch to rubygem-rails-dom-testing 1.x dep
www/rubygem-actionpack4: switch to rubygem-rails-dom-testing 1.x dep
MFH: r430385 r430386 r430387 r430391 r430392 r430394 r430395 r430396 r430397 r430400 r430401 r430402 r430403 r430415 r430416 r430418
devel/rubygem-json1: create port
create port for 1.x version of rubygem-json for use by other ports that need to
depend on the older version of json
databases/rubygem-dm-serializer: switch to json 1.x dep
databases/ruby-dm-types: switch to json 1.x dep
devel/rubygem-activesupport4: switch to json 1.x dep
devel/rubygem-aws-sdk-v1: switch to json 1.x dep
devel/rubygem-rdoc3: switch to json 1.x dep
devel/rubygem-rubytree: switch to json 1.x dep
devel/rubygem-sdoc: switch to json 1.x dep
irc/rubygem-cogbot: switch to json 1.x dep
net-im/rubygem-termtter: switch to json 1.x dep
net-im/rubygem-tinder: switch to json 1.x dep
net/rubygem-amqp-utils: switch to json 1.x dep
net/rubygem-omniauth-twitter: switch to json 1.x dep
net/rubygem-qiniu: switch to json 1.x dep
net/rubygem-twitter: switch to json 1.x dep
devel/rubygem-json1: add portscout limit
net-mgmt/rancid3: Update to 3.6.1
Also clarify in pkg-message that hourly periodic script won't work
unless you tell crontab that periodic hourly jobs exist
Approved by: ports-secteam (with hat)
Fix plugin configurations.
Munin seems to read all the files in its .d directory, so the .sample is
always read after the actual .conf, and overwrites its defaults.
Which is, obviously, a bad thing.
Sponsored by: Absolight
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
