www/firefox: unbreak OPTIMIZED_CFLAGS=off build after r450707
x86_64-unknown-freebsd/release/libgkrust.a: could not read symbols: File format not recognized
PR: 222641
Reported by: many
Approved by: ports-secteam blanket
Restrict download htmlxref.cnf from my LOCAL
Do not download htmlxref.cnf from GNU directly to avoid checksum error when
upstream updates this unversioned file.
=> htmlxref.cnf doesn't seem to exist in /usr/ports/distfiles/texinfo/6.5.
=> Attempting to fetch http://ftp.gnu.org/gnu/texinfo/htmlxref.cnf
fetch: http://ftp.gnu.org/gnu/texinfo/htmlxref.cnf: size mismatch: expected 20137, actual 20118
Approved by: ports-secteam (blanket)
emulators/rpcs3: update to 0.0.4.194
- Move CONFIGURE_ENV before CMAKE_ARGS to match order of execution
Changes: a08e79f4...58d8d126
Approved by: ports-secteam (junovitch, implicit for snapshots)
Apply upstream change from libffi to check for HAVE_AS_X86_PCREL for all
x86 targets. This should eliminate any text relocations, in particular
for the i386 build, making it possible to build the port with lld
without having to use -z notext.
Obtained from: https://github.com/libffi/libffi/pull/174
Approved by: zeising (maintainer)
PR: 214864
Approved by: portmgr (swills)
print/hplip and print/hplip-plugin: Fix URL and LICENSE information.
The URL change reflects a recent website change by HP, and was
preventing print/hplip-plugin from fetching correctly.
The LICENSE change reflects the fact that the introductory license
to the python source files mention that a later version of the GPL
can optionally be used.
PR: 224435
PR: 224408
Submitted by: Mason Loring Bliss <mason@blisses.org>
Reported by: jhb
Reviewed by: jhb
Approved by: ports-secteam (blanket)
misc/mc: Fix SUBSHELL blank terminal upon opening in xterm with Slang
Note: Unfortunately this does not fix this issue on the FreeBSD console.
PR: 217758
Submitted by: Alexander Moisseev <moiseev@mezonplus.ru>
Reported by: Dron <dron_2@ua.fm>
Reported by: danfe
Approved by: ports-secteam (delphij)
Update to 1.1.15
This update contains a fix for CVE-2017-16612, integer overflow that can
lead to a heap buffer overflow when parsing malicious files.
For general changelog, see
https://lists.x.org/archives/xorg-announce/2017-November/002823.html
Security: ddecde18-e33b-11e7-a293-54e1ad3d6335
Approved by: ports-secteam (delphij)
net-mgmt/observium: Update to 0.17.9.8859
- Fixes fetching as upstream always replaces/re-rolls distfile
- Now reportedly works with PHP 7.1
PR: 224223
Update to upstream security release 1.6.22
Also bring in rudimentary support for 11.1; 12.0 doesn't quite work
yet due to the ROOTINO-->UFS_ROOTINO rename.
Approved by: eadler (ports committer)
Security: CVE-2017-17432
Approved by: ports-secteam (delphij)
net/nethogs: unbreak with GCC < 6
inode2prog.cpp: In function 'std::string getprogname(pid_t)':
inode2prog.cpp:123: error: 'snprintf' is not a member of 'std'
Reported by: pkg-fallout (mips64)
Approved by: ports-secteam blanket
devel/spdlog: require C++11 toolchain (on powerpc*, mips*, sparc*)
CMake Error in tests/CMakeLists.txt:
Target "catch_tests" requires the language dialect "CXX11" (with compiler
extensions), but CMake does not know the compile flags to use to enable it.
tests/includes.h:7:10: fatal error: 'chrono' file not found
#include <chrono>
^~~~~~~~
1 error generated.
Reported by: pkg-fallout (mips64)
Approved by: ports-secteam blanket
dns/packetq: require C++11 toolchain (on powerpc*, mips*, sparc*)
cc1plus: error: unrecognized command line option "-std=c++0x"
In file included from dns.cpp:22:
In file included from ./dns.h:31:
In file included from ./packet_handler.h:33:
In file included from ./sql.h:43:
./variant.h:297:34: error: expected '(' for function-style cast or type construction
return std::hash<bool>()(m_val.m_bool);
~~~~^
./variant.h:297:20: error: no member named 'hash' in namespace 'std'; did you mean simply 'hash'?
return std::hash<bool>()(m_val.m_bool);
^~~~~~~~~
hash
./variant.h:293:17: note: 'hash' declared here
std::size_t hash() const
^
./variant.h:297:36: error: expected expression
return std::hash<bool>()(m_val.m_bool);
^
./variant.h:299:33: error: expected '(' for function-style cast or type construction
return std::hash<int>()(m_val.m_int);
~~~^
./variant.h:299:20: error: no member named 'hash' in namespace 'std'; did you mean simply 'hash'?
return std::hash<int>()(m_val.m_int);
^~~~~~~~~
hash
./variant.h:293:17: note: 'hash' declared here
std::size_t hash() const
^
./variant.h:299:35: error: expected expression
return std::hash<int>()(m_val.m_int);
^
./variant.h:301:35: error: expected '(' for function-style cast or type construction
return std::hash<float>()(m_val.m_float);
~~~~~^
./variant.h:301:20: error: no member named 'hash' in namespace 'std'; did you mean simply 'hash'?
return std::hash<float>()(m_val.m_float);
^~~~~~~~~
hash
./variant.h:293:17: note: 'hash' declared here
std::size_t hash() const
^
./variant.h:301:37: error: expected expression
return std::hash<float>()(m_val.m_float);
^
In file included from dns.cpp:22:
In file included from ./dns.h:31:
In file included from ./packet_handler.h:33:
./sql.h:1766:8: error: explicit specialization of non-template struct 'hash'
struct hash<std::vector<packetq::Variant> > {
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
10 errors generated.
Reported by: pkg-fallout (mips64)
Approved by: ports-secteam blanket
devel/breakpad: require C++11 toolchain (on powerpc*, mips*, sparc*)
checking whether /nxb-bin/usr/bin/c++ supports C++11 features by default... no
checking whether /nxb-bin/usr/bin/c++ supports C++11 features with -std=c++11... no
checking whether /nxb-bin/usr/bin/c++ supports C++11 features with -std=c++0x... no
checking whether /nxb-bin/usr/bin/c++ supports C++11 features with +std=c++11... no
checking whether /nxb-bin/usr/bin/c++ supports C++11 features with -h std=c++11... no
configure: error: *** A compiler with support for C++11 language features is required.
In file included from src/processor/basic_code_modules.cc:46:
./src/processor/range_map-inl.h:132:14: error: no matching member function for call to 'erase'
map_.erase(iterator_high);
~~~~~^~~~~
./src/processor/range_map-inl.h:64:10: note: in instantiation of member function
'google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::StoreRangeInternal' requested here
return StoreRangeInternal(base, 0 /* delta */, size, entry);
^
src/processor/basic_code_modules.cc:71:15: note: in instantiation of member function
'google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::StoreRange' requested here
if (!map_.StoreRange(module->base_address(), module->size(), module)) {
^
/usr/include/c++/4.2/bits/stl_map.h:453:7: note: candidate function not viable: no known conversion
from 'google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::MapConstIterator' (aka '_Rb_tree_const_iterator<std::pair<const
unsigned long, google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::Range> >') to 'std::map<unsigned long,
google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::Range, std::less<unsigned long>, std::allocator<std::pair<const
unsigned long, google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::Range> > >::iterator' (aka '_Rb_tree_iterator<std::pair<const
unsigned long, google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::Range> >') for 1st argument
erase(iterator __position)
^
/usr/include/c++/4.2/bits/stl_map.h:468:7: note: candidate function not viable: no known conversion
from 'google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::MapConstIterator' (aka '_Rb_tree_const_iterator<std::pair<const
unsigned long, google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::Range> >') to 'const std::map<unsigned long,
google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::Range, std::less<unsigned long>, std::allocator<std::pair<const
unsigned long, google_breakpad::RangeMap<unsigned long, google_breakpad::linked_ptr<const
google_breakpad::CodeModule> >::Range> > >::key_type' (aka 'const unsigned long') for 1st
argument
erase(const key_type& __x)
^
/usr/include/c++/4.2/bits/stl_map.h:483:7: note: candidate function not viable: requires 2 arguments,
but 1 was provided
erase(iterator __first, iterator __last)
^
1 error generated.
Reported by: pkg-fallout (mips64)
Approved by: ports-secteam blanket
textproc/hunspell: always link against C++11 library
C++11 isn't ABI-compatible with C++98 on GCC platforms, so build the
port using lang/gcc which since r449590 defaults to C++14. This should
fix C++11 consumers like www/firefox.
../../extensions/spellcheck/hunspell/glue/Unified_cpp_hunspell_glue0.o: In function `mozHunspell::SetDictionary(char16_t const*)':
Unified_cpp_hunspell_glue0.cpp:(.text._ZN11mozHunspell13SetDictionaryEPKDs+0x4a4): undefined reference to `Hunspell::get_dict_encoding[abi:cxx11]() const'
../../extensions/spellcheck/hunspell/glue/Unified_cpp_hunspell_glue0.o: In function `mozHunspell::Check(char16_t const*, bool*)':
Unified_cpp_hunspell_glue0.cpp:(.text._ZN11mozHunspell5CheckEPKDsPb+0x148): undefined reference to `Hunspell::spell(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, int*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >*)'
../../extensions/spellcheck/hunspell/glue/Unified_cpp_hunspell_glue0.o: In function `mozHunspell::Suggest(char16_t const*, char16_t***, unsigned int*)':
Unified_cpp_hunspell_glue0.cpp:(.text._ZN11mozHunspell7SuggestEPKDsPPPDsPj+0x16c): undefined reference to `Hunspell::suggest(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)'
Submitted by: jhibbits (based on)
Approved by: ports-secteam blanket
Differential Revision: https://reviews.freebsd.org/D12515
Fix security issues: CVE-2017-12176 through CVE-2017-12187 in xorg-server.
Bump all the slaves due to not being sure where the shared code is used.
Security: 7274e0cc-575f-41bc-8619-14a41b3c2ad0
Approved by: ports-secteam (eadler)
PR: 223286
x11-fonts/alfont: fix build and undeprecate, also clean up fetching.
Somehow I failed to see this patch earlier when the port originally expired.
PR: 213600
Submitted by: timon at timon.net.nz
Approved by: maintainer timeout (nemysis@, 1 year)
Approved by: ports-secteam (build-fix blanket)
- Update to 1.4.6
PR: 221565
Reported by: Christopher Beppler
- Switch to USES=pkgconfig
- Bump PORTREVISION
Special thanks: danfe (debugging hitch m4 issue+recommending pkgconfig via USES)
- Varnish has two different releases for hitch, switch to the other one as it is properly bootstrapped
- Bump PORTREVISION
Thanks to: danfe
security/hitch: Add reload command to rc script
Hitch properly handles SIGHUP
- Fix RCE vulnerability:
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89
allows remote attackers to execute arbitrary code or cause a denial of service
(use-after-free) via vectors involving BDAT commands.
PR: 223870
Submitted by: Gary
Security: 68b29058-d348-11e7-b9fe-c13eb7bcbf4f
Approved by: ports-secteam (swills)
Fix suricata failing to start if there is a stale pid file laying around.
This can happen if suricata is ungracefully shut down.
PR: 223052, 223322
Submitted by: Reshad Patuck, Franco Fichtner
Approved by: Franco Fichtner (maintainer)
Approved by: ports-secteam (swills)
Fix the table wizard in openoffice-base on FreeBSD 10 amd64. One of the
source files triggers a bug in the clang 3.4 code optimizer.
Approved by: ports-secteam (swills)
net/wireshark: update to 2.4.2
Announcement: https://www.wireshark.org/lists/wireshark-announce/201710/msg00000.html
Add a few dependencies to make stage-qa happy.
PR: 223577
Approved by: marcus (maintainer-timeout)
Security: 4684a426-774d-4390-aa19-b8dd481c4c94
Approved by: ports-secteam (swills)
gecko: speed up VP9 decoding on i386
Disable bundled FFmpeg decoders for VP* and FLAC on i386 as those don't
support SIMD optimizations due to build issues upstream. More recent
versions of those are already provided by multimedia/ffmpeg, anyway.
Approved by: ports-secteam (feld)
sysutils/battray: Update to 2.3
The last update was a no-op. Pointy hat to myself.
Switch to GitHub and mitigate the need of a manual commit-adjustment
for an update.
PR: 223624
Reported by: mat, bsd@mkfs.nl
Reviewed by: bsd@mkfs.nl
Approved by: ports-secteam (swills)
games/openra: update to 20171014
- Drop DOCS as Lua API docs aren't available anymore
- Drop ZENITY as it's only used to show FAQ link on crashes
- Move game data to DATADIR, better mimicking hier(7)
Changes: https://github.com/OpenRA/OpenRA/wiki/Changelog#release-20171014
Approved by: ports-secteam (swills)
lang/beignet: fix order of flags for mkdir(1) and rm(1)
BSD versions of commands don't support specifiying flags after arguments.
Obtained from: DPorts
Approved by: ports-secteam (swills)
Allow collectd to use python3 if optional python support is activated
PR: 222742
Submitted by: mi@ALDAN.algebra.com
Approved by: ports-secteam (fix blanket) ports@bsdserwis.com (maintainer)
Shibboleth Service Provider Security Advisory [15 November 2017]
An updated version of the Shibboleth Service Provider software
is available which corrects a critical security issue in the
"Dynamic" metadata provider plugin.
Deployers making use of the affected feature should apply the
relevant update at the soonest possible moment.
This also includes the fix to xmltooling security/apache-xml-security-c
that was introduced with the first version of the security patch.
Security: b4b7ec7d-ca27-11e7-a12d-6cc21735f730
Approved by: portmgr
Point to libzip.org.
libzip has recently switched to its own domain; use it instead of relying on
redirections from the old one.
Approved by: ports-secteam (blanket approval)
audio/sox: Fix segfault in the OSS backend
sox currently crashes when it finishes playing a file.
PR: 213262
Approved by: Dan Nelson <dnelson@allantgroup.com> (maintainer)
Reported by: Alexandros Perdikomatis <alexandrosperdikomatis@gmail.com>
Obtained from: Pkgsrc
Approved by: ports-secteam blanket
Register conflict with libsrtp.
Reported by: rodrigo
- Update net/pjsip to 2.7
- Bump PORTVERSION on asterisk13 port to avoid ABI problems
- While here, sort the plist
Fix CONFLICTS to not overwrite slave port setting.
PR: 222804
Submitted by: vvd@unislabs.com
Correctly handle option caused conflict.
PR: 222845
Submitted by: O. Hartmann <ohartmann@walstatt.org>
Update pjsip patch to work with libressl after the latest update
to 2.7, which broke it.
PR: 216898
Submitted by: OlivierW <olivierw1+bugzilla-freebsd@hotmail.com>
- Update pjsip to 2.7.1
- Import patches from the asterisk project
- Regenrate patches
Security: 19b052c9-c533-11e7-8da5-001999f8d30b
Approved by: ports-secteam (swills)
Fix [DE]SELECTED_OPTIONS to lazily evaluate as late as possible.
If a port modifies OPTIONS_UNSET after including bsd.port.options.mk
then these values were wrong even though all of 'showconfig',
'pretty-print-config', and the package generated all had the expected
options.
Only Poudriere and synth use these variables for incremental build checks.
Reviewed by: sjg, bapt
Approved by: portmgr (bapt)
Differential Revision: https://reviews.freebsd.org/D13092
Follow-up r454266: Sort and remove duplicates for [DE]SELECTED_OPTIONS.
Some ports like graphics/povray-meta do funky things like add the same
option into PORT_OPTIONS twice. This also avoids a new leading blank
space in some cases.
With hat: portmgr
Approved by: portmgr (implicit)
The port lists databases/py3-sqlite3 as dependency which does not exist. There
are individual python-sub-version ports though (devel/py3{4,5,6}-sqlite3).
Use PYTHON_SUFFIX to depend on requested version.
PR: 223514
Approved by: koobs (maintainer)
Approved by: ports-secteam (blanket)
security/sandsifter: fix typo to block non-x86 archs
cc -O2 -pipe -isystem /usr/local/include -fno-strict-aliasing -c injector.c -o injector.o -Wall
injector.c:338:93: warning: excess elements in array initializer
.start={.bytes={0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00}, .len=0},
^~~~
injector.c:339:91: warning: excess elements in array initializer
.end={.bytes={0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff}, .len=0},
^~~~
injector.c:870:32: error: no member named 'mc_eip' in 'struct __mcontext'
((ucontext_t*)p)->uc_mcontext.IP+=UD2_SIZE;
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^
injector.c:95:14: note: expanded from macro 'IP'
# define IP mc_eip
^
injector.c:883:30: error: no member named 'mc_eip' in 'struct __mcontext'
(uintptr_t)uc->uc_mcontext.IP-(uintptr_t)packet-preamble_length;
~~~~~~~~~~~~~~~ ^
injector.c:95:14: note: expanded from macro 'IP'
# define IP mc_eip
^
injector.c:905:18: error: no member named 'mc_eip' in 'struct __mcontext'
uc->uc_mcontext.IP=(uintptr_t)&resume;
~~~~~~~~~~~~~~~ ^
injector.c:95:14: note: expanded from macro 'IP'
# define IP mc_eip
^
injector.c:906:18: error: no member named 'mc_eflags' in 'struct __mcontext'; did you mean 'mc_flags'?
uc->uc_mcontext.EFL&=~TF;
^~~
mc_flags
injector.c:96:15: note: expanded from macro 'EFL'
# define EFL mc_eflags
^
/usr/include/machine/ucontext.h:56:7: note: 'mc_flags' declared here
int mc_flags;
^
2 warnings and 4 errors generated.
Reported by: pkg-fallout (aarch64)
Approved by: ports-secteam blanket
Fix multiple runtime errors and crashes in lua 5.3.4
Details
- Import upstream patches for known runtime errors
and crashes in lua 5.3.4
Details, see https://www.lua.org/bugs.html
in the section on version 5.3.4
PR: 222581
Submitted by: russ.haley@gmail.com
Approved by: maintainer timeout
Approved by: ports-secteam (swills)
Recommand psycopg2 over PyGreSQL
Submitted by: Christoph Moench-Tegeder <cmt@burggraben.net>
Update to latest versions of PostgreSQL
The PostgreSQL Global Development Group has released an update to all supported
versions of our database system, including 10.1, 9.6.6, 9.5.10, 9.4.15, 9.3.20,
and 9.2.24. This release fixes three security issues. This release also fixes
issues found in BRIN indexing, logical replication and other bugs reported over
the past three months.
Please note that the CVE-2017-12172 does not affect the FreeBSD port unless you
decided to not use the contrib/startscript instead of the startscript
distributed with the FreeBSD port/package.
Security: 1f02af5d-c566-11e7-a12d-6cc21735f730
URL: https://www.postgresql.org/about/news/1801/
Approved by: portmgr
sysutils/battray: Update from 2.1 to 2.3
Fixes this Python 3 issue on FreeBSD 11.1:
battray error: a bytes-like object is required, not 'str'
File "/usr/local/lib/python3.6/site-packages/battray/__init__.py", line 135, in update_status
self.data['lifetime']) = self.platform()
File "/usr/local/lib/python3.6/site-packages/battray/platforms.py", line 38, in freebsd
for line in o.split('\n'):
PR: 222980
Reported by: bsd@mkfs.nl
Approved by: ports-secteam (swills)
Merge in updates for mipsn32 and 32-bit arm.
- Brings in upstream commits to fix debugging on mipsn32 (properly parsing
registers and signal information in core dumps as well as unwinding across
signal frames)
- Brings in upstream commits for reworked ARM support. Compared to the
existing patch-armfbsd, this version includes generic FreeBSD target
support (auxv, thread names from cores, $_siginfo, syscall names, etc.)
as well as VFP support and an unwinder for signal frames.
Approved by: portmgr (swills)
Un-break build in the presence of print/texinfo
Details:
- If print/texinfo is installed, the build process detects and uses it to
rebuild the info pages. This fails because of some syntax errors,
previously only flagged as warnings.
- There is currently no configure switch to change this behaviour, hence
the texi files are patched to pass the texinfo run.
PR: 222732
Submitted by: robbak@gmail.com
Approved by: ports-secteam (build fix blanket), maintainer timeout
Don't try to look for PLIST under .OBJDIR
If MAKEOBJDIRPREFIX and WRKDIRPREFIX are same PLIST may point to a
non-existing file under .OBJDIR without breaking build.
$ export MAKEOBJDIRPREFIX=/tmp
$ echo WRKDIRPREFIX=/tmp >>${__MAKE_CONF-/etc/make.conf}
$ cd /usr/ports/print/harfbuzz-icu
$ make clean patch
$ make -V .OBJDIR
/tmp/usr/ports/print/harfbuzz-icu
$ make install
$ pkg info -l harfbuzz-icu
harfbuzz-icu-1.5.1_2:
PR: 219008
Submitted by: Ilia Skalozubov (based on)
Approved by: portmgr blanket
Approved by: ports-secteam blanket
emulators/ppsspp-devel: restore OLDJOY after r451582/r453020
Recently added fallback mappings are different from v1.3, and some
buttons can no longer be bound. So keep the option for a bit longer.
Approved by: ports-secteam (swills, implicit for r452123)
www/node: Update 8.6.0 -> 8.8.0
Update to the latest upstream v8.x release to address a remote DoS
vulnerability.
https://nodejs.org/en/blog/vulnerability/oct-2017-dos/https://nodejs.org/en/blog/release/v8.8.0/
Remove post-patch rules to replace various occurrences of 'python' with
PYTHON_CMD. Upstream has done a change to ensure that the "correct"
python version is called at build time, making our post-patch steps
unnecessary.
Re-roll patches with 'make makepatch'.
Approved by: robak (mentor)
Security: CVE-2017-14919
Security: d7d1cc94-b971-11e7-af3a-f1035dd0da62
Differential Revision: https://reviews.freebsd.org/D12689
www/node: Update 8.8.0 -> 8.8.1
Update to address a regression in 8.8.0.
https://nodejs.org/en/blog/release/v8.8.1/
Approved by: robak (mentor)
Differential Revision: https://reviews.freebsd.org/D12800
Approved by: ports-secteam (swills)
Add a security patch taken from Apache OpenOffice 4.1.4.
Add a LICENSE entry for MPL10. Code containing both MPL10 and MPL11
licenses is bundled.
Add CONFLICTS_INSTALL.
Move --with-ant-home and -with-jdk-home to Makefile from Makefile.knobs.
Security: 27229c67-b8ff-11e7-9f79-ac9e174be3af
Approved by: ports-secteam (blanket)
I did not resolve the merge conflict correctly which results
in pkg fallout. Now fix it by using the original patch file from
www/gitlab r452776.
Approved by: ports-secteam (swills)
devel/rubygem-prometheus-client-mmap: Update from 0.7.0.beta5 to 0.7.0.beta11
Sadly no changelog available
Reviewed by: Matthias Fechner <idefix@fechner.net>
Approved by: ports-secteam (swills)
www/firefox: backport privacy.resistFingerprinting fix for User-Agent
If users are going to "pkg lock" due to addons better pretend to be an
ESR on the off chance JS malware is stupid enough to only check
User-Agent to filter out non-vulnerable Firefox versions.
Obtained from: upstream (Firefox 57)
Approved by: ports-secteam (swills)
lang/rust: unbreak FFI for returning struct on i386
As this fixes Stylo on i386, remove the workaround in www/firefox.
PR: 223047
Suggested by: Sebastien Marie <semarie@openbsd.org>
Approved by: rust (dumbbell)
Approved by: ports-secteam (swills)
Upgrade to Apache OpenOffice 4.1.4:
* Several updates for language dictionaries
* Some translation fixes in the UI
* Bug fixes
* Security improvements
* Updated graphics/logos (new Apache feather)
* Enhancements to the build tools (for developers)
Clarify LICENSE entries, change MPL to MPL10 and MPL11 since code with
both of these licenses is bundled.
Make the java/jakarta-commons-httpclient dependency conditional
on the WIKI_PUBLISHER option.
The java/jakarta-commons-lang dependency should also be a RUN_DEPENDS.
Add CONFLICTS_INSTALL.
Move --with-ant-home and -with-jdk-home to Makefile from Makefile.knobs.
Portlint fixes: USES/USE, ONLY_FOR_ARCHES ordering.
Approved by: ports-secteam (swills)
Security: 27229c67-b8ff-11e7-9f79-ac9e174be3af
Fixed ntpd starting too early causing other services to fail at start.
Fixed error when stopping services.
PR: 222197
Submitted by: Helen Koike (maintainer)
Reported by: Vick Khera
Approved by: portmgr (swills)
- Update to 0.11.9
- Update WWW in pkg-descr
Noteworthy changes in 0.11.9
- Fixed bug which caused the acceptable of invalid IPv4 address as valid.
- Fixed compatibility with gnutls 3.3.8 by avoiding the use of the 'VERS-ALL'
priority string which was introduced in 3.3.24.
- Fixed null pointer dereference when parsing locked accounts in plain password
authentication.
- Add support for RSA-PSS and Ed25519 private keys when used with GnuTLS 3.6.0.
- ocpasswd: when locking an account multiple times, add the '!' character only once.
Based on patch by Frank Huang.
Changes: http://lists.infradead.org/pipermail/openconnect-devel/2017-October/004529.html
Approved by: ports-secteam (swills)
Mark BROKEN: fails to build with go 1.9
gmake[1]: Entering directory '/wrkdirs/usr/ports/databases/cockroach/work/cockroach-v1.0.4/src/github.com/cockroachdb/cockroach'
build/common.mk:110: *** "go1\.8.* required (see CONTRIBUTING.md): go version go1.9.1 freebsd/amd64". Stop.
Reported by: pkg-fallout
Fix out of bounds memory read when reading bar input.
Add patch from upstream git that fixes an out of bounds read and possible
write if the bar action script returns a NULL as the first character.
It is unclear if this can cause any security issues, but I feel it's prudent
to fix the issue.
Approved by: portmgr (swills)
textproc/apache-solr: upgrade to 7.0.1
PR: 222932
Submitted by: idefix@fechner.net (maintainer)
textproc/apache-solr: update to 7.1.0.
Highlights for this Solr release include:
Critical Security Update: Fix for CVE-2017-12629 which is a working 0-day exploit reported on the public mailing list.
Auto-scaling: Solr can now move replicas automatically when a new node is added or an existing node is removed using the auto scaling policy framework introduced in 7.0
Auto-scaling: The 'autoAddReplicas' feature which was limited to shared file systems is now available for all file systems. It has been ported to use the new autoscaling framework internally.
Auto-scaling: New set-trigger, remove-trigger, set-listener, remove-listener, suspend-trigger, resume-trigger APIs
Auto-scaling: New /autoscaling/history API to show past autoscaling actions and cluster events
New JSON based Query DSL for Solr that extends JSON Request API to also support all query parsers and their nested parameters
JSON Facet API: min/max aggregations are now supported on single-valued date fields
Lucene's Geo3D (surface of sphere & ellipsoid) is now supported on spatial RPT fields by setting spatialContextFactory="Geo3D". Furthermore, this is the first time Solr has out of the box support for polygons
Expanded support for statistical stream evaluators such as various distributions, rank correlations, distances and more.
Multiple other optimizations and bug fixes
PR: 223073
Submitted by: idefix@fechner.net (Maintainer)
Security: CVE-2017-12629
Approved by: ports-secteam (swills)
Use https site.
Add patch set 2017-1
A vulnerability was found in how a number of implementations can be
triggered to reconfigure WPA/WPA2/RSN keys (TK, GTK, or IGTK) by
replaying a specific frame that is used to manage the keys. Such
reinstallation of the encryption key can result in two different types
of vulnerabilities: disabling replay protection and significantly
reducing the security of encryption to the point of allowing frames to
be decrypted or some parts of the keys to be determined by an attacker
depending on which cipher is used.
Security: https://w1.fi/security/2017-1/ \
wpa-packet-number-reuse-with-replayed-messages.txt
Security: https://www.krackattacks.com/
Approved by: portmgr (swills)
Check for Qt depends in LOCALBASE, not PREFIX
Qt has been looking for its dependencies in PREFIX, rather than in
LOCALBASE. Dependencies are expected to exist in LOCALBASE, but
PREFIX may be set arbitrarily by the end-user. When PREFIX != LOCALBASE,
Qt-based ports failed to build.
PR: 222994
Reported by: kargl
Approved by: tcberner (kde)
Exp-run by: antoine
Differential Revision: https://reviews.freebsd.org/D12666
Approved by: ports-secteam (blanket, build fix)
- www/nginx: fix for fastdfs module
- As of ftp/fastdfs 5.0.11 nginx wont start by default if the fastdfs module is loaded.
Provided patch sorts that out by adding the missing params to the mod_fastdfs.conf file.
While patching mod_fastdfs.conf i also changed the storage paths to match the ftp/fastds port
PR: 222067
Reported by: Daniel Ylitalo <daniel@blodan.se>
Approved by: miwi (mentor)
Differential Revision: https://reviews.freebsd.org/D12246
Approved by: ports-secteam (swills)
Use https site.
Add patch set 2017-1.
A vulnerability was found in how a number of implementations can be
triggered to reconfigure WPA/WPA2/RSN keys (TK, GTK, or IGTK) by
replaying a specific frame that is used to manage the keys. Such
reinstallation of the encryption key can result in two different types
of vulnerabilities: disabling replay protection and significantly
reducing the security of encryption to the point of allowing frames to
be decrypted or some parts of the keys to be determined by an attacker
depending on which cipher is used.
Approved by: leres (maintainer)
Approved by: ports-secteam (delphij)
Security: https://w1.fi/security/2017-1/ \
wpa-packet-number-reuse-with-replayed-messages.txt
Security: https://www.krackattacks.com/
Differential Revision: D12691
* Updated to 1.7.2
- [High severity] Upgrade to 1.7.2 to fix a DOS vulnerability in the EVM.
PR: 223013
Submitted by: Enrique Fynn (maintainer)
Approved by: portmgr (swills)
multimedia/ffmpeg: fix opencv-core autodetection in some cases
post-patch already adds -core suffix to pkg-config search
Pointy hat to: mat (r448475)
Approved by: ports-secteam blanket
multimedia/vapoursynth: unbreak runtime on non-x86
vapoursynth.Error: Failed to obtain VapourSynth API pointer. System
does not support SSE2 or is the Python module and loaded core library
mismatched?
Approved by: ports-secteam blanket
devel/ncurses: update to 20171007 snapshot
While here, take maintainership and set CPE info
Security: b84dbd94-e894-4c91-b8cd-d328537b1b2b
Approved by: ports-secteam (implicit)
Mark BROKEN: fails to build
libtool: compile: c++ -DHAVE_CONFIG_H -I./../include -isystem /usr/local/include -O2 -pipe -fstack-protector -isystem /usr/local/include -fno-strict-aliasing -isystem /usr/local/include -std=c++11 -MT util.lo -MD -MP -MF .deps/util.Tpo -c util.cc -fPIC -DPIC -o .libs/util.o
In file included from util.cc:15:
./../include/ngram/util.h:24:1: error: unknown type name 'DECLARE_bool'
DECLARE_bool(ngram_error_fatal);
^
util.cc:19:1: error: C++ requires a type specifier for all declarations
DEFINE_bool(ngram_error_fatal, true,
^
Reported by: pkg-fallout
ports-mgmt/synth: Build with watchdog monitor by default
Without WATCHDOG Synth will hang on the ports that stop building [1].
While here:
- Rename the double negative NOWATCHDOG option to WATCHDOG
[1] https://github.com/jrmarino/synth/issues/53#issuecomment-335425660
PR: 222900
Submitted by: ericturgeon.bsd@gmail.com (maintainer)
Approved by: ports-secteam blanket
Update to upstream version 1.7.1, build fix with /tmp mounted noexec
Details:
- Update to upstream version 1.7.1
- go puts temporary build artefacts into TMPDIR. This caused build issues
when the port is built on a system where /tmp is mounted noexec.
Now the port uses TMPDIR=WRKDIR
- Update maintainer's e-mail address to me@enriquefynn.com
PR: 221913
Submitted by: peter@icebear.net, enriquefynn@gmail.com (maintainer)
Approved by: portmgr (swills)
PostgreSQL 10 Released!
Some highlights:
Logical Replication - A publish/subscribe framework for distributing data
Declarative Table Partitioning - Convenience in dividing your data
Improved Query Parallelism - Quickly conquer your analysis
Quorum Commit for Synchronous Replication - Distribute data with confidence
SCRAM-SHA-256 authentication - Secure your data access
URL: https://www.postgresql.org/about/news/1786/
Noticed by: VoidChicken@gmail.com
PR: 222864
Approved by: ports-secteam
devel/stack: Update to 1.5.1
- This late port update fixes using Stackage Nightly snapshots
>= 2017-07-31 (which use GHC 8.2.1) with Stack
- Fix iconv dependency and use iconv:translit like all the other
Haskell ports since GHC 8.0.2 was imported in r447548
Approved by: ports-secteam (swills)
Fix security issues: CVE-2017-13721 and CVE-2017-13723 in xorg-server.
Bump all the slaves due to not being sure where the shared code is used.
Security: 4f8ffb9c-f388-4fbd-b90f-b3131559d888
Approved by: ports-secteam (swills@)
Mark BROKEN: fails to build
/wrkdirs/usr/ports/multimedia/avidemux-plugins/work/avidemux_2.6.11/avidemux_plugins/ADM_demuxers/MpegTS/dmxTSPacket.cpp: In member function 'bool tsPacket::decodePesHeader(TS_PESpacket*)':
/wrkdirs/usr/ports/multimedia/avidemux-plugins/work/avidemux_2.6.11/avidemux_plugins/ADM_demuxers/MpegTS/dmxTSPacket.cpp:436:49: error: unable to find string literal operator 'operator""x' with 'const char [30]', 'long unsigned int' arguments
#define fail(x) {printf("[Ts Demuxer]*********"x"*******\n");return false;}
Reported by: pkg-fallout
multimedia/libvpx: unblock build on mips*
mips* cannot use lang/gcc*, so let it use GCC 4.2 in base.
Other archs may work as well but x86 won't per r422956.
Approved by: ports-secteam blanket
Mark BROKEN: fails to package
pkg-static: Unable to access file /wrkdirs/usr/ports/devel/msp430-debug-stack/work/stage/usr/local/share/doc/msp430-debug-stack/slau320x.pdf:No such file or directory
Reported by: pkg-fallout
audio/jack: libuuid is completely unused after r440260
libuuid was used for a some time between 0.121.3 and 0.124 releases
but didn't propagate into any except for stray <uuid/uuid.h> include.
PR: 221314
Submitted by: tobik
Reviewed by: hselasky
Approved by: ports-secteam blanket
graphics/aseprite: Fix conflict with textproc/cmark
Link with libcmark from textproc/cmark instead of using the embedded
cmark version and stop installing files that textproc/cmark already
provides.
PR: 222787
Reported by: rodrigo
Approved by: Yuri Victorovich <yuri@rawbw.com> (maintainer)
Approved by: ports-secteam blanket
gecko: enable PROFILE by default (like official builds)
This stops passing -fomit-frame-pointer which is detrimental for stack
unwinding as used by dtrace, pmcstat or gdb/lldb.
Approved by: ports-secteam (zi)
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
