- Fix runtime for gcc rpath. [1]
This is a regression of something that was working in the past. Please
keep the _GCC_RUNTIME handling even if removing USE_GCC as it may
come back again in the future and be forgotten.
- Fix build on 11.3 with ports ssl. [2]
PR: 245048 [1]
PR: 243315 [2]
Submitted by: John Hein <jcfyecrayz at liamekaens.com> [2]
Approved by: portmgr (implicit)
- Unbreak by using new upstream
The author restored the working version to github. The version in the
README is wrong (1.10) but is correct in CHANGELOG (1.10.1).
PR: 243852
Approved by: portmgr (implicit)
The PostgreSQL Global Development Group has released an update to all
supported versions of our database system, including 12.2, 11.7, 10.12,
9.6.17, 9.5.21, and 9.4.26. This release fixes one security issue found
in the PostgreSQL server and over 75 bugs reported over the last three
months.
Users should plan to update as soon as possible.
PostgreSQL 9.4 Now EOL
This is the last release for PostgreSQL 9.4, which will no longer
receive security updates and bug fixes. PostgreSQL 9.4 introduced new
features such as JSONB support, the `ALTER SYSTEM` command, the ability
to stream logical changes to an output plugin, and more:
https://www.postgresql.org/about/news/1557/https://www.postgresql.org/docs/9.4/release-9-4.html
While we are very proud of this release, these features are also found
in newer versions of PostgreSQL. Many of these features have also
received improvements, and, per our versioning policy, it is time to
retire PostgreSQL 9.4.
To receive continued support, we suggest that you make plans to upgrade
to a newer, supported version of PostgreSQL. Please see the PostgreSQL
versioning policy for more information.
Security Issues
* CVE-2020-1720: `ALTER ... DEPENDS ON EXTENSION` is missing
authorization checks.
Versions Affected: 9.6 - 12
The `ALTER ... DEPENDS ON EXTENSION` sub-commands do not perform
authorization checks, which can allow an unprivileged user to drop any
function, procedure, materialized view, index, or trigger under certain
conditions. This attack is possible if an administrator has installed an
extension and an unprivileged user can `CREATE`, or an extension owner
either executes `DROP EXTENSION` predictably or can be convinced to
execute `DROP EXTENSION`.
Release notes: https://www.postgresql.org/docs/current/release.html
databases/postgresql12-server: fix build on GCC architectures
Use LLVM only if Clang is used.
PR: 244225, 244985
Approved by: ports-secteam (joneum)
www/firefox: backport fix for a warning after r527804
JavaScript error: resource:///modules/BrowserGlue.jsm, line 2210: TypeError: Services.profiler is undefined
Approved by: ports-secteam blanket
Unbreak by making fetchable again. This necessitates updating from
3.3.0 to 3.3.3 in order to make fetchable again.
Assume maintainership.
PR: 244998
Submitted by: cy
Reported by: cy
Approved by: maintainer (Adam McDougall <mcdouga9 at egr.msu.edu>)
Approved by: portmgr (joneum)
www/nextcloud: Update to 18.0.0
www/nextcloud: Update to 18.0.1
www/nextcloud: Update to 18.0.2
www/nextcloud: Security update to 18.0.3
- Further vuln info not yet disclosed
PR: 245016
Reported by: Marko Cupac <marko cupac mimar rs>
Approved by: ports-secteam (joneum)
games/scummvm: Unbreak build with FLUIDSYNTH=on
games/scummvm: Update to 2.1.1
Clean-up some stage QA warnings/issues while I'm here:
* Fix pkg-plist issues if the MP3 option is set to off.
* Add "iconv" to USES as scummvm is linked against libiconv.so.
* Also add "--disable-ogg" to VORBIS_CONFIGURE_OFF if the VORBIS option is
set to off. Otherwise scummvm is linked against "libogg.so" which is a
dependency of the VORBIS option but "libogg.so" is already pulled in via
the non-conditional "libtheoradec.so".
Changelog:
https://www.scummvm.org/news/20200131/
PR: 244272
Approved by: maintainer timeout (4+ weeks)
Approved by: ports-secteam build/bugfix blanket
www/gitea: Use OPTIONS_SUB
gitea: Update to 1.11.3
This release fixes three bugs.
Release notes: https://blog.gitea.io/2020/03/gitea-1.11.3-and-1.10.6-released/
Also fix LDFLAGS so that the version number (among other things) is built into
the binary correctly, and make the regexp used in the Makefile work with
bsdgrep (both thanks to adamw).
Will MFH due to bsdgrep build failure and stopwatch panic fix.
PR: 244898
Submitted by: maintainer
Approved by: portmgr (with hat)
sysutils/u-boot-rpi{3,4}: Add patch to fix PSCI stub reservation
For the traditional spin table setup, only the lowest page needs
to be reserved. However, our PSCI stubs are slightly bigger and occupy
a little over one page. These patches, already sent upstream, allow a
variable number of initial pages to be reserved for the SMP stubs. We
then set the values for these in our fragment to '2' to reserve the first
and second page.
Approved by: koobs (mentor)
Approved by: manu (uboot, maintainer)
Differential Revision: https://reviews.freebsd.org/D24085
Approved by: ports-secteam (joneum)
Fix the virtualenvwrapper_lazy.sh wrapper to invoke the Python
versions-specific virtualenvwrapper.sh script that the port/package was
built with, preventing the following error:
ERROR: virtualenvwrapper_lazy.sh: Could not find virtualenvwrapper.sh
While I'm here:
- Update pkg-descr WWW: URL to match setup.py:homepage
- Update COMMENT to match setup.py:summary
Approved by: portmgr (blanket: ports (python) compliance, run-time bugfix)
Approved by: ports-secteam (blanket: ports (python) compliance, run-time bugfix)
security/bro: Update to 3.0.3 and address a number of potential
denial of service issues:
https://github.com/zeek/zeek/releases/tag/v3.0.2https://github.com/zeek/zeek/releases/tag/v3.0.3
- Potential Denial of Service due to memory leak in DNS TSIG message
parsing.
- Potential Denial of Service due to memory leak (or assertion
when compiling with assertions enabled) when receiving a second
SSH KEX message after a first.
- Potential Denial of Service due to buffer read overflow and/or
memory leaks in Kerberos analyzer. The buffer read overflow
could occur when the Kerberos message indicates it contains an
IPv6 address, but does not send enough data to parse out a full
IPv6 address. A memory leak could occur when processing KRB_KDC_REQ
KRB_KDC_REP messages for message types that do not match a
known/expected type.
- Potential Denial of Service when sending many zero-length SSL/TLS
certificate data. Such messages underwent the full Zeek file
analysis treatment which is expensive (and meaninguless here)
compared to how cheaply one can "create" or otherwise indicate
many zero-length contained in an SSL message.
- Potential Denial of Service due to buffer read overflow in SMB
transaction data string handling. The length of strings being
parsed from SMB messages was trusted to be whatever the message
claimed instead of the actual length of data found in the message.
- Potential Denial of Service due to null pointer dereference in
FTP ADAT Base64 decoding.
- Potential Denial of Service due buffer read overflow in FTP
analyzer word/whitespace handling. This typically won't be a
problem in most default deployments of Zeek since the FTP analyzer
receives data from a ContentLine (NVT) support analyzer which
first null-terminates the buffer used for further FTP parsing.
Approved by: ler (mentor, implicit)
Security: 4ae135f7-85cd-4c32-ad94-358271b31f7f
Approved by: ports-secteam (joneum)
security/softether5: fix build on aarch64
Tested on Amazon EC2 A1 instances with FreeBSD/ARM 12 image[1].
Build on mips also should be fixed (not actually tested).
[1] https://aws.amazon.com/marketplace/pp/B081NF7BY7
Sponsored by: HAW International
Approved by: portmgr branket (fix build)
Merge ports r526348 (update to 136, bugfix release) which should have
been merged with ports r528329
PR: 244750
Approved by: ports-secteam (blanket: bugfix release, fix quarterly regression)
/dev/stdin is a non-portable non-POSIX extension having different
semantics on different operating systems. zininfo(1) exits with 9 when
/dev/stdin is supplied on FreeBSD. In fact, unzip(1) explicitly documents
that it does not support reading from stdin.
[1] https://lists.reproducible-builds.org/pipermail/diffoscope/2020-March/002632.html
PR: 244750
Submitted by: Michael Osipov <michael.osipov siemens com>
Approved by: ports-secteam (blanket: runtime bugfix)
This fix a Problem, when MySQL build with libressl
/var/ports/usr/ports/databases/mysql56-client/work/mysql-5.6.47/vio/viosslfactories.c:230:25: error: use of undeclared identifier 'SSL_OP_NO_TLSv1_3'
SSL_OP_NO_TLSv1_3 |
^
/var/ports/usr/ports/databases/mysql56-client/work/mysql-5.6.47/vio/viosslfactories.c:275:12: warning: implicit declaration of function 'SSL_CTX_set_ciphersuites' is invalid in C99 [-Wimplicit-function-declaration]
if (0 == SSL_CTX_set_ciphersuites(ssl_fd->ssl_context, ""))
Special thanks for his help to: fluffy
PR: 244320
Sponsored by: Netzkommune GmbH
Approved by: ports-secteam (joneum)
emulators/virtualbox-ose: use contemporary GCC instead of old llvm
The bug in PR 236616 resulted in virtualbox getting pinned to llvm7. This is
less than ideal, and in-fact has been broken by improvements to
machine/atomic.h
on x86 that require a more modern compiler.
Switch the build to USE_GCC= any. The patches that were previously applied
if COMPILER_TYPE == clang are actually needed by newer GCCs as well, so make
those
standard patches instead, folding the Config.kmk patches together.
We should put some effort into testing llvm10 and working out why llvm
breaks
it, but fixing the build is more important at the moment.
Q/A:
* portlint (pre-existing issues; none in current patch)
* testport (-CURRENT, amd64)
* run testing by madpilot@
PR: 244603
Approved by: koobs (mentor), bapt (mentor)
Approved by: portmgr (blanket: build fix)
Differential Revision: https://reviews.freebsd.org/D23967
Approved by: ports-secteam (blanket: build fix)
Update to upstream version 44.0.0
Details:
- Mostly bugfixes, see
https://mkvtoolnix.download/doc/NEWS.md
but also a helpful new feature:
- MKVToolNix GUI: header editor: the attachments can now
be reordered via drag & drop.
Approved by: ports-secteam (riggs)
graphics/drm-legacy-kmod: Update snapshot
Update the graphics/drm-legacy-kmod port to the latest snapshot, fixing the
build with llvm 10
Approved by: ports-secteam (implicit, drm-drivers blanket)
textproc/py-textfsm: Update to 1.1.1
This update resolves a package installation conflict with
textproc/py-texttable as both ports installs "texttable.py" into the same
place. [1]
Also while I'm here:
* Switch to GitHub for a while as no sdist tarballs are available at PyPi.
* Make the port concurrent safe because it installs scripts outside of the
site-lib directory.
* Remove the "testdata" directory to prevent possible package conflicts as
it's only required for the test suite.
* Add a "do-test" target to make future QA easier.
Changelog:
https://github.com/google/textfsm/releases/tag/v1.1.0https://github.com/google/textfsm/releases/tag/v1.1.1
PR: 244257
Reported by: John Hein <jcfyecrayz@liamekaens.com> [1]
Approved by: ports-secteam (joneum)
lang/rust-nightly: Unbreak with lld on 12.1/13.0 i386
= note: ld: error: relocation R_386_PC32 cannot be used against symbol __rust_probestack; recompile with -fPIC
>>> defined in /wrkdirs/usr/ports/lang/rust-nightly/work/rustc-nightly-src/build/i686-unknown-freebsd/stage1/lib/rustlib/i686-unknown-freebsd/lib/libcompiler_builtins-6570a75fe85f0e1a.rlib(compiler_builtins-6570a75fe85f0e1a.compiler_builtins.2i519eqi-cgu.15.rcgu.o)
>>> referenced by std.4xivr03c-cgu.14
>>> std-9bd70afd58e204b7.std.4xivr03c-cgu.14.rcgu.o:(_$LT$alloc..boxed..Box$LT$F$GT$$u20$as$u20$core..ops..function..FnOnce$LT$A$GT$$GT$::call_once::h1c78ed6e734a2bfc (.llvm.10122419023709863394)) in archive /wrkdirs/usr/ports/lang/rust-nightly/work/rustc-nightly-src/build/i686-unknown-freebsd/stage1/lib/rustlib/i686-unknown-freebsd/lib/libstd-9bd70afd58e204b7.rlib
ld: error: relocation R_386_PC32 cannot be used against symbol __rust_probestack; recompile with -fPIC
>>> defined in /wrkdirs/usr/ports/lang/rust-nightly/work/rustc-nightly-src/build/i686-unknown-freebsd/stage1/lib/rustlib/i686-unknown-freebsd/lib/libcompiler_builtins-6570a75fe85f0e1a.rlib(compiler_builtins-6570a75fe85f0e1a.compiler_builtins.2i519eqi-cgu.15.rcgu.o)
>>> referenced by std.4xivr03c-cgu.14
>>> std-9bd70afd58e204b7.std.4xivr03c-cgu.14.rcgu.o:(std::io::util::copy::h9115f048f2203467) in archive /wrkdirs/usr/ports/lang/rust-nightly/work/rustc-nightly-src/build/i686-unknown-freebsd/stage1/lib/rustlib/i686-unknown-freebsd/lib/libstd-9bd70afd58e204b7.rlib
clang-cpp: error: linker command failed with exit code 1 (use -v to see invocation)
error: aborting due to previous error
http://beefy17.nyi.freebsd.org/data/head-i386-default/p523508_s356869/logs/rust-nightly-1.42.0.20200118.loghttp://beefy4.nyi.freebsd.org/data/121i386-quarterly/527662/logs/rust-nightly-1.42.0.20191222.log
Approved by: ports-secteam blanket
Add libarc to LIB_DEPENDS for audio/timidity++
Up until now, libarc was only being included in LIB_DEPENDS when
the Makefile of audio/timidity++ was being used by one of its slave ports.
audio/timidity++, however, may be also used as a standalone port in which
case it needs libarc to be available.
Reported by: hselasky
Approved by: portmgr blanket (runtime fix)
switch kicad-doc from source to pre-built docs
The build process is rather unstable on our asciidoc toolchain, but
then the doc files are completely independent of OS and machine
architecture, so there's nothing which stops us from just taking the
ready-built files from upstream. At the same time this enables two
additional documentation languages (polnish and chinese) - their
build process was even more unstable than the rest in my environment.
PR: 241183
Approved by: ports-secteam (joneum@)
textproc/apache-solr: security related update to 8.4.1
Switch java version to current LTS version.
Security: e59cb761-5ad8-11ea-abb7-001b217b3468
Approved by: ports-secteam (joneum)
x11/xdm: Fix generation of etc/X11/xdm/Xresources
By some stupidity of autotools, spacing for a sed regexp used to generate
Xresources gets broken, and the sed command doen't match as it should. This
results in an Xresources file with an extra '#endif /* XPM */', which breaks
the file.
Patch Makefile.in to fix the regexp and have Xresources generated properly.
PR: 244404
Reported by: olgeni
Approved by: ports-secteam (joenum)
mail/opensmtpd: update to 6.6.4p1 security releaase
SECURITY RELEASE
An out of bounds read in smtpd allows an attacker to inject arbitrary commands into the envelope file which are then executed as root. Separately, missing privilege revocation in smtpctl allows arbitrary commands to be run with the _smtpq group.
Approved by: ports-secteam (joneum)
Security: CVE-2020-8793, CVE-2020-8794
net/freeradius-client: unbreak fetch, update to 1.1.7 release
Maintainer didn't unbreak the port over 3 months since it was marked unfetchable,
version 1.1.7 was released 26.05.2017
Approved by: maintainer (timeout)
Approved by: ports-secteam (joneum)
Update Postfix to 3.4.9 (bugfix-only release)
While here, also strip libexec/postfix/postlogd.
Announcement: http://www.postfix.org/announcements/postfix-3.4.9.html
Fixed in all supported stable releases:
Bug (introduced: Postfix 3.1): smtp_dns_resolver_options were broken while adding support for negative DNS response caching in postscreen. Postfix was inadvertently changed to call res_query() instead of res_search(). Reported by Jaroslav Skarvada.
Bug (introduced: Postfix 2.5): Postfix ignored the CONNECT macro overrides from a Milter application. Postfix now evaluates the Milter macros for an SMTP CONNECT event after the Postfix-to-Milter connection is negotiated. Problem reported by David Bürgin.
Bug (introduced: Postfix 3.0): sanitize (remote) server responses before storing them in the verify database, to avoid Postfix warnings about malformed UTF8. Found during code maintenance.
PR: 243879
Submitted by: Juraj Lutter <juraj@lutter.sk>
Approved by: maintainer timeout 15d (ohauer@)
Differential Revision: https://reviews.freebsd.org/D23502
Approved by: ports-secteam (joneum@)
Graphics/drm-fbsd11.2-kmod: Update snapshot
Update graphics/drm-fbsd11.2-kmod to the latest snapshot.
Make unsynchronized DRM_IOCTL_I915_GEM_USERPTR work in mesa on 7th
generation Haswell graphics. This is needed for vulkan.
Add devctl (devd) notification for monitor hotplug.
Approved by: portmgr (implicit, drm-drivers blanket)
devel/valgrind(-devel): Fix compiler version detection hopefully forever
Every time a compiler major version is bumped, we run into this exact
same error:
===> Configuring for valgrind-3.10.1.20160113_7,1
...
checking for a supported version of gcc... no (10.0.0)
configure: error: please use gcc >= 3.0 or clang >= 2.9
Attempt to fix this for all versions in the future.
Other fix included: don't use undefined behavior to implement offsetof,
just use the official builtin function instead.
Approved by: portmgr (joneum)
PR: 244234
graphics/drm-fbsd12.0-kmod: Update snapshot
Update the graphics/drm-fbsd12.0-kmod snapshot
Make unsynchronized DRM_IOCTL_I915_GEM_USERPTR work in mesa on 7th
generation Haswell graphics. This is needed for vulkan.
Approved by: portmgr (implicit, drm-drivers blanket)
www/p5-Gantry: correctly escape $
In make(1), "$$" is the escaped version of "$", rather than the expected
"\$". this expression was getting passed through to ${REINPLACE_CMD} as
"s,\NV{..." rathern than the expected "s,$ENV{..." -- bug #229925 makes \N
an illegal expression, as ordinary characters will be disallowed from being
escaped in preparation for future changes to grant some of these escape
sequences GNU-extended behavior.
PR: 240310
Approved by: koobs (mentor), bapt (mentor)
Approved by: portmgr (maintainer timeout: 4 months, blanket: bugfix)
Differential Revision: https://reviews.freebsd.org/D23701
Approved by: ports-secteam (blanket: bugfix)
x11-toolkits/p5-Alien-wxWidgets: remove extraneous escapes
post-patch phase of this port uses sed to replace 'wx-config with
'${WX_CONFIG:T}. Previously it escaped the ', but this is not necessary in
this context.
Remove the extraneous escape so that it doesn't get passed through to sed(1)
as an escape of an ordinary character. This is important as the patch in bug
#229925 will make such escapes an error to ease transition into a world
where some escaped-ordinaries will be granted a special meaning.
PR: 240450
Approved by: koobs (mentor), bapt (mentor)
Approved by: portmgr (maintainer timeout: 4 months)
Differential Revision: https://reviews.freebsd.org/D23702
Approved by: ports-secteam (implicit, future build fix)
x11-toolkits/p5-Alien-wxWidgets: add missing file to pkg-plist
This appears to have been overlooked in a previous update, so note its
presence in the pkg-plist.
This fixes Q/A checks run by `poudriere testport`.
Approved by: koobs (mentor), bapt (mentor)
Differential Revision: D23702 (included, but not the primary change)
Approved by: ports-secteam (implicit, packaging fix)
www/foswiki: remove redundant escape
= does not need to be escaped in this context; bug #229925 will make this
escape as well as the escape of most ordinary characters an error to reduce
friction when some of these ordinary characters are later granted special
GNU-extended behavior.
No functional change, no need to bump PORTREVISION.
PR: 240309
Approved by: koobs (mentor), bapt (mentor)
Approved by: portmgr (maintainer timeout: 4 months)
Differential Revision: https://reviews.freebsd.org/D23698
Approved by: ports-secteam (implicit, future build fix)
qemu-user-static: revert SSP_CFLAGS workaround (ports r501032)
This was later diagnosed to be a bug in libc, which has since been addressed
in all supported releases and branches. PORTREVISION is bumped as SSP_CFLAGS
will change the output, and for consumers of these two ports it is
imperative that it be rebuilt against the updated libc to avoid high failure
rates. In testing qemu-user-static-devel failed roughly 60% of the time,
rendering it unusable as each fork/exec was yet one more chance to fail.
The bug was fixed in the following patch levels (FreeBSD-EN-20:01.ssp):
- 12.1-p2
- 12.0-p13
- 11.3-p6
PR: 243735
Approved by: koobs (ports)
Approved by: ports-secteam (implicit, runtime fix)
glib20: revert SSP_CFLAGS workaround (ports r500819)
This was later diagnosed to be a bug in libc, which has since been addressed
in all supported releases and branches. PORTREVISION is bumped as SSP_CFLAGS
will change the output.
The bug was fixed in the following patch levels (FreeBSD-EN-20:01.ssp):
- 12.1-p2
- 12.0-p13
- 11.3-p6
PR: 243735
Approved by: kwm (gnome, maintainer via IRC)
Approved by: ports-secteam (miwi)
mail/fetchmail: mail/fetchmailconf: update to 6.4.2, make Python 3 compatible
Fetchmail updated to new revision 6.4.2
- one bugfix
- manual page updates
- update of Chinese (simplified) translation
- massive fetchmailconf overhaul
+ Python 3 compatible (requires py-future)
+ Supports IPv6 and SSL probing
- remove two patches for fetchmail that are in the upstream release
- add a smoke test to fetchmailconf's post-install,
and a patch to support that running without X11 $DISPLAY.
PR: 244130
Submitted by: mandree@
Reviewed by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
Approved by: ports-secteam@ (joneum@)
games/anki: Update to 2.1.16
* Backport two patches from upstream that fix the argument handling with
multimedia/mpv since r520597.
* Also slightly change the MASTER_SITES as upstream distribute tarballs for
newer versions only via GitHub.
Although there are already some newer releases available use the 2.1.16
release for a while. It's mainly because the build process has changed a
lot since the 2.1.17 release and still needs to be investigated a little
more closely.
Changelog:
https://apps.ankiweb.net/docs/changes.html#changes-in-2.1.16
Approved by: ports-secteam bugfix blanket
security/softether5: fix build on non-x86 architectures
Tested on: Raspberry Pi 3 Model B+
Sponsored by: HAW International
Approved by: portmgr blanket (fix build)
None of the packages upstream specified dependencies were declared in the
port. This change adds those missing dependencies.
The issue was identified while QA'ing www/py-freenit via bug 242817
File "/usr/local/lib/python3.7/site-packages/faker/providers/internet/__init__.py", line 4, in <module>
from text_unidecode import unidecode
ModuleNotFoundError: No module named 'text_unidecode'
While I'm here, level up ports (and Python ports) compliance and add test
target.
Approved by: portmgr (blanket(s): missing dependencies, ports (Python) compliance)
Approved by: ports-secteam (blanket(s): missing dependencies, ports (Python) compliance)
- Don't echo automatic actions unlike other manual actions
- Don't perform ${RM} -R because the OPTIONS system takes @comment parts
in pkg-plist into account, poudriere build does not complain.
- Don't provide samples for XML schema files, these are NOT intended to
be modified by the user
PR: 243648
Submitted by: Michael Osipov <michael.osipov siemens com>
Approved by: VVD <vvd unislabs com>
Approved by: ports-secteam (blanket: ports compliance, bugfixes)
graphics/libexif: Fix security vulnerabilities
- Fix CVE-2019-9278
In libexif, there is a possible out of bounds write due to an integer
overflow. This could lead to remote escalation of privilege in the media
content provider with no additional execution privileges needed. User
interaction is needed for exploitation.
- Fix a buffer read overflow in exif_entry_get_value
- Fix a buffer overread in exif_mnote_data_olympus_load
PR: 244060
Reported by: tj@mrsk.me (email)
Approved by: former maintainer
Security: 00f30cba-4d23-11ea-86ba-641c67a117d8
Approved by: ports-secteam (blanket, backport of security fixes)
Unbreak. The port had been broken while fetchmail 6.3.26 had
been removed by upstream and before mail/fetchmail had been
updated to 6.4.x - it fetches properly.
Regarding Python 3.x compatibility,
see: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244130
While here, fix TARGET -> ALL_TARGET to avoid building the C stuff,
and drop the unused obsolete distinfo file.
Approved by: ports-secteam (blanket, unbreaking broken port)
mail/dovecot: upgrade to 2.3.9.3
Changelog:
* CVE-2020-7046: Truncated UTF-8 can be used to DoS
submission-login and lmtp processes.
* CVE-2020-7957: Specially crafted mail can crash snippet generation.
Security: CVE-2020-7046
Security: CVE-2020-7957
Security: 74db0d02-b140-4c32-aac6-1f1e81e1ad30
Approved by: ports-secteam (zi)
sysutils/grub2-bhyve: Neutralize privileged guest commands
GRUB was designed to run in a trusted environment, where anyone with access
to grub2.cfg could also modify grub itself. In grub2-bhyve, we have
modified it to run in host context, but interpret the commands of guest
grub2.cfg. This means we have to worry about malicious guests.
This patch addresses two escalation vectors: font-loading, and the direct
'read', 'write', 'in', and 'out' commands (which read/write arbitrary
addresses). Both reported by Reno Robert.
Disable font-loading by neutering the command. It is believed to be non-
essential and there is at least one buffer overflow in the font loading
code.
Disable reading and writing host memory and IO ports. It is believed to be
non-essential.
admbugs: 948
Reported by: Reno Robert <renorobert AT gmail.com>
Approved by: bapt
Security: yes
Approved by: portmgr (bapt)
security/nss: unbreak on armv6 after r524147
In file included from ../../lib/freebl/gcm-arm32-neon.c:16:
/usr/lib/clang/8.0.1/include/arm_neon.h:28:2: error: "NEON support not enabled"
#error "NEON support not enabled"
^
PR: 243734
Reported by: garga
Submitted by: mikael
Approved by: ports-secteam blanket
emulators/rpcs3: unbreak DEFAULT_VERSIONS=python=2.7 after r521573
CMake Error at /usr/local/share/cmake/Modules/FindPackageHandleStandardArgs.cmake:137 (message):
Could NOT find PythonInterp: Found unsuitable version "2.7.17", but
required is at least "3" (found /usr/local/bin/python)
Call Stack (most recent call first):
/usr/local/share/cmake/Modules/FindPackageHandleStandardArgs.cmake:376 (_FPHSA_FAILURE_MESSAGE)
/usr/local/share/cmake/Modules/FindPythonInterp.cmake:160 (FIND_PACKAGE_HANDLE_STANDARD_ARGS)
Vulkan/glslang/CMakeLists.txt:165 (find_package)
Approved by: ports-secteam blanket
mail/opensmtpd: update to 6.6.3p1 release
- switch default configuration to maildir
- allow mbox to deliver to users without requiring privileges in the daemon
- allow lmtp to receive sender/recipient in environment
Approved by: ports-secteam (joneum)
misc/brs currently builds with many warnings and segfaults at runtime,
likely a missing prototypes issue as that's what most of the warnings
are.
A much more recent version (4.30 as opposed to 4.03) of this is
widely available on linux under the name "bible-kjv", which also exists
as an OpenBSD port.
This change updates brs to 4.30, switching upstream to DEBIAN [1], and the
first step commit to renaming the port.
While here:
- Include the "randverse" program
- Wordsmith pkg-descr: It's all very well saying that the port
includes libraries, but it doesn't install them.
- Remove patches: no longer relevent
[1] Use a temporary MASTER_SITES workaround, instead of 'DEBIAN' directly
because it does not currently use or support DISTNAME.
PR: 243886
Submitted by: Andrew <andrew tao11.riddles.org.uk>
Approved by: <user unknown nu> (implicit, approves maintainer change)
Approved by: portmgr (blanket: run (crash) fixes)
Approved by: ports-secteam (blanket: run (crash) fixes)
security/nss: disable AltiVec on 32-bit powerpc
Crypto acceleration is only implemented for powerpc64 but build flags
leak to other powerpc targets. Disable via a variable introduced in 3.50.
PR: 242523
Reported by: many
Approved by: ports-secteam blanket
www/firefox: apply upstream powerpc64 fixes
Many of these are stalled on review for various reasons but the intent
of each seems clear enough to keep rebasing or ask upstream for help.
pkg-fallout@ would identify rebase mistakes while atomic changes would
identify when a particular patch is no longer useful.
Submitted by: mikael (via D21765)
Approved by: ports-secteam blanket
Update webkit-gtk3 to 2.26.3.
* Fix issues while trying to play a video on NextCloud.
* Make sure the GL video sink uses a valid WebKit shared GL context.
* Fix vertical alignment of text containing arabic diacritics.
* Fix build with icu 65.1.
* Fix page loading errors with websites using HSTS.
* Fix web process crash when displaying a KaTeX formula.
* Fix several crashes and rendering issues.
This release also fixes 3 CVE's.
Security: dc8cff4c-4063-11ea-8a94-3497f6939fdd
Approved by: ports-secteam@ (miwi@)
Add patch for CVE-2019-20372
NGINX before 1.17.7, with certain error_page configurations,
allows HTTP request smuggling, as demonstrated by the ability
of an attacker to read unauthorized web pages in environments
where NGINX is being fronted by a load balancer.
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20372
PR: 243952
Reported by: koobs and many more
Security: c1202de8-4b29-11ea-9673-4c72b94353b5
Sponsored by: Netzkommune GmbH
Approved by: ports-secteam (with hat)
emulators/higan: unbreak on powerpc64, make ports tree compliant
Builds fine on powerpc64 without -march=native, which shouldn't be enabled anyway.
Approved by: portmgr (fix build blanket)
devel/lazygit: Update to 0.14
This release include a fix for the issue no keyboard input recognized [1].
[1] https://github.com/jesseduffield/lazygit/issues/563
PR: 242432
Approved by: portmgr (blanket: critical runtime bugfix)
Update to upstream version 43.0.0
Details:
- Mostly bug fixes and moderate feature changes, see
https://mkvtoolnix.download/doc/NEWS.md
- Includes fixes for an abort with some opus streams, and
AVC / H264 parser fixes.
Approved by: ports-secteam (riggs)
x11-toolkits/libhandy: Move e1c500dd02b1.patch to patch file
Checksum of it changed again. It changes all the time because
GitLab insists on embedding the version of whatever Git packages
they have installed in the footer.
PR: 243797
Approved by: ports-secteam blanket
databases/mongodb40-tools: Unbreak build with MONGOTOP=on, MONGOREPLAY=off
===> Building package for mongodb40-tools-4.0.8_2
pkg-static: Unable to access file /wrkdirs/usr/ports/databases/mongodb40-tools/work/stage/usr/local/bin/mongoreplay:No such file or directory
PR: 243685
Approved by: ports-secteam blanket
audio/beets: add missing dependency.
Add devel/py-confuse to the tree since audio/beets needs it.
PR: 243601
Approved by: portmgr (blanket: missing dependency), tcberner (mentor)
mail/opensmtpd: update to 6.6.2p1 relase
This update addressed LPE and RCE vulnerabilities in OpenSMTPD (CVE-2020-7247)
https://www.openwall.com/lists/oss-security/2020/01/28/3
This vulnerability is exploitable since May 2018 (commit a8e222352f, "switch
smtpd to new grammar") and allows an attacker to execute arbitrary shell
commands, as root:
- either locally, in OpenSMTPD's default configuration (which listens on
the loopback interface and only accepts mail from localhost);
- or locally and remotely, in OpenSMTPD's "uncommented" default
configuration (which listens on all interfaces and accepts external
mail).
PR: 243686
Reported by: authors via irc
Relnotes: https://www.mail-archive.com/misc@opensmtpd.org/msg04850.html
Security: CVE-2020-7247
Security: 08f5c27d-4326-11ea-af8b-00155d0a0200
Approved by: ports-secteam (blanket, security issue)
devel/elfutils: fix future build failure w.r.t. stdio _unlocked
Include <stdio.h> early so that the stdio.h function declarations come
first, then redefine fputs/fwrite/fread_unlocked to the locked versions.
fputc_unlocked will be a macro similar to putc_unlocked, so just hide that
one behind an #ifndef since it will be provided as a macro by <stdio.h>. The
other three will be using the technically-incorrect locked variants until
all supported releases provide the needed functions, at which point we can
switch them all at once.
No PORTREVISION bump as this is just a preemptive build fix that doesn't
change the output at all.
QA:
* portlint not ran, no change outside of a single patch
* testport (-CURRENT, amd64; 12.1-RELEASE, amd64; -CURRENT+patch, amd64)
Approved by: koobs (ports), cem (maintainer)
Approved by: ports-secteam (implicit; build fix)
games/openfodder: unbreak with GCC after r521658
In file included from Source/Utils/SimplexIslands.cpp:2:
Source/Utils/SimplexIslands.hpp:65:16: error: 'int32_t' does not name a type
65 | static inline int32_t fastfloor(double fp) {
| ^~~~~~~
Source/Utils/SimplexIslands.hpp: In member function 'double SimplexIslands::noise(double, double)':
Source/Utils/SimplexIslands.hpp:79:11: error: 'fastfloor' was not declared in this scope
79 | int i = fastfloor(xin + s);
| ^~~~~~~~~
PR: 243670
Submitted by: pkubaj
Approved by: ports-secteam blanket
lang/erlang*: repair 32-bit x86 erlang builds
Having HIPE & NATIVE enabled breaks OTP on 32-bit x86. They have not
built succesfully for quite some time.
Reported by: pkg fallout
Reviewed by: olgeni
Sponsored by: SkunkWerks, GmbH
Differential Revision: https://reviews.freebsd.org/D23296
lang/erlang*: include serious scheduler bugfixes
OTP-16371
Taking a scheduler offline could cause timers set while executing on
that scheduler to be delayed until the scheduler was put online again.
This bug was introduced in ERTS version 10.0 (OTP 21.0).
OTP-16378 | ERL-1125
The ets:update_counter/4 core dumped when given an ordered_set with
write_concurrency enabled and an invalid position.
OTP-16379
A process calling erlang:system_flag(multi_scheduling, block) could end
up blocked waiting for the operation to complete indefinitely.
Reviewed by: olgeni
Sponsored by: SkunkWerks, GmbH
Differential Revision: https://reviews.freebsd.org/D23313
Approved by: portmgr
sysutils/runit-faster: Fix runsvdir rc script
%%RUNITDIR%% was not replaced with the correct dir leading to
/var/run/runit/runsvdir/current pointing to some bogus location.
Approved by: ports-secteam runtime fix blanket
Fix accidental removal of devfs_rulesets on jail stop
Pulls in a bugfix[0] that has been merged upstream[1].
This bug caused manually configured devfs_rulesets to get deleted on jail
stop, causing jails to come up with a default devfs rules on next start,
which can be a nuisance or even dangerous, depending on the specific setup.
Also adds a minimum devfs_ruleset id for dynamically created devfs rulesets
and fixes a devfs_ruleset resource leak when using plugins.
Take maintainership, as suggested by araujo@ (thanks for taking care of that
port for so long!).
[0]https://github.com/iocage/iocage/pull/1106
[1]753b2f3573
PR: 243510
Approved by: araujo (maintainer)
Approved by: ports-secteam (joneum)
www/iridium: copy snappy fix from chromium
just like chromium (from which it was forked), iridium embeds a copy
of snappy (the compression library) and cannot be fully switched to
the system-provided archivers/snappy in an easy way. consider this a
band-aid patch
Reported by: pkubaj
Approved by: portmgr (blanket: web browser, build fix)
fix build
in a 12.1amd64 poudriere, chromium failed:
In file included from ../../third_party/leveldatabase/port/port_chromium.cc:10:
../../third_party/snappy/src/snappy.h:76:59: error: unknown type name 'string'; did you mean 'std::string'?
size_t Compress(const char* input, size_t input_length, string* output);
^~~~~~
std::string
/usr/include/c++/v1/iosfwd:211:65: note: 'std::string' declared here
instead of trying to muck around with type aliasing (see
snappy-stubs-public.h.in) just reference thy type directly, as there's only
one file requiring patching.
Approved by: portmgr (blanket: web browser, just fix it)
Fix calibre-server startup script by extending the PATH to include
LOBALBASE/bin.
The server looks in path for the pdftohtml binary, which is used
to render PDF files for viewing in the browser.
Reported by: Alexander Leidinger <Alexander@leidinger.net>
Approved by: ports-secteam (joneum)
sysutils/lsof: fix build following base r356337.
I took the patch from 243122 as it was more correct.
PR: 243122, 243083
Submitted by: cy, yasu@utahime.org
sysutils/lsof: fix after base r356432.
PR: 243172
Submitted by: mjg
Reported by: yasu@utahime.org
sysutils/lsof: add a PPC64 work around for needing -lzpool
PR: 242833
Submitted by: luciano@vespaperitivo.it
sysutils/lsof: fix build on powerpc, powerpc64, powerpcse
PR: 242758
Submitted by: pkubaj
Approved by: ports-secteam (joneum)
net-mgmt/netbox: Update to 2.6.12
Changelog:
Enhancements:
* Improved NAPALM method documentation in Swagger (OpenAPI)
* Preview image attachments when hovering over the link
* Allow NAPALM driver settings to be changed with request headers
* Toggle the display of child prefixes/IP addresses
* Search by description when assigning IP address to interfaces
* Add tenant filter field for cables
* Enable filtering of interfaces by name on the device view
* Add rack selection field to rack elevations view
* Paginate assigned circuits at the provider details view
* Add total path length to cable trace
* Include content of response on webhook error
* Enable word expansion during interface creation
* Enable searching by DNS name when assigning IP address
* Allow passing initial data to custom script forms
* Add local_context_data filter for virtual machines
Bug Fixes:
* Fix validation on tagged VLANs of an interface
* Fix ordering of models when dumping data to JSON
* Fix device role link on config context view
* Allow filtering VM interfaces by multiple MAC addresses
* Fix rendering of grouped custom links
* Allow filtering device components by multiple device names
* Disallow /0 masks for prefixes and IP addresses
* Paginate related IPs on the IP address view
* Fix minimum/maximum value rendering for site ASN field
* Fix filtering of devices by rack group
* Fix references to deleted cables without a label
* Fix divide-by-zero on power feeds with low power values
https://github.com/netbox-community/netbox/releases
Approved by: ports-secteam (joneum)
www/trafficserver: fix build on powerpc64
This port builds on amd64, but without luajit support since there's no luajit for powerpc64.
Also add USES=localbase instead of LIBS+= and remove unused CONFIGURE_ARGS.
Since files are installed to powerpc-freebsd-thread-multi directory, set proper PLIST_SUB and do-install target.
Don't add -L/usr/lib to LDFLAGS, it breaks when compiling with ports GCC.
PR: 243154
Approved by: gaod@hychen.org (maintainer)
Approved by: portmgr (fix build blanket)
lang/spidermonkey60: fix build on i386
Build used to fail with
Unified_cpp_js_src_jsapi-tests0.o: In function `cls_testAtomicOperationsU64::run(JS::Handle<JSObject*>)':
...[_ZN27cls_testAtomicOperationsU643runEN2JS6HandleIP8JSObjectEE]+0x86): undefined reference to `__atomic_load_8'
...[_ZN27cls_testAtomicOperationsU643runEN2JS6HandleIP8JSObjectEE]+0xd0): undefined reference to `__atomic_store_8'
...[_ZN27cls_testAtomicOperationsU643runEN2JS6HandleIP8JSObjectEE]+0x111): undefined reference to `__atomic_exchange_8'
...[_ZN27cls_testAtomicOperationsU643runEN2JS6HandleIP8JSObjectEE]+0x185): undefined reference to `__atomic_compare_exchange_8'
...[_ZN27cls_testAtomicOperationsU643runEN2JS6HandleIP8JSObjectEE]+0x200): undefined reference to `__atomic_compare_exchange_8'
...[_ZN27cls_testAtomicOperationsU643runEN2JS6HandleIP8JSObjectEE]+0x268): undefined reference to `__atomic_fetch_add_8'
...[_ZN27cls_testAtomicOperationsU643runEN2JS6HandleIP8JSObjectEE]+0x2c5): undefined reference to `__atomic_fetch_sub_8'
...[_ZN27cls_testAtomicOperationsU643runEN2JS6HandleIP8JSObjectEE]+0x324): undefined reference to `__atomic_fetch_and_8'
...[_ZN27cls_testAtomicOperationsU643runEN2JS6HandleIP8JSObjectEE]+0x384): undefined reference to `__atomic_fetch_or_8'
...[_ZN27cls_testAtomicOperationsU643runEN2JS6HandleIP8JSObjectEE]+0x3e4): undefined reference to `__atomic_fetch_xor_8'
Switch to using gcc on i386.
Approved by: ports-secteam (blanket)
databases/mysql56-{client, server}: Update to latest release 5.6.47
Bugs Fixed:
- Replication: When GTIDs are enabled on a replication master and slave, and the slave connects to the master with the MASTER_AUTO_POSITION=1 option set, the master must send the slave all the transactions that the slave has not already received, committed, or both. If any of the transactions that should be sent by the master have been already purged from the master's binary log, the master sends the error ER_MASTER_HAS_PURGED_REQUIRED_GTIDS (1789) to the slave, and replication does not start.
The message provided for the error ER_MASTER_HAS_PURGED_REQUIRED_GTIDS has been changed to provide advice on the correct action in this situation, which is for the slave to replicate the missing transactions from another source, or for the slave to be replaced by a new slave created from a more recent backup. The message advises that the master's binary log expiration period can be revised to avoid the situation in future. In addition, the master now identifies the GTIDs of the purged transactions and supplies them in its error log in the warning message ER_FOUND_MISSING_GTIDS (11809), so that you do not need to calculate the missing GTIDs manually.
- With multiple sessions executing concurrent INSERT ... ON DUPLICATE KEY UPDATE statements into a table with an AUTO_INCREMENT column but not specifying the AUTO_INCREMENT value, inserts could fail with a unique index violation.
- A SELECT using a WHERE condition of the form A AND (B OR C [OR ...]) resulting in an impossible range led to an unplanned exit of the server.
- An incomplete connection packet could cause clients not to properly initialize the authentication plugin name.
Approved by: mmokhi (maintainer, implicit)
Security: a6cf65ad-37d2-11ea-a1c7-b499baebfeaf
Sponsored by: Netzkommune GmbH
Approved by: ports-secteam (with hat)
databases/mysq56-{client, server}: Update to latest release 5.7.29
Bugs Fixed:
- InnoDB: os_file_get_parent_dir warnings were encountered when compiling MySQL with GCC 9.2.0.
- InnoDB: An internal function (btr_push_update_extern_fields()) used to fetch newly added externally stored fields and update them during a pessimistic update or when going back to a previous version of a record was no longer required. Newly added externally stored fields are updated by a different function. Also, the method used to determine the number of externally stored fields was corrected.
- InnoDB: A comparison function found two records to be equal when attempting to merge non-leaf pages of a spatial index. The function was unable to handle this unexpected condition, which resulted in a long semaphore wait and an eventual assertion failure.
- Replication: A memory leak could occur when a failed replication group member tried to rejoin a minority group and was disallowed from doing so.
- Docker packages were missing the LDAP authentication plugins.
More Infos: https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-29.html
Approved by: mmokhi (maintainer, implicit)
Security: a6cf65ad-37d2-11ea-a1c7-b499baebfeaf
Sponsored by: Netzkommune GmbH
Approved by: ports-secteam (with hat)
textproc/py-tablib: Fix RUN_DEPENDS of devel/py-backports.csv
* The Python version restriction of devel/py-backports.csv was relaxed in
r519566. Thus update the RUN_DEPENDS accordingly and remove the
workaround for setup.py which is no longer needed.
* Bump PORTREVISION for package change.
PR: 243339
Submitted by: sunpoet
Approved by: ports-secteam dependency fix blanket
databases/mysql80-{client, server}: Update to latest release 8.0.19
- New FPROFILE_GENERATE and FPROFILE_USE CMake options are available for experimenting with profile guided optimization (PGO) with GCC. See the cmake/fprofile.cmake in a MySQL source distribution for information about using them. These options have been tested with GCC 8 and 9, and with Clang.
- Enabling FPROFILE_USE also enables WITH_LTO (link time optimization).
- Innodb_system_rows_read, Innodb_system_rows_inserted, Innodb_system_rows_deleted status variables were added for counting row operations on InnoDB tables that belong to system-created schemas. The new status variables are similar to the existing Innodb_rows_read, Innodb_rows_inserted, Innodb_rows_deleted status variables, which count operations on InnoDB tables that belong to both user-created and system-created schemas.
- The new status variables are useful in replication environments where relay_log_info_repository and master_info_repository variables are set to TABLE, resulting in higher row operation counts on slaves due to operations performed on the slave_master_info, slave_replay_log_info, and slave_worker_info tables, which belong to the system-created mysql schema. For a valid comparison of master and slave row operation counts, operations on tables in system-created schemas can now be excluded using the count data provided by the new status variables.
More infos: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-19.html
Submitted by: fluffy
Approved by: mmokhi (maintainer, implicit)
Sponsored by: Netzkommune GmbH
Security: a6cf65ad-37d2-11ea-a1c7-b499baebfeaf
Approved by: ports-secteam (with hat)
graphics/drm-kmod ports: Update snapshots
Update snapshots of all linux KPI based DRM graphics driver ports.
This update fixes an information disclosure security vulnerability.
Please note that only the drivers for intel GPUs are affected.
Security: d2c2c815-3793-11ea-8be3-54e1ad3d6335
Approved by: ports-secteam (implicit, security fix, drm-drivers blanket)
games/flightgear-mb339-pan: unbreak on powerpc64
Builds fine on powerpc64, but takes long to package. If it times out, Poudriere limits should be increased.
Approved by: portmgr (fix build blanket)
net-mgmt/xymon-client net-mgmt/xymon-server: Update to 4.3.30
Various crashes and bugs relating to string handling changes have been fixed,
including problems with hostnames with dashes in them.
Combostatus tests propagated up from other combostatus tests should now
display properly.
Approved by: ports-secteam (blanket)
math/gau2grid: remove -march=native, unbreak on i386 and powerpc64
This port added -march=native, which was against ports tree compliance, broke run-time on some amd64 and broke building on non-x86.
I have verified that it builds correctly on i386 and powerpc64 (provided -march=native is removed). It probably also builds on other architectures.
Reviewed by: linimon
Approved by: portmgr (fix build blanket)
security/modsecurity3-nginx: fix build on GCC architectures
C11 compiler is needed because of typedef redefinitions.
Approved by: portmgr (fix build blanket)
net/py-suds-jurko: Fix tests installed into shared location [1]
This package installs its 'tests' module into a non-package-specific
location in the root site-packages directory. Python packages should/usually
address this by excluding tests from installation using
setup.py: find_packages(exclude[ "<package-glob>" ]).
Unfortunately the above 'simple' change cannot be used because it doesn't
allow the package to be tested on Python 3.x, as the tests package is not
processed by 2to3, and the tests need to be run on the processed (by 2to3)
sources. This may be the original reason upstream didn't remove them from
the build, not grokking the ramifications.
Accordingly, this change moves the tests into the main package namespace
and runs the tests on the processed sources in the resulting build/*
directory. Remove CONFLICTS_INSTALL (to py-suds) accordingly.
While I'm here:
Patch the tests to support pytest > 4 and hack around the
inability to reference parametrized tests (test[foo]) in pytests -k
expressions. [1][2]
Level up ports compliance: LICENSE_FILE, USE{S} ordering, match COMMENT
to setup.py:description, match pkg-descr WWW URL to setup.py:homepage
QA: All tests pass on Python 2.7-3.8
[1] https://github.com/pytest-dev/pytest/issues/5881
[2] https://github.com/pytest-dev/pytest/issues/6177
PR: 226077
Reported by: yuri [1]
Approved by: portmgr (blanket: ports compliance)
net/py-suds-jurko: Bump PORTREVISION missed in ports r522860
PR: 226077
Approved by: ports-secteam (blanket(s): ports compliance, port bugfixes)
math/clp: fix build on non-x86 non-ARM
Only amd64 and i386 have immintrin.h. There's a check for ARM, but not for other architectures.
Building without immintrin.h works fine on amd64.
PR: 242966
Approved by: co9co9@gmail.com (maintainer timeout)
Approved by: portmgr (fix build blanket)
databases/db6, db5: fix JAVA-enabled build, suppress sed failed warnings
Add JAVA_VERSION="7 8" to db6
Add REWARNFILE=/dev/null to db6 and db5
Reported by: Tommy P <tommyhp2@gmail.com>
PR: 243278
Approved by: ports-secteam (blanket, unbreaks a broken build under non-default JAVA option)
audio/ardour5: fix build on powerpc64
_POSIX_SOURCE causes some errors in errno.h not to be seen (like EAFNOSUPPORT), so remove it.
On ELFv2 lld can't link it, throws errors like:
ld: error: relocation R_PPC64_ADDR32 cannot be used against local symbol; recompile with -fPIC
>>> defined in libs/ardour/cycle_timer.cc.1.o
>>> referenced by cycle_timer.cc
>>> libs/ardour/cycle_timer.cc.1.o:(__ftr_fixup+0x8)
Recompiling with -fPIC doesn't help, so use GNU ld there.
PR: 243281
Approved by: portmgr (blanket: build fix)
security/botan2: update to 2.13.0 release
* Fix a bug introduced in 2.12.0 where TLS::Channel::is_active and TLS::Channel::is_closed
could simultaneously return true. (GH #2174#2171)
* Use std::shared_ptr instead of boost::shared_ptr in some examples. (GH #2155)
* Add Roughtime client (GH #2143#1842)
* Add support for XMSS X.509 certificates (GH #2172)
* Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
https://botan.randombit.net/news.html
PR: 243239
Submitted by: maintainer
Approved by: maintainer
Approved by: ports-secteam (joneum)
net-p2p/c-lightning: fix bitcoin-cli exec setup
lightningd does execute bitcoin-cli internally during runtime.
Fix two problems with that:
* The bitcoin-cli executable is usually located in
/usr/local/bin/bitcoin-cli but service(8) would remove /usr/local/bin
from PATH before executing our rc script /usr/local/etc/rc.d/lightningd
and so the lightningd daemon would inherit a PATH that does not contain
bitcoin-cli. To fix this give the full path to bitcoin-cli to lightningd.
* bitcoin-cli(1) tries to create its datadir when it starts if it does not
exist. By default that is ${HOME}/.bitcoin. service(8) would set HOME=/
and if / is mounted read-only, then this creation would fail. Because we
don't want this directory created (it is not necessary and remains empty)
tell lightningd to execute
bitcoin-cli --datadir=/some/directory/that/already/exists.
Also, append ${lightningd_extra_args} to the lightingd arguments. This was
forgotten in the initial commit and setting lightningd_extra_args would have
had no effect.
Reported by: https://github.com/bitcoin-software
Approved by: portmgr ("fix broken ports")
databases/mysql80-{client, server}: Update to latest release 8.0.18
switch patch-files to mysql80-server to make it easy for maintain.
Bugfix:
- CMake now enables use of fastcov if it is available. fastcov is faster than lcov or gcov. This requires GCC and gcov versions of 9 or higher.
- The DISABLE_SHARED CMake option was unused and has been removed.
- The CMake code to find Protobuf executables now works on platforms that split these into multiple packages.
- The new ADD_GDB_INDEX CMake option determines whether to enable generation of a .gdb_index section in binaries, which makes loading them in a debugger faster. The option is disabled by default. It has no effect if a linker other than lld or GNU gold is used.
- For the INSTALL_LAYOUT CMake option, the SLES and WIN option values were not used and have been removed.
- The max_prepared_stmt_count system variable maximum value has been increased from 1 million (1,048,576) to 4 million (4,194,304). The default value remains unchanged at 16,382.
- MySQL 8.0 no longer supports building using wolfSSL. All MySQL builds now use OpenSSL.
- The RE2 library is no longer used by MySQL. The library is no longer bundled with source distributions and the WITH_RE2 CMake option is obsolete.
More Infos: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html
A big thanks to @fluffy for his help with this update
Security: fc91f2ef-fd7b-11e9-a1c7-b499baebfeaf
Sponsored by: Netzkommune GmbH
Approved by: ports-secteam (wit hat)
databases/mysql56-{client, server}: Update to latest release 5.6.46
Bugfix:
- Improper locking during storage engine initialization could cause a server exit.
- A query with a WHERE clause whose predicate contained a numeric value in scientific notation was not handled correctly.
- VS2019 produced compilation errors with debug compilation selected due to use of the /ZI flag. Now /Z7 is used instead.
- For MySQL Community Edition, the cipher order specified by the client was used in preference to the order on the server side, unless the server was confi
- Password masking was incomplete for SHOW PROCESSLIST and some INFORMATION_SCHEMA and Performance Schema tables.
- The -DWITH_EXAMPLE_STORAGE_ENGINE=1 CMake option was ignored but should not have been. If -DWITH_EXAMPLE_STORAGE_ENGINE=0 is given, the EXAMPLE storage e
More Info: https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-46.html
Approved by: mmokhi (maintainer, implicit)
Security: fc91f2ef-fd7b-11e9-a1c7-b499baebfeaf
Sponsored by: Netzkommune GmbH
Approved by: ports-secteam (with hat)
multimedia/obs-studio: fix build on powerpc64
Merge upstream commit to use GCC's SSE->AltiVec translation. Since it depends on compiling with GCC, it only works on ELFv1. Hopefully it will be possible to build it on ELFv2 in the future.
Also use luajit only where it's actually available. Since it's optional, the port builds anyway.
PR: 243199
Approved by: yuri (maintainer)
Approved by: portmgr (fix build blanket)
net/xrdp: fix build on GCC architectures
C11 compiler is necessary:
irp.h:33: error: redefinition of typedef 'XFUSE_INFO'
chansrv_fuse.h:47: error: previous declaration of 'XFUSE_INFO' was here
Approved by: portmgr (fix build blanket)
net-mgmt/netbox: Update to 2.6.11
* Remove the patch that fixed a regression when accessing the API
documentation as it's no longer required. [1]
Changelog since 2.6.9:
Enhancements:
* Add ability to move inventory items between devices
* Extend admin UI to allow deleting old report results
* Add assigned_to_interface filter for IP addresses
* Fail gracefully on custom link rendering exception
* Provide request context when executing custom scripts
* Add date/time picker widgets
* Enable partial search for inventory items
* Optimize size of pages containing a dynamic selection field
* Allow filtering console/power/interface connections by device ID
Bug Fixes:
* Restrict queryset of chained fields when form validation fails
* Include A/Z termination sites for circuits in global search
* Scrolling to target (hash) did not account for the header size
* Fix AttributeError exception in API docs [1]
* Filter platform by manufacturer when editing devices
* Fix filtering of racks by group on device list
* Fix exception when editing a device bay (regression since 2.6.7)
* Fix API-driven filter field rendering (regression since 2.6.10)
* Add missing region filters for multiple objects
https://github.com/netbox-community/netbox/releases/tag/v2.6.11https://github.com/netbox-community/netbox/releases/tag/v2.6.10
net-mgmt/netbox: Relax RUN_DEPENDS
* The 2020Q1 branch has 0.24.0 of www/py-dj22-django-taggit thus relax
its version requirement of the RUN_DEPENDS to avoid a build failure there.
Although net-mgmt/netbox requires the 1.1.0 release of
www/py-dj22-django-taggit (pinned with "==" by upstream), it runs fine
with either 0.24.0 (in 2020Q1) or 1.2.0 (since r521999).
Approved by: ports-secteam (joneum)
ports-secteam build fix blanket (remaining part)
Add missing dependency: devel/p5-Class-Accessor
re: https://metacpan.org/source/DLO/Proc-BackOff-0.02/Build.PL#L11
Encountered this error:
Base class package "Class::Accessor" is empty.
(Perhaps you need to 'use' the module which defines that package first,
or make that module available in @INC (@INC contains: /usr/local/sbin/../lib /usr/local/lib/perl5/site_perl/mach/5.30 /usr/local/lib/perl5/site_perl /usr/local/lib/perl5/5.30/mach /usr/local/lib/perl5/5.30).
at /usr/local/lib/perl5/site_perl/Proc/BackOff.pm line 4.
Approved by: portmgr blanket
x11-wm/compiz: depend on nvidia-settings only on amd64 and i386
Nvidia drivers are not available on other architectures.
PR: 242832
Approved by: freebsd-ports@dan.me.uk (maintainer timeout)
Approved by: portmgr (fix build blanket)
net-p2p/monero-cli: fix build on non-x86
Architectures that don't have libunwind available should disable stack trace.
Otherwise, the following linking error is encountered:
/usr/local/bin/ld: src/common/libcommon.a(stack_trace.cpp.o): in function `tools::log_stack_trace(char const*)':
stack_trace.cpp:(.text+0x71c): undefined reference to `el::base::debug::StackTrace::generateNew()'
/usr/local/bin/ld: stack_trace.cpp:(.text+0x72c): undefined reference to `el::base::debug::operator<<(std::ostream&, el::base::debug::StackTrace const&)'
collect2: error: ld returned 1 exit status
PR: 242846
Approved by: vd (maintainer timeout)
Approved by: portmgr (fix build blanket)
multimedia/libvpx: update COMMENT
Only decoder and encoder are installed. Other features are not
maintained by the port. Besides, ffmpeg provides alternative decoder
while svt-vp9 provides alternative encoder.
Approved by: ports-secteam blanket
net-mgmt/cacti: Update to 1.2.8
* Sort pkg-plist to make future patching/comparing easier.
While I'm here:
* Use ${COPYTREE_SHARE} to correctly install a whole set of files instead of
using "cp -R".
* Also remove a very outdated test was required when updating to the 0.8.7a
release of net-mgmt/cacti. It was introduced +12 years ago in r203859 and
is no longer required nowadays.
Changelog:
https://github.com/Cacti/cacti/releases/tag/release%2F1.2.8
PR: 242834
Submitted by: Michael Muenz <m.muenz@gmail.com> (based on)
Approved by: maintainer timeout (14 days)
Security: 86224a04-26de-11ea-97f2-001a8c5c04b6
Approved by: ports-secteam (joneum)
x11/cde: update to 2.3.1 and unbreak
Merged, as the original CDE in this branch is broken anyway.
PR: ports/242663
Submitted by: mikael.urankar@gmail.com
Approved by: portmgr (blanket, build fixes)
security/nmap: Fix build on 11i386, 11arm, 11arm64
Fix patches to configure scripts to only add -libverbs if found in base
PR: 242987
Reported by: Dries Michiels <driesm.michiels@gmail.com>
Reported by: garga
Approved by: ports-secteam (joneum)
New port: cad/cascade-compiler: Just-In-Time Compiler for Verilog from VMware Research
cad/cascade-compiler: Update g20200104 -> g20200105
Tests now pass.
Fix build on GCC-based systems:
CMake Error in src/CMakeLists.txt:
Target "libcascade" requires the language dialect "CXX17" (with compiler
extensions), but CMake does not know the compile flags to use to enable it.
Approved by: portmgr (tier-2 blanket)
cad/cascade-compiler: Update g20200105 -> g20200105.1
Approved by: secteam
geoipupdate: Add instructions for getting account ID/key
MaxMind now requires a (free) registered account to download any
of the databases, including the free ones. Registration and
download remain free--they just require an account now.
Approved by: portmgr (with hat)
Update to upstream version 42.0.0
Details:
- Bug fixes and enhancements, see
https://mkvtoolnix.download/doc/NEWS.md
including segfault in mkv reader and use
of uninitialised memory in MPEG stream
parser.
Approved by: ports-secteam (riggs)
mail/rspamd-devel: use luajit only on amd64, armv7, i386 and powerpc to fix build on other architectures
It's possible that there are other architectures that luajit works on, but I couldn't test it.
PR: 243059
Approved by: vsevolod (maintainer)
Approved by: portmgr (fix build blanket)
Mark as broken on powerpc64:
src/hwcap.c:20:3: error: #error "Platform not supported (only Linux supported at the moment)"
src/hwcap.c:23:3: error: #error "Platform not supported (no getauxval())"
Approved by: portmgr (tier-2 blanket)
Add compiler:c++11-lang to USES to try to fix build on GCC-based
systems:
CMake Error at CMakeLists.txt:112 (message): GCC version must be at least 6.1!
Unfortunately this merely gets to a failure later on in the build
for powerpc64.
Approved by: portmgr (tier-2 blanket)
net/asterisk-g72x: fix build of GCC architectures
C11 compiler is necessary:
In file included from codec_g72x.c:26:
/usr/local/include/asterisk/lock.h: In function 'ast_atomic_fetchadd_int':
/usr/local/include/asterisk/lock.h:752: error: '__ATOMIC_RELAXED' undeclared (first use in this function)
/usr/local/include/asterisk/lock.h:752: error: (Each undeclared identifier is reported only once
/usr/local/include/asterisk/lock.h:752: error: for each function it appears in.)
/usr/local/include/asterisk/lock.h: In function 'ast_atomic_dec_and_test':
/usr/local/include/asterisk/lock.h:762: error: '__ATOMIC_RELAXED' undeclared (first use in this function)
Approved by: portmgr (fix build blanket)
games/glest: fix build on GCC architectures
Building with GCC fails:
./mk/linux/glest_game/ai/ai_rule.cpp: In member function 'virtual bool Glest::Game::AiRuleMassiveAttack::test()':
./mk/linux/glest_game/ai/ai_rule.cpp:156:46: error: 'INT_MAX' was not declared in this scope
156 | return ai->beingAttacked(attackPos, field, INT_MAX);
| ^~~~~~~
./mk/linux/glest_game/ai/ai_rule.cpp:19:1: note: 'INT_MAX' is defined in header '<climits>'; did you forget to '#include <climits>'?
18 | #include "leak_dumper.h"
+++ |+#include <climits>
19 |
./mk/linux/glest_game/ai/ai_rule.cpp: In member function 'virtual bool Glest::Game::AiRuleExpand::test()':
./mk/linux/glest_game/ai/ai_rule.cpp:815:22: error: 'INT_MAX' was not declared in this scope
815 | int minDistance= INT_MAX;
| ^~~~~~~
./mk/linux/glest_game/ai/ai_rule.cpp:815:22: note: 'INT_MAX' is defined in header '<climits>'; did you forget to '#include <climits>'?
...failed C++ ./build/powerpc64-portbld-freebsd12.1/optimize/glest_game/ai/ai_rule.o ...
Include climits in ai_rule.cpp to fix it.
PR: 242766
Approved by: mmokhi (maintainer timeout)
Approved by: portmgr (fix build blanket)
net-p2p/namecoin: fix build on GCC architectures
It looks like some update caused src/httpserver.c to need to include deque when building with GCC. Otherwise it fails to compile with:
httpserver.cpp:74:10: error: 'deque' in namespace 'std' does not name a template type
74 | std::deque<std::unique_ptr<WorkItem>> queue;
| ^~~~~
httpserver.cpp:33:1: note: 'std::deque' is defined in header '<deque>'; did you forget to '#include <deque>'?
32 | #include <support/events.h>
+++ |+#include <deque>
33 |
httpserver.cpp: In member function 'bool WorkQueue<WorkItem>::Enqueue(WorkItem*)':
httpserver.cpp:92:13: error: 'queue' was not declared in this scope; did you mean 'Enqueue'?
92 | if (queue.size() >= maxDepth) {
| ^~~~~
| Enqueue
httpserver.cpp:95:9: error: 'queue' was not declared in this scope; did you mean 'Enqueue'?
95 | queue.emplace_back(std::unique_ptr<WorkItem>(item));
| ^~~~~
| Enqueue
httpserver.cpp: In member function 'void WorkQueue<WorkItem>::Run()':
httpserver.cpp:106:35: error: 'queue' was not declared in this scope; did you mean 'Enqueue'?
106 | while (running && queue.empty())
| ^~~~~
| Enqueue
httpserver.cpp:110:31: error: 'queue' was not declared in this scope; did you mean 'Enqueue'?
110 | i = std::move(queue.front());
| ^~~~~
| Enqueue
PR: 242710
Approved by: milios@ccsys.com (maintainer timeout)
Approved by: portmgr (fix build blanket)
net/asterisk-chan_sccp: fix build on GCC architectures
Use newer GCC:
You need at least gcc > 4.3. While your gcc has version:
4.2.1
Approved by: portmgr (fix build blanket)
irc/eggdrop[-devel]: Fix build with ssl other than base
PR: 242988
Submitted by: wcarson.bugzilla@disillusion.net
Approved by: portmgr (build fix blanket)
www/py-django[22|30]: Unbreak with MySQL, switch to py-mysqlclient
According to official docs, mysqlclient >=1.3.13 is the recommended
choice instead of outdated pyMySQLdb
PR: 243077
Submitted by: fluffy
Approved by: sunpoet (maintaner, python@)
Approved by: ports-secteam (joneum)
games/openomf: Unbreak build on i386 (broken in r511074)
warning: unknown warning option '-Wno-unused-but-set-variable'; did you mean '-Wno-unused-const-variable'? [-Wunknown-warning-option]
external/dumb/dumb/src/it/itrender.c:721:11: error: always_inline function '_mm_setzero_ps' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
temp1 = _mm_setzero_ps();
^
external/dumb/dumb/src/it/itrender.c:722:10: error: always_inline function '_mm_cvtsi32_ss' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
data = _mm_cvtsi32_ss( temp1, currsample );
^
external/dumb/dumb/src/it/itrender.c:723:11: error: always_inline function '_mm_cvtsi32_ss' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
temp2 = _mm_cvtsi32_ss( temp1, prevsample );
^
external/dumb/dumb/src/it/itrender.c:724:13: error: always_inline function '_mm_loadu_ps' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
impulse = _mm_loadu_ps( (const float *) &imp );
^
external/dumb/dumb/src/it/itrender.c:728:12: error: always_inline function '_mm_cvtsi32_ss' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
temp1 = _mm_cvtsi32_ss( data, src [i] );
^
external/dumb/dumb/src/it/itrender.c:729:12: error: always_inline function '_mm_mul_ps' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
temp1 = _mm_mul_ps( temp1, impulse );
^
external/dumb/dumb/src/it/itrender.c:730:12: error: always_inline function '_mm_movehl_ps' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
temp2 = _mm_movehl_ps( temp2, temp1 );
^
external/dumb/dumb/src/it/itrender.c:731:12: error: always_inline function '_mm_add_ps' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
temp1 = _mm_add_ps( temp1, temp2 );
^
external/dumb/dumb/src/it/itrender.c:734:12: error: always_inline function '_mm_add_ps' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
temp1 = _mm_add_ps( temp1, temp2 );
^
external/dumb/dumb/src/it/itrender.c:737:15: error: always_inline function '_mm_cvtss_si32' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
dst [i] += _mm_cvtss_si32( temp1 );
^
external/dumb/dumb/src/it/itrender.c:740:16: error: always_inline function '_mm_cvtss_si32' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
currsample = _mm_cvtss_si32( temp1 );
^
external/dumb/dumb/src/it/itrender.c:742:16: error: always_inline function '_mm_cvtss_si32' requires target feature 'mmx', but would be inlined into function 'it_filter_sse' that is compiled without support for 'mmx'
prevsample = _mm_cvtss_si32( temp1 );
^
1 warning and 12 errors generated.
http://beefy10.nyi.freebsd.org/data/113i386-default/521788/logs/errors/openomf-0.6.5_6.loghttp://beefy5.nyi.freebsd.org/data/120i386-default/521788/logs/errors/openomf-0.6.5_6.log
Approved by: ports-secteam blanket
audio/asterisk-espeak: fix build on GCC architectures
C11 compiler is required:
/usr/local/include/asterisk/lock.h: In function 'ast_atomic_fetchadd_int':
/usr/local/include/asterisk/lock.h:752: error: '__ATOMIC_RELAXED' undeclared (first use in this function)
/usr/local/include/asterisk/lock.h:752: error: (Each undeclared identifier is reported only once
/usr/local/include/asterisk/lock.h:752: error: for each function it appears in.)
/usr/local/include/asterisk/lock.h: In function 'ast_atomic_dec_and_test':
/usr/local/include/asterisk/lock.h:762: error: '__ATOMIC_RELAXED' undeclared (first use in this function)
Approved by: portmgr (build fix blanket)
audio/asterisk-flite: fix build on GCC architectures
C11 compiler is necessary:
In file included from /usr/local/include/asterisk/vector.h:22,
from /usr/local/include/asterisk/stringfields.h:178,
from /usr/local/include/asterisk/app.h:26,
from app_flite.c:42:
/usr/local/include/asterisk/lock.h: In function 'ast_atomic_fetchadd_int':
/usr/local/include/asterisk/lock.h:752: error: '__ATOMIC_RELAXED' undeclared (first use in this function)
/usr/local/include/asterisk/lock.h:752: error: (Each undeclared identifier is reported only once
/usr/local/include/asterisk/lock.h:752: error: for each function it appears in.)
/usr/local/include/asterisk/lock.h: In function 'ast_atomic_dec_and_test':
/usr/local/include/asterisk/lock.h:762: error: '__ATOMIC_RELAXED' undeclared (first use in this function)
Approved by: portmgr (fix build blanket)
x11-wm/sway: fix required wlroots version
Subproject directory not found and wlroots.wrap file not found
Subproject subprojects/wlroots is buildable: NO (disabling)
Dependency wlroots found: NO found '0.10.0' but need: '<0.10.0' ; matched: '>=0.9.0'
Run-time dependency wlroots found: NO (tried cmake)
meson.build:73:1: ERROR: Invalid version of dependency, need 'wlroots' ['<0.10.0'] found '0.10.0'.
Approved by: ports-secteam blanket
Attempt to fix build after removal of Linux c6.
- Replace build dependency on linux-c7-devtools with
USE_LINUX=devtools:build so it takes into account LINUX_DEFAULT.
- Install libusb.so.3 which is the SONAME of the library.
- Disable -Werror.
- Don't build profiling library. It's not installed and -pg and
-fstack-protector are incompatible.
- Don't let the build make parse /etc/make.conf because this may redefine
*FLAGS. The file is already handled by the ports tree.
- Create symbolic links instead of hard links.
devel/py-cfn-lint: Merge the two py27_RUN_DEPENDS
pathlib2 is needed for Python <= 3.4 according to setup.py
- Pet portlint and fix whitespace while here
Reported by: mat, portscan
Approved by: ports-secteam blanket
net-mgmt/netbox: Update to 2.6.9
* Remove two backported patches that are no longer required. [1]
* Backport a patch from upstream that fixes a regression when accessing the
API documentation.
* Update the WWW field.
Changelog:
Enhancements:
* Include direct link to rack elevations on site view
* Move virtual machine results near devices in global search
* Added copy button for API tokens
Bug Fixes:
* Prevent the deletion of a virtual chassis when a cross-member LAG
is present
* Respect custom field default values when creating objects via the REST API
* Fix exception on password change page for local users [1]
* Fix unable to assign IP to interface [1]
Approved by: ports-secteam (joneum)
games/eboard: fix build on GCC architectures
Use C++11 compiler and respect CXXFLAGS.
The compiler check is wrong so remove it.
Approved by: portmgr (fix build blanket)
Fix up file permissions in Qt ports.
Because qt-dist.mk sets EXTRACT_AFTER_ARGS, the framework-standard
--no-same-owner and --no-same-permissions aren't added. That means
that the files end up in packages with the permissions from the tarball,
and in particular that official packages contain group-writable (wheel)
includes (C++ headers) and other files.
This was reported in
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=227027
and fixed in 465911 (18 months ago) but the move from bsd.qt.mk
to Uses/qt-dist.mk lost those settings again. Re-add them to
the Uses/ file to improve package security.
(The problem does not seem to be present in my local poudriere builds)
PR: 227027
Reported by: grarpamp@gmail.com
Reviewed by: tcberner
Approved by: tcberner
Differential Revision: https://reviews.freebsd.org/D22999
Approved by: portmgr (joneum)
x11-toolkits/wlroots: unbreak nesting after r521656
An example affected use case would be running Cage on Sway in order to
contain multiple fullscreen/kiosk Firefox instances, capitalizing
on minimalistic UI.
Approved by: ports-secteam blanket
ftp/lftp: fix build on GCC architectures
C++11 compiler is necessary:
In file included from FileAccess.cc:1029:
ftpclass.h:123: error: ISO C++ forbids initialization of member 'cepr_supported'
ftpclass.h:123: error: making 'cepr_supported' static
ftpclass.h:123: error: ISO C++ forbids in-class initialization of non-const static member 'cepr_supported'
Approved by: portmgr (build fix blanket)
databases/percona57-*: Fix build for i386
Make build-script assume that FreeBSD's Clang doesn't
have "atomic_*" functions builtin implemented on i386
While here, allow to build on DragonFly BSD and
drop "-fabi-version=2" from C/CXX flags
Reported by: pkg-fallout
Approved by: ports-secteam blanket
math/gretl: fix build on GCC architectures
Since the last upgrade, gretl requires C11:
../lib/src/bhhh_max.c:37: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'Lval'
Fix this by adding USES=compiler:c11 and replacing OPENMP_USES=compiler:openmp with OPENMP_USE=GCC=yes. This sets the correct CC.
PR: 243027
Approved by: yuri (maintainer)
Approved by: portmgr (fix build blanket)
x11/mate-applets: fix build on non-x86
This is basically the same change to pkg-plist as the one done in r504600, which was later backed out for unknown reasons in r520859.
Already approved via maintainer timeout in the original PR.
Tested to fix packaging on powerpc64 and not break on amd64.
PR: 238323
Approved by: gnome (maintainer timeout)
Pointy hat: ericbsd
Approved by: portmgr (fix packaging blanket)
net/quiterss: Update to 0.19.2
Changelog: https://quiterss.org/en/article/1506
* Added: App style: dark
* Fixed: Problems with msvcp140.dll and vcruntime140.dll (Windows)
* Fixed: Images are not displayed in some feeds
* Fixed: Sometimes news filter did not work when updating feeds
PR: 242904
Submitted by: Loïc Bartoletti <lbartoletti@tuxfamily.org> (maintainer)
Approved by: ports-secteam (blanket)
Mark BROKEN
/wrkdirs/usr/ports/comms/cubicsdr/work/CubicSDR-0.2.5/src/AppFrame.cpp:3100:13: error: incomplete type 'wxToolTip' named in nested name specifier
Reported by: pkg-fallout
www/py-dj22-django-prometheus: Fix RUN_DEPENDS of REDIS option
* Assign the RUN_DEPENDS of the non-default option REDIS to the Django 2.2
variant of www/py-django-redis. This was forgotten in r504808.
* Bump PORTREVISION due package change when built with the REDIS option.
Reported by: sunpoet
Approved by: ports-secteam dependency fix blanket
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
