devel/glib20: loops over all possible file descriptors
- Stop glib from looping over all possible file descriptors.
- This should greatly increase performance
PR: 236815
Submitted by: rozhuk.im@gmail.com (committed version)
Reported by: Eugene Grosbein <eugen@freebsd.org>
- Enable PULSEAUDIO option by default so this plugin is available
in the binary package.
- While here reflow options.
Requested by: Usama Hashimi <usama.cit@gmail.com>
lang/racket-minimal: fix build on powerpc64, probably also others marked broken
Make FUTURES and JIT available everywhere to allow disabling it explicitly everywhere.
security/sssd: update to 1.16.5
This fixes several security vulnerabilities and unexpires
the port because it moves to Python 3.
PR: 241347
Submitted by: lukas.slebodnik@intrak.sk (initial patch)
Security: CVE-2018-16838
Security: CVE-2019-3811
security/sssd: fix SMB option
- use Samba 4.12 instead of the removed Samba 4.10
- use ldb 2.1 instead of ldb 2.0
While here, recognize Kerberos 1.18
PR: 250864
Submitted by: joerg (patch by Richard Frewin)
Approved by: maintainer timeout (14 days)
Wine is now able to use mingw-w64 to build components. When mingw-w64
is installed on FreeBSD, users might inadvertedly use that when we have
not set up things properly yet (and it probably should be an option to
choose, at least initially). For example, mingw-w64 produces .dll files
instead of the current .dll.so files, breaking pkg-plist.
So for now explicitly disable the use of mingw-w64. In a next step,
once mingw-w64 is available, we probably should make this an option.
PR: 237213
Reported by: Damjan Jovanovic <damjan.jov@gmail.com>
sysutils/slurm-wlm: Patch in lua 5.4 support
PR opened upstream
Make sure patch files have meaningful names
PR: 251471
Reported by: greg@unrelenting.technology
sysutils/slurm-wlm: Back out -fno-common patches, add -fcommon flag
Fixes runtime regression caused by r546150
Reported by: jrm
Approved by: blanket bug fix
databases/mariadb105-server: fix build on powerpc64
Add powerpc64 as an alternative to ppc64.
Fix crc32c the same way it was fixed already for databases/rocksdb.
Approved by: tier 2 blanket
games/rlvm: unbreak font fallback after r521445 r521451 r521458
$ rlvm /path/to/CLANNAD
Could not find msgothic.ttc or a suitable fallback font.: Please place a copy of msgothic.ttc in either your home directory or in the game path.
MFH: r552588 r553068 r553141 r554786 r554895 r555115 r556709 r556720 r556921
www/chromium: drop pkg-message which was only useful for FreeBSD <= 11.2
Phabricator: D26646
www/chromium: Update to version 85.0.4183.121
Submitted by: cem, rene
Obtained from: some patches from OpenBSD port
www/chromium: Use SNDIO instead of ALSA for audio by default
There are stuttering sound issues when using ALSA, so switch to something
that works.
PR: 250370
www/chromium: attempt to fix build on aarch64
PR: 246982
Reported by: Bob Prohaska
Approved by: portmgr (tier-2 blanket)
www/chromium: improve cpu features detection on aarch64
Approved by: portmgr (tier-2 blanket)
www/chromium: Make online detection always positive
Summary: navigator.onLine is currently broken in www/chromium. This change
introduce a workaround that always return positive for online detection.
Sponsored by: The FreeBSD Foundation
Submitted by: Ka Ho Ng <khng300@gmail.com>
Differential Revision: https://reviews.freebsd.org/D26490
www/chromium: Update to version 87.0.4280.66
Submitted by: Matthias Wolf, cem, rene
Obtained from: Some patches from OpenBSD port (robert@openbsd.org)
Unbreak INDEX
www/chromium: Update to 87.0.4280.88
https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html
Changes: https://chromium.googlesource.com/chromium/src/+log/87.0.4280.67..87.0.4280.88?pretty=fuller&n=10000
Approved by: jrm
Differential Revision: https://reviews.freebsd.org/D27452
editors/libreoffice: simplify QT5 on FreeBSD < 12 logic
- Enables QT5 by default on DragonFly
- Enables QT5 when DEFAULT_VERSIONS += ssl=openssl
- Doesn't need to be adjusted when 14.0-CURRENT appears
PR: 251450
Submitted by: jbeich
Approved by: ports-secteam (fluffy)
comms/owfs: update to 3.2p4
owfs 3.2p4 have been released, which among other things fixes a FreeBSD
build bug.
* Update 3.2p3 -> 3.2p4
* Change from USE_GITHUB to MASTER_SITES
* Remove OWFS Python bindings, as python2.7 is no longer supported in
FreeBSD and owfs python binding does not build with anything else. It is
deprecated in favour for pyownet or similar
(see https://github.com/owfs/owfs/issues/75 for more details)
* Remove owtraffic as it is now builtin.
* Add uthash build dependency (header-only)
PR: 248868
Approved by: maintainer
xorg-server: Add patches to fix security issues
Patch xorg-server (and sub ports) to fix recently discovered security isses:
CVE-2020-14360 and CVE-2020-25712.
These issues can lead to privileges elevations for authorized clients
on systems where the X server is running privileged.
Tested by: adridg, tcberner, mikael
Security: 76c8b690-340b-11eb-a2b7-54e1ad3d6335
Approved by: ports-secteam (joenum)
lang/php74: Update from 7.4.12 to 7.4.13
Core:
Fixed bug #80280 (ADD_EXTENSION_DEP() fails for ext/standard and ext/date).
Fixed bug #80258 (Windows Deduplication Enabled, randon permission errors).
COM:
Fixed bug #62474 (com_event_sink crashes on certain arguments).
DOM:
Fixed bug #80268 (loadHTML() truncates at NUL bytes).
FFI:
Fixed bug #79177 (FFI doesn't handle well PHP exceptions within callback).
IMAP:
Fixed bug #64076 (imap_sort() does not return FALSE on failure).
Fixed bug #76618 (segfault on imap_reopen).
Fixed bug #80239 (imap_rfc822_write_address() leaks memory).
Fixed minor regression caused by fixing bug #80220.
Fixed bug #80242 (imap_mail_compose() segfaults for multipart with rfc822).
MySQLi:
Fixed bug #79375 (mysqli_store_result does not report error from lock wait timeout).
Fixed bug #76525 (mysqli::commit does not throw if MYSQLI_REPORT_ERROR enabled and mysqlnd used).
Fixed bug #72413 (mysqlnd segfault (fetch_row second parameter typemismatch)).
ODBC:
Fixed bug #44618 (Fetching may rely on uninitialized data).
Opcache:
Fixed bug #79643 (PHP with Opcache crashes when a file with specific name is included).
Fixed run-time binding of preloaded dynamically declared function.
OpenSSL:
Fixed bug #79983 (openssl_encrypt / openssl_decrypt fail with OCB mode).
PDO MySQL:
Fixed bug #66528 (No PDOException or errorCode if database becomes unavailable before PDO::commit).
Fixed bug #65825 (PDOStatement::fetch() does not throw exception on broken server connection).
SNMP:
Fixed bug #70461 (disable md5 code when it is not supported in net-snmp).
Standard:
Fixed bug #80266 (parse_url silently drops port number 0).
PR: 251396
Submitted by: Pascal Christen <pascal.christen@hostpoint.ch>
x11-servers/xwayland-devel: update to 1.20.0.789
- Use -D${PORTNAME}=true to denote the only X server enabled
- Annotate do-install target is a workaround
Changes: 96d19e898...446ff2d31
sysutils/moosefs2-master: fix build of client on GCC architectures
sustained_inodes.c: In function 'sinodes_pid_inodes':
sustained_inodes.c:224: error: 'struct kinfo_file' has no member named 'kf_un'
sustained_inodes.c:225: error: 'struct kinfo_file' has no member named 'kf_un'
devel/ruby-subversion: fix build on GCC architectures
Ruby needs newer compiler:
subversion/bindings/swig/ruby/libsvn_swig_ruby/swigutil_rb.c: In function 'callback_rescue':
subversion/bindings/swig/ruby/libsvn_swig_ruby/swigutil_rb.c:1628:38: error: 'ruby_errinfo' undeclared (first use in this function); did you mean 'rb_errinfo'?
1628 | ruby_errinfo,
graphics/kmscube: add new port
kmscube is a little demonstration program for how to drive bare metal
graphics without a compositor like X11, Wayland or similar, using
DRM/KMS (kernel mode setting), GBM (graphics buffer manager) and EGL
for rendering content using OpenGL or OpenGL ES.
https://gitlab.freedesktop.org/mesa/kmscube
lang/quickjs: fix build on GCC architectures
Don't use Clang if we need to use GCC
PR: 251030
Approved by: yuri (maintainer timeout)
Approved by: portmgr (fix build blanket)
mail/exim: import exim-4.94+fixes branch as state of 2020.11.25
Used git diffs:
[38/42] GnuTLS: clear errno before any data i/o op, so error logging does not see stale values
[39/42] Fix non-TLS build
[40/42] eximon: fix FreeBSD build
[41/42] LDAP: fix taint-check in server list walk. Bug 2646
[42/42] Pass authenticator pubname through spool. Bug 2648
Also patch files/150.exim-tidydb to prevent its output when daily_show_success=NO. [1]
Submitted by: Dmitry Selivanov <sd@rlan.ru> via email [1]
Approved by: ports-secteam (with hat on)
textproc/bsdgrep: fix the build on recent -CURRENT
A seatbelt was added to throw a warning if a "SUBDIR." variable appeared
non-empty, since that indicates something was trying to expand a MK_
variable most likely and either opts.mk wasn't included or the name of the
variable used is wrong.
In this particular case, we're repackaging a part from base. I had stripped
the src.opts.mk include but hadn't thought to replace it with bsd.opts.mk
for userlandy stuff.
This also goes as far as fixing the test build, but doesn't yet hook up the
tests. On FreeBSD <13 these need a kyua/atf test dep, but I'd like to do a
sweep and see if there are any other ports (e.g. from NetBSD base or FreeBSD
base) that also have a dependency to weigh in on if this should just be a
one-off osversion check or a kyua/atf USES.
Approved by: ports-secteam (implicit, build fix)
net-mgmt/pushgateway: Update to 0.10.0
This release changes the storage format. v0.10 can read the storage format
of v0.5–v0.9. It will then persist the new format so that a downgrade
won't be possible anymore[1].
[1] https://github.com/prometheus/pushgateway/releases/tag/v0.10.0
For this port 0.10.0, it is intended to replace it with a version >= 1.3.x
from about four weeks on. So there will be four weeks for the migration.
PR: 250587
Submitted by: Gabriel Dutra <0xdutra@gmail.com> (new maintainer)
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D27165
Approved by: ports-secteam (fluffy)
Approved by: portmgr (with hat)
www/gitea: Update to 1.12.5
Changes: https://github.com/go-gitea/gitea/releases/tag/v1.12.5
PR: 250372
Approved by: maintainer
www/gitea: Update to 1.12.6
SECURITY
Prevent git operations for inactive users (#13527) (#13537)
Disallow urlencoded new lines in git protocol paths if there is a port (#13521) (#13525)
BUGFIXES
API should only return Json (#13511) (#13564)
Fix before and since query arguments at API (#13559) (#13560)
Prevent panic on git blame by limiting lines to 4096 bytes at most (#13470) (#13492)
Fix link detection in repository description with tailing ‘_’ (#13407) (#13408)
Remove obsolete change of email on profile page (#13341) (#13348)
Fix permission check on get Reactions API endpoints (#13344) (#13346)
Add migrated pulls to pull request task queue (#13331) (#13335)
API deny wrong pull creation options (#13308) (#13327)
Fix initial commit page & binary munching problem (#13249) (#13259)
Fix diff parsing (#13157) (#13136) (#13139)
Return error 404 not 500 from API if team does not exist (#13118) (#13119)
Prohibit automatic downgrades (#13108) (#13111)
Fix GitLab Migration Option AuthToken (#13101)
GitLab Label Color Normalizer (#12793) (#13100)
Log the underlying panic in runMigrateTask (#13096) (#13098)
Fix attachments list in edit comment (#13036) (#13097)
Fix deadlock when deleting team user (#13093)
Fix error create comment on outdated file (#13041) (#13042)
Fix repository create/delete event webhooks (#13008) (#13027)
Fix internal server error on README in submodule (#13006) (#13016)
PR: 251296
Submitted by: maintainer
Security: https://github.com/go-gitea/gitea/pull/13527https://github.com/go-gitea/gitea/pull/13521
gecko: bump LLVM_DEFAULT to 11
Detach from tree-wide default as coordinating with other maintainers
is expensive for little gain. User's choice is still respected.
llvm11 has better Tier2 support, more optimizations, reduces package size
and aligns with what contributors dogfood.
Approved by: ports-secteam blanket
astro/siril: Fix run-time error: Undefined symbol "cblas_dcopy"
This was because math/gsl installs 2 libraries, libgsl.so and
libgslcblas.so, the former of which should depend on the latter one.
Instead, the gsl package through its pkg-config script asks users to
link to both libraries. This fails when the link line also has
-Wl,--as-needed which causes the linker to drop the second library.
In such case the above error is triggered at runtime.
Also update WWW.
PR: 251206
Submitted by: Ned Leitch <ned.leitch+freebsd@gmail.com>
Approved by: ports-secteam (fluffy)
cad/ktechlab: fix build on GCC architectures
The compiler feature "cxx_decltype" is not known to CXX compiler
"GNU"
version 4.2.1.
Approved by: portmgr (fix build blanket)
security/wolfssl: fix build on big-endian
Merge upstream patch to fix build on big-endian architectures.
Also unmark mips and mips64 as broken, now builds fine.
Approved by: portmgr (fix build blanket)
math/labplot: update to 2.8.1
We’re happy to announce the availability of the first minor patch release of
the big release we made two months ago. This release contains minor
improvements and bug fixes only.
Announcement:
https://labplot.kde.org/2020/11/13/labplot-2-8-1-released/
Approved by: ports-secteam (fluffy)
databases/mantis: update 2.24.2 -> 2.24.3, fix 3 CVEs
- submitter takes maintainer
- added files/patch-.imgbotconfig
original exists in git repo but not included in official 2.24.3 package,
there might be some users with configured imgbot depending on it and
there is a PLIST_FILES entry in Makefile
QA:
- run-tests are fine, no functional changes
- database schema: unchanged (checked on pg-12)
PR: 251141
Submitted by: Zoltan Alexanderson Besse <zab@zltech.eu>
Relnotes: https://mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.24.3
Security: CVE-2020-25781, CVE-2020-25288, CVE-2020-25830
Approved by: ports-secteam (security blanket)
lang/intel-compute-runtime: work around crash on exit after r543389
$ clinfo
[...]
Abort was called at 243 line in file: shared/source/os_interface/linux/drm_neo.cpp
Approved by: ports-secteam blanket
mail/cclient: Unbreak in 11.4 and 12.2
Dimitry sent a more generic patch that workarounds the problem in mail/cclient
instead of its consumers.
Related to r554904.
PR: 250740
Submitted by: dim@FreeBSD.org
Reported by: colin@fbug.ksac.uk
Approved by: ports-secteam (blanket, build fix)
r554647:
Remove the MMEDIA option
openoffice depends on the expired gstreamer 0.10 for multimedia support,
gstreamer 0.10 is about to be removed from the ports tree, let's remove the
option in preparation for that
r554693:
Upgrade editors/openoffice-4 to version 4.1.8.
Fix bugs in LICENSE_FILE extraction.
Don't pass LD_FLAGS to the inner make. It can cause problems.
Many of our local patches have been upstreamed.
Fix CVE-2020-13958.
Approved by: ports-secteam (fluffy)
Security: 4f15ca7b-23ae-11eb-9f59-1c1b0d9ea7e6
- update to 3.5.8
- shut up sed_checked.sh (it is not really helpful with RE replacements on 140+ files with 50% hit rate)
Approved by: portmgr (riggs)
mail/rainloop: fix position of double quote
This rode in back in r541184 (2020/07/04) and is clearly bogus, but somehow
hasn't been an issue until now. Move the quotation mark outside of the right
brace.
Approved by: portmgr (implicit, just-fix-it)
Approved by: ports-secteam (implicit, just-fix-it)
databases/mysql80-server: fix build on GCC architectures
Include sys/types.h to make u_int32_t available:
/usr/include/netinet/ip6.h:77:4: error: 'u_int32_t' does not name a type; did you mean 'uint32_t'?
Approved by: portmgr (fix build blanket)
security/titus: fix build on GCC architectures
Linking fails when passing -L/usr/lib when gcc9 is used because /usr/lib/ is taken over gcc9's libs.
Approved by: portmgr (fix build blanket)
Fix the conditional added in r554175
This should have been caught by my poudriere testruns. Sorry for the
breakage.
PR: 249974
Approved by: portmgr (build fix)
This is the blanket-approved safe part of PR 250925,
as partial MFH r554447.
Let's give the pidfile changes in 6.4.13 some time to mature before
MFH'ing them.
PR: 250691
PR: 250925 (partial MFH)
Submitted by: Corey Halpin (maintainer)
Approved by: ports-secteam@ (blanket for single-line tested fixes)
games/vkquake: don't try to open Steam urls
PR: 250387
Submitted by: Alex S
Approved by: Greg V (maintainer)
Approved by: ports-secteam blanket (reliability fix)
deskutils/gnome-contacts: fix build on GCC architectures
Use C11 compiler:
In file included from /usr/local/include/libhandy-1/handy.h:50,
from src/gnome-contacts.p/contacts-addressbook-dialog.c:26:
/usr/local/include/libhandy-1/hdy-swipe-tracker.h:23: error: redefinition of typedef 'HdySwipeTracker'
/usr/local/include/libhandy-1/hdy-types.h:15: error: previous declaration of 'HdySwipeTracker' was here
Approved by: portmgr (fix build blanket)
math/cantor: Support ptyhon3.9
- instead of adding 'python3.9' to the list, simply patch in
python-${PYTHON_VER} -- this way, this should fix two issues
1) make it work with python
2) help cmake find the "wanted" python version in unclean environments
PR: 250884
Reported by: Oleg Sidorkin <osidorkin@gmail.com>, fluffy (previously)
Approved by: ports-secteam (implicit)
Update KDE Apps to 20.08.3
Some of our projects release on their own timescale and some get released
en-masse. The 20.08.3 bundle of projects was released today with dozens of
bugfixes and will be available through app stores and distros soon. See the
20.08.3 releases page for details.
Some of the fixes in today’s releases:
* Gwenview no longer accidentally shows the thumbnail view as a separate window with newer Qt versions
* Sending SMS with KDEConnect has been restored
* Fixed a possible Okular crash when selecting text in annotations
Announcement:
https://kde.org/announcements/releases/2020-11-apps-update/
Changelog:
https://kde.org/announcements/fulllog_releases-20.08.3/
Approved by: ports-secteam (fluffy)
devel/binutils: Apply upstream patch to fix "undefined symbol:
bswap_identity_64" and similar errors, when building devel/binutils in
certain environments.
This has been sitting in a bug for almost a year now without any action,
which is why I am committing it now.
Approved by: ports-secteam (fluffy)
PR: 242053
x11-toolkits/scintilla: Update to 4.4.5
* Update Makefile (add PATCH_WRKSRC because I needed to patch some files
outside of WRKSRC, add some GNOME Uses that poudriere complained about,
remove the pseudo-versioning because it was never being done in the actual
compilation anyways, add a way to get a debug build)
* Update distinfo
* Correct URL in pkg-descr
* Remove patch-makefile (due to the PATCH_WRKSRC change)
* Add patch-gtk_makefile (due to the PATCH_WRKSRC change) and
patch-lexilla_src_makefile
* Add patch-src_PositionCache.h, patch-src_Style.cxx and patch-src_Style.h,
temporary patches for this version until 4.4.6 comes out to fix compilation
with newer compilers
* Update pkg-plist
Use of ASAN is removed from the build as it was causing an ASAN error for me
when trying to run SciTE within a VM due to libGL (which isn't compiled with
ASAN, nor is the FreeBSD base system libraries), and the author of Scintilla
and SciTE said that it was fine to remove (his thought being that normally
Scintilla and SciTE aren't built with Clang, but since it is the default
compiler for FreeBSD and I want the software to work, it is better to just not
enable ASAN until it is enabled everywhere.
The removal of the version number on the libraries was due to consensus on IRC
in #bsdports that it wasn't necessary if the software was not originally doing
so in the first place.
Changelog:
https://www.scintilla.org/ScintillaHistory.html
PR: 250663
Submitted by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)
Approved by: ports-secteam (fluffy)
Get the patch which fixes the --livereload flag
Otherwise, Jekyll fails with the following error:
/usr/local/lib/ruby/gems/2.6/gems/rb-kqueue-0.2.5/lib/rb-kqueue/event.rb:80:in `callback!': undefined method `callback!' for nil:NilClass (NoMethodError)
PR: 250432
Approved by: maintainer timeout
Approved by: portmgr (runtime fix blanket)
mail/fetchmail: Fix shell's 'Bad -c option' in rcscript.
Turns out that our fetchmail_dump_config() function needs to add
one more level of quoting because it's being unquoted and word split
twice, once by su's shell, and again by sh.
While here, change sh to /bin/sh to make the intention clearer.
Bump PORTREVISION to get the fix out onto the systems.
PR: 250691
Reported by: Helmut Ritter <freebsd-ports@charlieroot.de>
Approved by: chalpin@cs.wisc.edu
Approved by: ports-secteam@ (blanket, one-line tested working fix, 4-eyes principle)
lang/luajit: switch to LLVM10 from ports for 12.1/amd64
12.1 shipped with LLVM 8.0.1 which links libluajit with a bogus (improperly
aligned) TLS segment offset. Notably, this breaks under 12.2 rtld and causes
a SIGBUS when an error is raised.
Since the issue is technically a broken binary, the attached patch pins
12.1/amd64 builds of luajit to devel/llvm10 so that they can be rebuilt with
a linker that will handle this properly and stop breaking luajit-dependant
applications on 12.2 while the packages are still built on 12.1. This will
naturally fall away when portmgr goes to axe conditionals solely for FreeBSD
12.1 after it goes EOL.
The src/Makefile patch has been dropped in this version in favor of just
supplying the variables it was unsetting via Make arguments as a minor
cleanup.
PR: 250707, 250726
Reported by: many
Investigation by: Andrew Gierth <andrew tao11 riddles org uk>
Confirmation from: kib
Approved by: osa (maintainer)
Approved by: ports-secteam (implicit, runtime fix)
gecko: unbreak with non-default CC/CXX
checking for clang for bindgen... not found
checking for libclang for bindgen... not found
ERROR: Could not find clang to generate run bindings for C/C++. Please install the necessary packages, run `mach bootstrap`, or use --with-clang-path to give the location of clang.
checking for llvm-objdump... not found
DEBUG: llvm_objdump: Trying llvm-objdump
ERROR: Cannot find llvm-objdump
Reported by: pkg-fallout (powerpc64)
Approved by: ports-secteam blanket
devel/llvm10: really fix the AT_EXECPATH fallback =(
It turns out that I made not one but *two* mistakes in applying this patch
from the version that I had sent upstream. This one is not an extra
semicolon, but rather not dereferencing p... p may never hit AT_NULL, but *p
certainly will.
The problem was isolated and the fix identified + tested by Andrew Gierth.
Reported by: Andrew Gierth <andrew_tao173 riddles org uk>
Approved by: ports-secteam (blanket: runtime fix)
net/unison232: isolate self-test from pre-existing $HOME
On the "exp - 121amd64-default-build-as-use" builder, $HOME appears
to be /nonexistent, and this jeopardizes the self-test.
Feed the selftest mktemp -d as its HOME so it doesn't read from,
or pollute, the actual building user's home directory.
Thanks to: pkg-fallout, kevans, rhtoad.
No PORTREVISION bump as this is purely a build-time fix.
Approved by: ports-secteam (blanket, tested one-line fix to unbreak builds in certain configurations)
audio/musescore: fix build on GCC architectures
FreeBSD is not Linux. For some reason this builds with Clang but not GCC.
Approved by: portmgr (fix build blanket)
Approved by: portmgr (with hat)
news/sabnzbdplus: Back out r553378
Feedburner needs to be a hard dependency, and the version currently
in ports is incompatible.
PR: 250411, 250380
deskutils/recoll: fix build on GCC architectures
Include sys/types.h to make necessary types available:
utils/fstreewalk.cpp:51:5: error: 'dev_t' does not name a type; did you mean 'div_t'?
Approved by: portmgr (fix build blanket)
deskutils/syncthingtray: fix build on GCC architectures
Use C++11 compiler:
The compiler feature "cxx_decltype" is not known to CXX compiler
"GNU"
version 4.2.1.
Approved by: portmgr (fix build blanket)
security/modsecurity3: include unicode.mapping in package
This is included in the distribution and referenced in the default
configuration that's installed, but hasn't been included in the package. Do
so now.
PR: 250669
Submitted by: Marius Halden <marius halden modirum com> (maintainer)
Approved by: ports-secteam (implicit, packaging fix)
audio/ardour6: fix build on GCC architectures
Undefine _POSIX_SOURCE to make macros in errno.h available:
/usr/local/lib/gcc9/include/c++/powerpc64-portbld-freebsd12.1/bits/error_constants.h:42:40: error: 'EAFNOSUPPORT' was not declared in this scope
42 | address_family_not_supported = EAFNOSUPPORT,
| ^~~~~~~~~~~~
/usr/local/lib/gcc9/include/c++/powerpc64-portbld-freebsd12.1/bits/error_constants.h:43:28: error: 'EADDRINUSE' was not declared in this scope
43 | address_in_use = EADDRINUSE,
| ^~~~~~~~~~
Also tested to build with Clang.
Approved by: portmgr (fix build blanket)
emulators/jzintv: fix build on GCC architectures
Use C++11 compiler:
imasm/parser.cpp:1005: error: 'nullptr' was not declared in this scope
Approved by: portmgr (fix build blanket)
sysutils/rundeck3: Update to bugfix release 3.3.5
Also:
- Added a new master site and made it primary
(the Rundeck download page also links to bintray)
- Removed the pkg-plist file and added the contents to the Makefile
- Added OpenJDK 11 to JAVA_VERSION (it's supported by Rundeck since 3.3.0)
PR: 250504
Submitted by: Daniel Tihanyi <daniel.tihanyi@tetragir.com> (maintainer)
Approved by: ports-secteam (fluffy)
Backport upstream fix for OCaml 4 to avoid SIGSEGV
Unison 2.32.x consistently crashes on startup after reading its configuration
file with a SIGSEGV and does not serve its purpose at all.
Pull in upstream fix from
891c081690 (diff-4117bab3eb479a1766c95c36bb61dd35c817a76e57f9c4c9a430948f504453de)
Suggested by madpilot@ in https://reviews.freebsd.org/D26924#600631
While here, run the selftest as part of the build to catch such issues
in the future and receive pkg-fallout@ mail.
While here, also remove MAKE_JOBS_UNSAFE.
Bump PORTREVISION to trigger a rebuild and flush out the broken packages.
(The absence of bug reports however suggests that unison 2.32 is no longer
used or needed widely.)
Obtained from: Benjamin Pierce's upstream repo (madpilot@)
Approved by: ports-secteam (blanket, unbreak broken program, single patch)
Fix crash on close due to a signal handler on VTE widget being fired
after the widget is destroyed.
PR: 250403
Submitted by: Hodong <hodong@nimfsoft.com>
Approved by: ports-secteam (joneum)
devel/libindicator: fix build on powerpc64 elfv1 and remove stale CFLAGS
Build on both elfv1 and elfv2 passes fine. Other architectures are untested, but they currently don't have Rust available, making build impossible.
Require newer GCC to build on elfv1:
cc1: warnings being treated as errors
In file included from /usr/local/include/glib-2.0/glib/gthread.h:34,
from /usr/local/include/glib-2.0/glib/gasyncqueue.h:32,
from /usr/local/include/glib-2.0/glib.h:32,
from /usr/local/include/gtk-3.0/gdk/gdkconfig.h:13,
from /usr/local/include/gtk-3.0/gdk/gdk.h:30,
from /usr/local/include/gtk-3.0/gtk/gtk.h:30,
from indicator-loader.c:25:
/usr/local/include/glib-2.0/glib/gutils.h:336: warning: 'GVoidFunc' is deprecated
Approved by: portmgr (fix build blanket)
audio/lvtk: fix build on GCC architectures
Use C++11 compiler:
/wrkdirs/usr/ports/audio/lvtk/work/lvtk-2.0.0rc1-14-g1028f69/lvtk/lvtk.hpp:186: error: ISO C++ forbids declaration of 'data_ptr_t' with no type
Approved by: portmgr (fix build blanket)
security/dropbear: change in rc DSS to ed25519
dropbear no longer supports DSS keys, use ed25519 instead. rc file needs to be updated.
currently starting dropbear fails with error:
% service dropbear start
...
Unknown key type 'dss'
...
Submitted by: waitman@waitman.net
PR: 250192
Approved by: portmgr (runtime fix)
print/ghostscript9-base: prepare for freetype2 update
- Backport of the same patch applied to print/ghostscript9-agpl-base
PR: 250375
Obtained from: https://www.openwall.com/lists/oss-security/2020/10/20/7
Security: CVE-2020-15999
Approved by: ports-secteam (implicit)
net-mgmt/icinga2: Update to 2.12.1 which fixes a long standing bug in distributed setups on FreeBSD + OpenBSD
PR: 240812
Approved by: ports-secteam (joneum)
emulators/qemu50: fix build on GCC architectures
Adding -L/usr/lib make gcc from ports prefer /usr/lib instead of its own /usr/local/lib/gcc9, which makes build fail:
/usr/local/bin/ld: accel/tcg/tcg-runtime.o: in function `clrsb32':
/wrkdirs/usr/ports/emulators/qemu50/work/qemu-5.0.0/include/qemu/host-utils.h:211: undefined reference to `__clrsbdi2'
Tested for no breakage on 12.1/i386, 12.2/amd64 and 13.0/powerpc64.
Approved by: portmgr (fix build blanket)
devel/avarice: fix build on GCC architectures
jtag3io.cc: In member function 'virtual void jtag3::deviceAutoConfig()':
jtag3io.cc:579: error: a function-definition is not allowed here before '{' token
jtag3io.cc:775: error: expected `}' at end of input
jtag3io.cc:775: error: expected `}' at end of input
Approved by: portmgr (fix build blanket)
net/openbgpd6: update 6.6.0 -> 6.8.0, fix -fno-common
6.8.0:
- In bgpctl(8), the "reload" command now takes a 'reason' argument
to use as Administrative Shutdown Communication to its neighbors.
- Added bgpctl(8) support for VPNv6 in the family option of the
"show rib" command.
- Added bgpctl(8) support for JSON formatted output in various
"show" commands.
- Support to build OpenBGPD on Alpine Linux added
6.7.0:
- Add initial support for JSON output in bgpctl(8).
- Allow setting both IPv4 and IPv6 local-addresses at the same
time in bgpd.conf group blocks. Introduced 'no local-address'
to reset a previously set local address.
- Properly aggregate duplicate bgpd(8) roa table prefix/source-as
combinations into a single entry with the longest maxlen length.
- Implemented bgpd.conf(5) max-prefix NUM out to limit the number
of announced prefixes, avoiding leaks of full tables to upstreams
and peers.
- Extended bgpctl(8) 'show neighbor' to include the received and set
prefix count, as well as the max-prefix out limit if set.
- Improved reporting of notifications to include the suberror cause.
- Also report the last received error cause in bgpctl(8) show neighbor
output.
- Fix softreconfig out handling to also work for neighbors using
'export default-route'.
- Mark stale prefixes in the Adj-RIB-Out so that graceful reload
operates properly.
- Made it possible to build OpenBGPD-portable with bison. There is
no longer the need to use byacc on Linux distributions.
- Support for --runstatedir to specify the location of the bgpctl.sock.
- Cleaned up configure script for better protability.
See also:
https://github.com/openbgpd-portable/openbgpd-portable/issues/8
PR: 250274
Approved by: ports-secteam (fluffy)
misc/iio-oscilloscope: fix build on GCC architectures
Use C11 compiler:
cc1: warnings being treated as errors
In file included from /usr/local/include/glib-2.0/glib/gthread.h:34,
from /usr/local/include/glib-2.0/glib/gasyncqueue.h:32,
from /usr/local/include/glib-2.0/glib.h:32,
from /usr/local/include/glib-2.0/gmodule.h:28,
from /wrkdirs/usr/ports/misc/iio-oscilloscope/work/iio-oscilloscope-0.11-master/iio_utils.h:11,
from /wrkdirs/usr/ports/misc/iio-oscilloscope/work/iio-oscilloscope-0.11-master/iio_utils.c:1:
/usr/local/include/glib-2.0/glib/gutils.h:336: warning: 'GVoidFunc' is deprecated
Also remove previous patches that fixed build with base GCC of previous version of the port.
Approved by: portmgr (fix build blanket)
devel/redo: fix build on GCC architectures
Use C++11 compiler:
popt.h:124: error: 'nullptr' was not declared in this scope
Approved by: portmgr (fix build blanket)
databases/postgresql13-server: fix build on GCC architectures
Add the previously removed disabling of LLVM when it's not in base.
databases/postgresql13-server: fix build on clang architectures
Move LLVM option configuration after including bsd.port.options.mk.
Reported by: kib@
databases/postgresql13-server: make LLVM option unselectable
This will still keep this port and its slaves buildable on the package builder on powerpc64, and I doubt anyone uses it on mips*.
Reported by: kib@, adamw@
Fix options breakage from r551702.
Make LLVM option work again on everything but powerpc64.
PR: 250346
Submitted by: Christian Ullrich
Approved by: portmgr (fix build blanket)
devel/llvm10: fix the patch added in r552764
A stray semicolon would cause llvm binaries to segfault as they
always get the wrong "executable path" on 12.1/11.4. Only test built on
-CURRENT, which doesn't use this path. =(
Pointy hat: kevans
PR: 250478, 250448
Approved by: ports-secteam (implicit, build fix)
sysutils/restserver: use go modules by default
Security: previous MFH from r552570 fails to build in freebsd ports build cluster
Sponsored by: SkunkWerks, GmbH
Approved by: ports-secteam
devel/llvm10: fix hand-rolled AT_EXECPATH search for older FreeBSD
This was committed in base r360875 and upstream 21e5e1724, which was after
LLVM10 branched and has not been backported.
This failure would only have been noticed if AT_EXECPATH was missing, and
qemu-user-static does not currently provide AT_EXECPATH. As such, any
execution of llvm10 binaries under qemu-user-static immediately segfaulted.
Reported by: Daniel Tihanyi <daniel.tihanyi@tetragir.com>, jbeich
Approved by: brooks (maintainer)
Approved by: ports-secteam (fluffy)
mail/fetchmail: avoid rc.conf overriding daemon interval, many other fixes
Authors: CH = Corey Halpin, MA = Matthias Andree
- fetchmail's rc script now queries the daemon interval from the
configuration, and falls back to the rc.conf value if given. [CH]
- Similarly, the logging facility will be taken from the configuration [MA]
- Add documentation to the rcfile's header comments. [MA]
- Drop support for fetchmail_home_prefix in rc.conf, and query the
respective users' home directories with getent instead. [MA]
- In the rc scripts, redirect input from /dev/null so it will not ask
for passwords. [MA]
- Add support for the typical 12.1 rc.conf ${name}_... keywords. [MA]
- Make script execution easier to follow by simplifying if...else logic. [CH]
- Fix rcscript's exit code to be 1 if one of the per-user calls fails. [CH]
- Add relevant notes to UPDATING. [MA]
PR: 249860
Submitted by: Corey Halpin (maintainer)
Reported by: Chris James (on fetchmail-users mailing list)
Approved by: Corey Halpin (maintainer)
mail/fetchmail: fix rcscript regression from _1 that broke global mode
In a situation where fetchmail is to be started globally with the
configuration in $LOCALBASE/etc, the rc.d file would try to run
fetchmail for the wrong user.
Simplify script more, avoiding recursive call in single-user mode.
Submitted by: Corey Halpin (maintainer, direct mail to mandree@)
Reported by: Armin Tüting
Approved by: Corey Halpin (maintainer on MFH, direct mail to mandree@)
Approved by: ports-secteam@ (fluffy@)
net/iplog: DEPRECATE Unmaintained and dead upstream
This port only build in 12 because for some reason uses clang 8 to build. It
does not build in 11 or 13-CURRENT. Even in 12 it shows tons of dangerous
warnigns due to bad formed castings[1].
The project is also abandoned upstream so we better mark this for removal.
[1] https://docs.freebsd.org/cgi/getmsg.cgi?fetch=46148465+0+current/freebsd-pkg-fallout
Submitted by: udo@schweigert-muc.de (maintainer)
Approved by: ports-secteam (fluffy@)
sysutils/restic: Update to 0.10.0
ChangeLog:
https://github.com/restic/restic/releases/download/v0.10.0/restic-0.10.0.tar.gz
* Fix: Report correct number of directories processed by backup
* Fix: Fix tar issues when dumping /
* Fix: Handle format verbs like '%' properly in find output
* Fix: Do not hang when run as a background job
* Fix: Fix mangled json output of backup command
* Fix: Refresh lock timestamp
* Fix: Backup --json reports total_bytes_processed as 0
* Fix: Fix incorrect bytes stats in diff command
* Fix: Do not crash with Synology NAS sftp server
* Fix: Fix incorrect size calculation in stats --mode restore-size
* Fix: Fix incorrect file counts in stats --mode restore-size
* Fix: SFTP backend supports IPv6 addresses
* Fix: Honor RESTIC_CACHE_DIR environment variable on Mac and Windows
* Fix: Don't abort the stats command when data blobs are missing
* Fix: Add stricter prune error checks
* Fix: Fix possible crash in the progress bar of check --read-data
* Chg: Remove vendored dependencies
* Chg: Return exit code 3 when failing to backup all source data
* Chg: Update dependencies, require Go >= 1.13
* Chg: Honor the --no-lock flag in the mount command
* Enh: Support specifying multiple host flags for various commands
* Enh: Optimize restic mount
* Enh: Display snapshot date when using restic find
* Enh: Allow specifying user and host when creating keys
PR: 249485
Submitted by: massimo@datacode.it
Approved by: gregf@hugops.pw (maintainer, timeout > 1 month)
Approved by: ports-secteam (blanket, bug fixes)
security/py-python-nss: unbreak after r552532
In file included from src/py_nss.c:341:
src/py_nss.h:126:3: error: typedef redefinition with different types ('struct RSAPublicKey' vs 'struct RSAPublicKeyStr')
} RSAPublicKey;
^
/usr/local/include/nss/blapit.h:281:32: note: previous definition is here
typedef struct RSAPublicKeyStr RSAPublicKey;
^
In file included from src/py_nss.c:341:
src/py_nss.h:136:3: error: typedef redefinition with different types ('struct DSAPublicKey' vs 'struct DSAPublicKeyStr')
} DSAPublicKey;
^
/usr/local/include/nss/blapit.h:323:32: note: previous definition is here
typedef struct DSAPublicKeyStr DSAPublicKey;
^
Reported by: pkg-fallout
Approved by: ports-secteam blanket
emulators/{citra,yuzu}: update OSS patches
No actual changes this time. Only switching away from a deleted fork
merge commit to upstream master branch. The former may become invalid
in future (e.g., due to "git gc") and break build.
Changes: 40865a6..a7e83aa
Approved by: ports-secteam blanket (reliability fix)
KDE Release Service 20.08.2 update
Dozens of KDE apps are getting new releases from KDE’s release service. New
features, usability improvements, re-designs and bug fixes all contribute to
helping boost your productivity and making this new batch of applications more
efficient and pleasant to use.
Approved by: ports-secteam (joneum)
devel/libvirt: use flavored py-docutils in right way
PR: 250344
Submitted by: fluffy
Approved by: maintainer (novel)
Approved by: ports-secteam (fluffy)
Revert meld update to 3.21.0. This version requires pygobject 3.30
which is not present in the ports tree and fails to start at runtime.
Bump PORTEPOCH.
Reviewed by: bapt
Approved by: bapt, portmgr (fixit)
Differential Revision: https://reviews.freebsd.org/D26775
Approved by: portmgr (implicit, runtime fix)
sysutils/lsof: replace architecture check with compiler check
This issue happens only when GCC is in use, it doesn't happen with clang. Since the package changes, bump PORTREVISION.
This also fixes build on e.g. mips64 stable/12.
Approved by: portmgr (fix build blanket)
sysutils/lsof: fix build on 12.2-RC2 on powerpc(64)
Link also to libzfs:
/usr/lib/libzpool.so: undefined reference to `get_system_hostid'
Approved by: portmgr (fix build blanket)
audio/infamous-plugins-lv2: Update 0.3.0 -> 0.3.0-7; Unbreak build that was broken when audio/lv2 was upgraded to 1.18.0.
Approved by: ports-secteam (fluffy)
security/heaan: fix build on GCC architectures
Patch created manually, because WRKSRC differs.
Add include sys/time.h:
In file included from ../src/TestScheme.cpp:20:
../src/TimeUtils.h:20:17: error: field 'startTime' has incomplete type 'timeval'
20 | struct timeval startTime, stopTime;
| ^~~~~~~~~
Approved by: portmgr (fix build blanket)
ports-mgmt/pkg: Update to 1.15.7
Changes from 1.15.6 to 1.15.7:
- Fix %# expand in script
Approved by: bapt (implicit)
Update to 1.15.8
Fixes a typo which results in pkg ignoring some lua script in some particular
circumpstancies: shell script also available in certain types
ports-mgmt/pkg: Update to 1.15.9
Changes from 1.15.8 to 1.15.9:
- lua_pkg_copy when copying a symlink
PR: 248314
Approved by: bapt (implicit)
ports-mgmt/pkg: Update to 1.15.10
Add a workaround for https://bugs.freebsd.org/250271
PR: 250059
Approved by: bapt (implicit)
security/tpm2-tools: fix build on GCC architectures
Use C11 compiler:
tools/tpm2_tool.c:92: error: 'tpm2_option_flags' has no member named 'verbose'
tools/tpm2_tool.c:103: error: 'tpm2_option_flags' has no member named 'quiet'
tools/tpm2_tool.c:116: error: 'tpm2_option_flags' has no member named 'enable_errata'
Approved by: portmgr (fix build blanket)
www/rt44: add dependency on textproc/p5-Pod-Parse
Add dependency on textproc/p5-Pod-Parse:
RT::Shredder::POD uses Pod::Select, which is provided by textproc/p5-Pod-Parser
PR: 250197
Reported by: David Siebörger
Approved by: portmgr (fix runtime blanket)
www/rt50: add dependency on textproc/p5-Pod-Parse
Add dependency on textproc/p5-Pod-Parse:
RT::Shredder::POD uses Pod::Select, which is provided by
textproc/p5-Pod-Parser
While here, fix rt-test-dependencies by providing the correct path
PR: 250197
Reported by: David Siebörger
Approved by: portmgr (fix runtime blanket)
Palp 2.12 has been rerolled on Aug. 26th, but only uploaded some days ago.
Full diff is available at:
<https://people.freebsd.org/~thierry/palp-2.12_20200819_20200826.diff>:
it contains changes in puts/printf and in makefile, which now requires gmake.
Approved by: portmgr (blanket, fix breakage)
finance/beancount: fix build on GCC architectures
Use C11 compiler:
beancount/parser/lexer.c:172: error: redefinition of typedef 'yyscan_t'
beancount/parser/parser.h:11: error: previous declaration of 'yyscan_t' was here
Approved by: portmgr (fix build blanket)
lang/php74: Update from 7.4.10 to 7.4.11
Core:
Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-` cookies can be sent). (CVE-2020-7070)
Fixed bug #79979 (passing value to by-ref param via CUFA crashes).
Fixed bug #80037 (Typed property must not be accessed before initialization when __get() declared).
Fixed bug #80048 (Bug #69100 has not been fixed for Windows).
Fixed bug #80049 (Memleak when coercing integers to string via variadic argument).
Calendar:
Fixed bug #80007 (Potential type confusion in unixtojd() parameter parsing).
COM:
Fixed bug #64130 (COM obj parameters passed by reference are not updated).
OPcache:
Fixed bug #80002 (calc free space for new interned string is wrong).
Fixed bug #80046 (FREE for SWITCH_STRING optimized away).
Fixed bug #79825 (opcache.file_cache causes SIGSEGV when custom opcode handlers changed).
OpenSSL:
Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV). (CVE-2020-7069)
PDO:
Fixed bug #80027 (Terrible performance using $query->fetch on queries with many bind parameters).
SOAP:
Fixed bug #47021 (SoapClient stumbles over WSDL delivered with "Transfer-Encoding: chunked").
Standard:
Fixed bug #79986 (str_ireplace bug with diacritics characters).
Fixed bug #80077 (getmxrr test bug).
Fixed bug #72941 (Modifying bucket->data by-ref has no effect any longer).
Fixed bug #80067 (Omitting the port in bindto setting errors).
Sponsored by: Bounce Experts
Approved by: ports-secteam (joneum, implicit for PHP Updates)
lang/php73: Update from 7.3.22 to 7.3.23
Core:
Fixed bug #80048 (Bug #69100 has not been fixed for Windows).
Fixed bug #80049 (Memleak when coercing integers to string via variadic argument).
Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-` cookies can be sent). (CVE-2020-7070)
Calendar:
Fixed bug #80007 (Potential type confusion in unixtojd() parameter parsing).
COM:
Fixed bug #64130 (COM obj parameters passed by reference are not updated).
OPcache:
Fixed bug #80002 (calc free space for new interned string is wrong).
Fixed bug #79825 (opcache.file_cache causes SIGSEGV when custom opcode handlers changed).
OpenSSL:
Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV). (CVE-2020-7069)
PDO:
Fixed bug #80027 (Terrible performance using $query->fetch on queries with many bind parameters).
SOAP:
Fixed bug #47021 (SoapClient stumbles over WSDL delivered with "Transfer-Encoding: chunked").
Standard:
Fixed bug #79986 (str_ireplace bug with diacritics characters).
Fixed bug #80077 (getmxrr test bug).
Fixed bug #72941 (Modifying bucket->data by-ref has no effect any longer).
Fixed bug #80067 (Omitting the port in bindto setting errors).
Sponsored by: Bounce Experts
Approved by: ports-secteam (joneum, implicit for PHP Updates)
lang/php72: Update from 7.2.33 to 7.2.34
Core:
Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-` cookies can be sent). (CVE-2020-7070)
OpenSSL:
Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV). (CVE-2020-7069)
Sponsored by: Bounce Experts
Approved by: ports-secteam (joneum, implicit for PHP Updates)
Fix tracker-miners
The glib schemas were not tracked as such, making nautilus failed to access
them when it needed to.
While here; remove entire LDCONFIG which is not needed given this port does not
provide any library that anything would be dynamiclaly linked to
PR: 250129
Submitted by: Neel Chauhan <neel@neelc.org>
This all bunch of patches fixes GDM with gnome
x11/gdm: @sample-ify some GDM files in etc/
It's been reported that it would be desired to treat the following
files as samples:
- etc/dbus-1/system.d/gdm.conf.sample
- etc/gdm/Init/Default.sample
- etc/gdm/Xsession.sample
- etc/pam.d/gdm-autologin.sample
- etc/pam.d/gdm-launch-environment.sample
- etc/pam.d/gdm-password.sample
PR: 187558
Submitted by: Eugene M. Kim <astralblue@gmail.com
Reported by: robmessick@gmail.com
Approved by: maintainer timeout
x11/gdm: Switch to USES=localbase
Approved by: portmgr blanket
Properly handle logind -> consolekit
Grab a patch from openbsd and extend it do other components which requires it
Remove from the gnome session a list of required dbus services that no
longer exists
Gnome-shell: fix the login manager interface
gdm call gnome-shell to provide its login manager. with the upgrade of gnome-shell
this wasn't patched to be able to talk to consolekit. Fix this by incorporating patches
from OpenBSD
update x11/mate-panel to 1.24.1
Properly register the schema for the preview window list
This prevents the mate-panel from crashing all the time
This fixes the continuous crashing of the window list applet
dns/nsd: update 4.3.2 -> 4.3.3
This release contains the DNS Flag Day 2020 fixes. This sets the
default EDNS buffer size to 1232, that should reduce fragmentation.
https://dnsflagday.net/2020/
There is a new feature where it is possible to list an interface by
name. This pulls in the IP addresses associated with the interface
at server start.
FEATURES:
- Follow DNS flag day 2020 advice and
set default EDNS message size to 1232.
- Merged PR #113 with fixes. Instead of listing an IP-address to
listen on, an interface name can be specified in nsd.conf, with
ip-address: eth0. The IP-addresses for that interface are then used.
- Port TSIG code for openssl 3.0.0-alpha6.
BUG FIXES:
- Fix make install with --with-pidfile="".
- Merge #115 from millert: Fix strlcpy() usage. From OpenBSD.
- Merge #117: mini_event.h (4.3.2 and 4.3.1) on OpenBSD cannot find
fd_set - patch.
- Fix that configure checks for EVP_sha256 to detect openssl, because
HMAC_CTX_new is deprecated in 3.0.0.
- Fix#119: fix compile warnings from new gcc.
- Fix#119: warn when trying to parse a directory.
- Merge PR #121: Increase log level of recreated database from
WARNING to ERR.
- Remove unused space from LIBS on link line.
- Updated date in nsd -v output.
PR: 250203
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Relnotes: https://www.nlnetlabs.nl/news/2020/Oct/08/nsd-4.3.3-released/
Approved by: portmgr (backport of reliability fix blanket)
Create dedicated sandbox user for wsdd service
This changes the account the wsdd service runs under from the generic
'daemon' user to its own dedicated '_wsdd' user.
Approved by: ports-secteam (joneum)
PR: 250159
lang/php74: Add missing dependency from php74-xmlreader to php74-dom
xmlreader needs not only the DOM extension, but to be compiled
with --enabled-dom. This commit adds the missing configuration
to etablish the dependency.
PR: 249886
Submitted by: michael.glaus@hostpoint.ch
Sponsored by: Bounce Experts
Approved by: ports-secteam (joneum, implicit for PHP Updates)
Mark BROKEN everywhere
c++ -DHAVE_CONFIG_H -I. -I./src -I. -isystem /usr/local/include -Wall -Werror -fno-exceptions -fno-rtti -D_THREAD_SAFE -pthread -I/usr/local/include -I/usr/local/include -I/usr/include -O2 -pipe -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing -isystem /usr/local/include -MT src/schwanenlied/crypto/obfsclient-base32.o -MD -MP -MF src/schwanenlied/crypto/.deps/obfsclient-base32.Tpo -c -o src/schwanenlied/crypto/obfsclient-base32.o `test -f 'src/schwanenlied/crypto/base32.cc' || echo './'`src/schwanenlied/crypto/base32.cc
In file included from src/schwanenlied/crypto/base32.cc:34:
In file included from ./src/schwanenlied/crypto/base32.h:37:
In file included from ./src/schwanenlied/crypto/utils.h:40:
In file included from ./src/schwanenlied/common.h:47:
./src/ext/easylogging++.h:1119:84: error: 'ptr_fun<int, int>' is deprecated [-Werror,-Wdeprecated-declarations]
str.erase(str.begin(), std::find_if(str.begin(), str.end(), std::not1(std::ptr_fun<int, int>(&std::isspace))));
^
/usr/include/c++/v1/functional:1107:1: note: 'ptr_fun<int, int>' has been explicitly marked deprecated here
_LIBCPP_DEPRECATED_IN_CXX11 inline _LIBCPP_INLINE_VISIBILITY
^
/usr/include/c++/v1/__config:972:39: note: expanded from macro '_LIBCPP_DEPRECATED_IN_CXX11'
# define _LIBCPP_DEPRECATED_IN_CXX11 _LIBCPP_DEPRECATED
^
/usr/include/c++/v1/__config:961:48: note: expanded from macro '_LIBCPP_DEPRECATED'
# define _LIBCPP_DEPRECATED __attribute__ ((deprecated))
^
In file included from src/schwanenlied/crypto/base32.cc:34:
In file included from ./src/schwanenlied/crypto/base32.h:37:
In file included from ./src/schwanenlied/crypto/utils.h:40:
In file included from ./src/schwanenlied/common.h:47:
./src/ext/easylogging++.h:1126:73: error: 'ptr_fun<int, int>' is deprecated [-Werror,-Wdeprecated-declarations]
str.erase(std::find_if(str.rbegin(), str.rend(), std::not1(std::ptr_fun<int, int>(&std::isspace))).base(), str.end());
^
/usr/include/c++/v1/functional:1107:1: note: 'ptr_fun<int, int>' has been explicitly marked deprecated here
_LIBCPP_DEPRECATED_IN_CXX11 inline _LIBCPP_INLINE_VISIBILITY
^
/usr/include/c++/v1/__config:972:39: note: expanded from macro '_LIBCPP_DEPRECATED_IN_CXX11'
# define _LIBCPP_DEPRECATED_IN_CXX11 _LIBCPP_DEPRECATED
^
/usr/include/c++/v1/__config:961:48: note: expanded from macro '_LIBCPP_DEPRECATED'
# define _LIBCPP_DEPRECATED __attribute__ ((deprecated))
^
Reported by: pkg-fallout
Mark BROKEN everywhere
memmem.c:81:25: error: misleading indentation; statement is not part of the previous 'if' [-Werror,-Wmisleading-indentation]
sp++;
^
memmem.c:77:17: note: previous statement is here
if (*sp == *pp)
^
Reported by: pkg-fallout
Mark BROKEN
c++ -o obj/x86_64-unknown-freebsd12.1/fea/data_plane/ifconfig/ifconfig_get_sysctl.os -c -pipe -fstack-protector-strong -fno-strict-aliasing -O3 -g3 -W -Wall -Wwrite-strings -Wno-cast-qual -Wno-sign-compare -Wpointer-arith -Woverloaded-virtual -DXORP_BUILDINFO -fPIC -DXRL_PF=120 -DXORP_VERSION=1.8.5 -DBOOST_DISABLE_THREADS -I/usr/local/include -Iobj/x86_64-unknown-freebsd12.1 -I. -I. fea/data_plane/ifconfig/ifconfig_get_sysctl.cc
In file included from fea/data_plane/ifconfig/ifconfig_get_sysctl.cc:35:
In file included from /usr/include/net/if_var.h:83:
/usr/include/sys/lock.h:68:15: error: reference to 'thread' is ambiguous
struct thread **owner);
^
/usr/include/sys/lock.h:42:8: note: candidate found by name lookup is 'thread'
struct thread;
^
/usr/include/c++/v1/__threading_support:397:24: note: candidate found by name lookup is 'std::__1::thread'
class _LIBCPP_TYPE_VIS thread;
^
Reported by: pkg-fallout
sysutils/edid-decode: fix build on GCC architectures
Use C++11 compiler:
edid-decode.cpp: In member function 'std::string edid_state::dtd_type(unsigned int)':
edid-decode.cpp:195: error: 'to_string' is not a member of 'std'
Approved by: portmgr (fix build blanket)
devel/ipython5: Use newest version of pygments
The pinned dependency 'pygments<2.6' is only necessary to solve an issue with
Python 2.7, and devel/ipython5 is now python3.5+ only. [1] [2]
This fixes a conflict introduced on ports r549076 and r549418 between
textproc/py-pygments and textproc/py-pygments-25 when building at least
textproc/py-sphinx and math/sage.
1 - https://github.com/ipython/ipython/pull/12174
2 - https://github.com/ipython/ipython/issues/12173
PR: 249131, 250074, 250144
Reported by: thierry, swills
Approved by: python (with hat)
Approved by: ports-secteam (fluffy)
security/zeek: Update to 3.0.11 to fix memory leaks and potential DOS:
https://github.com/zeek/zeek/releases/tag/v3.0.11
- A memory leak in multipart MIME code has potential for remote
exploitation and cause for Denial of Service via resource
exhaustion.
Other fixes:
- Fix incorrect RSTOS0 conn_state determinations
Reported by: Jon Siwek
Security: 769a4f60-9056-4c27-89a1-1758a59a21f8
Approved by: ports-secteam (joneum)
devel/gh: Update to 1.1.0
From ChangeLog: https://github.com/cli/cli/releases/v1.1.0
Features
* Support GH_PAGER environment override for PAGER
* Disable terminal pager when its value is set to cat
* repo view: add option to specify a branch
* repo view: render :emoji: syntax as emoji characters
Bugs
* Fix pr create when branch was already pushed to a non-base remote
* pr status/view/create: fix API-related failures with GitHub Enterprise
Server
* Fix markdown rendering when terminal pager is enabled
* repo create: respect repo name input given in interactive prompt
* auth login: display correct hostname in Personal Access Token instructions
* auth login: document minimum required token scopes
* pr checkout: fix running on detached HEAD
* pr merge: default to "no" for "delete branch after merge" prompt
* gist list: switch to GraphQL API to improve fetching
- support fetching more than 100 gists
- list gists ordered by creation time, descending
- for machine-readable output, serialize timestamps in RFC 3339 format
- ensure newlines in gist description are rendered as spaces
* gist view/edit: fix passing Gist URL as argument
* gist edit: check ownership before editing
* gist edit: avoid updating gist when the contents haven't changed
* repo garden: fix for repositories with only a few commits
* repo garden: restore tty settings on exit
* Fix reading the current git branch name when it contains a non-breaking space
* Document gh config set pager ... option
* Fix .tar upload tests on different OSs
PR: 250176
Submitted by: vulcan@wired.sh (maintainer)
Approved by: ports-secteam (blanket, bugfix release)
sysutils/openzfs*: Update to fix 12.1-REL build
Bump to 79f0935fa for header changes to fix the package build on FreeBSD 12.1
PR: ports/250001
Reported by: tleavitt@alumni.usc.edu
Reviewed by: wg
Approved by: wg (ports)
Sponsored by: iXsystems, Inc.
Differential Revision: https://reviews.freebsd.org/D26656
Approved by: ports-secteam (implicit, build fix)
devel/bmake: disable cmd-interrupt test in batch builds
This fixes the build under modern poudriere, but continues to run the test
in all other environments so that we *can* catch issues here if they arise.
The breakage should get fixed on the poudriere or base sh(1) side, but this
will not necessarily be done soon.
Reported by: mjg
Approved by: portmgr (implicit, bulk fix)
Approved by: ports-secteam (implicit, build fix)
x11-wm/compiz: Fix compiz-manager texture size parsing error
compiz-manager doesn't cover the possibility of duplicate output from
glxinfo at line 238, which causes check_texture_size() to fail. Let's fix
it by limiting the number of output lines to 1.
PR: 247476
Submitted by: Vladimir Bychik
Approved by: maintainer (Chris Hutchinson)
Approved by: ports-secteam (fluffy)
x11/gdm: Install gconftool-2 as it is needed by pkg-install
Before this patch, the following error could be observed during the
installation of the port:
===> Creating homedir(s)
/bin/sh: gconftool-2: not found
chown: /usr/local/etc/gdm/home/.gconf.mandatory: No such file or directory
chmod: /usr/local/etc/gdm/home/.gconf.mandatory: No such file or directory
chmod: /usr/local/etc/gdm/home/.gconf.mandatory/*.xml: No such file or directory
GDM is installed.
Specifying USE_GNOME+=gconf2 seems to fix the error messages.
(BTW, for some reason the gconf2 dependency was removed in r372768.)
Approved by: portmgr blanket
Approved by: ports-secteam (fluffy)
x11/gdm: Fix pkg-message
pkg-message does not contain %%PREFIX%% anymore, so a sed(1) call is not
necessary. In addition to that, passing pkg-message though fmt(1) was
breaking the UCL inside causing pkg-message to not be displayed at all.
Approved by: portmgr blanket
Approved by: ports-secteam (fluffy)
devel/arm-none-eabi-newlib: unbreak after include-fixed removal
We're now operating on more standards-compliant headers. Defining
__LONG_LONG_SUPPORTED is a little hacky, but some backflips are needed to
assume a C99 build. For now, just make it work so that we can get the
definition from sys/limits.h as needed.
Approved by: ports-secteam (implicit, build fix)
devel/upnp: update to 1.14.0
Update to newer release which contains a fix for CVE-2020-13848:
c805c1de11
Security: CVE-2020-13848
Approved by: ports-secteam (joneum)
emulators/citra: update to s20200930
- Re-enable system boost, following emulators/yuzu
Changes: a576eb633...aced133a3
Approved by: ports-secteam (swills, implicit for snapshots)
Revert the upgrade to 2.0.0 it is not backward compatible
and break minixmlto in some cases
bump portepoch
PR: 250028
Reported by: Stefan Ehmann <shoesoft@gmx.net>
2020-10-01 19:50:02 +00:00
2226 changed files with 22196 additions and 22494 deletions
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
