A ports freeze means that commits will be few and far between and only by approval.

Number of commits found: 59

texas chainsaw kde2 massacre

patch against SSL man-in-the-middle attack, described in
http://www.kde.org/info/security/advisory-20020818-1.txt (not yet
confirmed on FreeBSD)

Requested by:   security-officer
ftp://ftp.kde.org/pub/kde/security_patches/post-2.2.2-kdelibs-kssl.diff
Approved by:    will, with these reservations:
        Please note, however, that the patch will be untested and
        not supported by kde@, similar to the way other people offer
        patchsets for older versions of FreeBSD that so@ does not
        support.  Also note that the patch does not really seem
        "official" because it was never applied to their CVS.

Marked FORBIDDEN due to Security Advisory on SSL bug.

Distfiles have been moved on kde site to Attic.

PR:             ports/39558
Submitted by:   glewis
Reviewed by:    alane

Assign PORTREVISION using `?=' instead of `=' so that slave ports can
override it.

PR:             ports/34779
Submitted by:   SASAKI Katuhiro <sahiro@crest.ocn.ne.jp>
                (MAINTAINER of ja-{qt23,kde*2} ports)

Replace `cd dir && cmd' with `cd dir ; cmd' while I'm here.

Fix the KDE ports to not use objprelink, if OSVERSION >= 500029.  This is
not tested other than for syntax, but should DTRT from what I understand
of the problem.

Submitted by:   bento

Bring in a -real- fix for kdesu.  Many thanks to Alan Eldridge and   Waldo
Bastian for their work towards fixing this both in 2.2.2/ports   and KDE3 CVS. 
Bump PORTREVISION to make sure people get *this* fix and   not the previous
broken one.    

Bring in a few changes to the KDE ports infrastructure, and some fixes.    -
Move all stuff specific to kde core ports to x11/kde2/Makefile.kde.      +
Default to compile optimized for speed, not debugging, in ports        builds,
not just packages.  We don't really get that many backtraces        or debugging
information, and there's a better way to provide these        things to people
willing to spend some time working on KDE.  It's        at (as announced
before): http://freebsd.kde.org/.    - Remove teTeX dependency for kdegraphics2
upon request, and being unable      to find any reason not to.  Apparently,
kdegraphics still compiles      libkdvi and kdvi -- I guess dvips is merely a
runtime dependency.      Therefore to enable its use one just needs to add the
teTeX package.      Bump PORTREVISION to reflect dependency change.    - Fix
koffice port by removing PYTHON_VERSION, which is unnecessary.    

If !WANT_KDE_NDEBUG and !PARALLEL_PACKAGE_BUILDING, also add   --enable-debug
and turn off stripping of binaries so we actually get all   the debugging we're
supposed to get.  :)    

Fix error where if '-' is actually used in invoking su(1), we lose all   the
environment vars like DISPLAY etc.  Bump PORTREVISION.   Alan and I still
suspect the problem is somewhere else, but this at least   gets kdesu working. 
He feels I should back it out, but I'm going to keep   it since it's better than
what we had last: a broken kdesu.    

Fix obscure kdesu bug where it doesn't pass the user to su to.  This may   not
be the correct fix -- discussion on kde-core-devel@kde.org ensuing.   Bump
PORTREVISION to accomodate this important fix.    

Conditionalize use of objprelink based on whether we're running on  
MACHINE_ARCH=i386 *and* whether NO_KDE_OBJPRELINK is defined.    

Fix a problem with auto{conf,make}:  some build magic was introduced to   make
sure that the "autoconf" and "automake" binaries KDE looked for were   found and
were autoconf213 and automake14 (as there are issues with the   latest
versions), but the logic in setting $PATH was wrong.  This puts  
${WRKSRC}/auto-bin before the rest of the users $PATH.  This fixes KDE   auto*
problems if automake14 and automake-1.5 are both installed.    

Upgrade KDE to 2.2.2:    * General:           - Support for objprelink.         
 - Hack for autoconf 2.13/automake 1.4.  Note that we can't use             the
standard USE_AUTO* because they change things in work/*;             KDE has its
own way of doing that.           - Light cleanup of extra dirs in the PLISTs
provided by              my mkplistpkg[1] script.           - Speedups of both
compile and runtime through the usage of             --disable-debug and
--enable-final.  The latter did not work             with the kdemultimedia
package, unfortunately.           - Patch updates.    * audio/kdemultimedia2:   
       - Patch to fix KSCD on FreeBSD[2].  It works very well now.    *
deskutils/kdepim:           - Enable kpilot[3].  Pull in the latest pilot-link
stuff.    * devel/kdesdk,    * devel/kdevelop:           - No specific changes. 
  * devel/qt-designer:           - Make this port depend almost entirely on qt23
to make it more             maintainable, so I don't have to keep hacking the
patches to             get them to apply.    * editors/koffice,    *
games/kdegames,    * graphics/kdegraphics:           - No specific changes.    *
misc/kdeaddons:           - SDL is required now.  Cull SDL PLIST_SUB and such.  
        - Fix breakage from hardcoding "sdl-config".    * misc/kdeutils2:       
   - Fix problem with klaptopdaemon[4] where it didn't properly            
display the battery time.  This patch is untested, but applied.    *
net/kdenetwork2:           - Fix DCC for KSIRC[5].           - Remove ktalkd
from the build.  It requires some weird thing             in the configure
script that I don't have time to look at.    * sysutils/kdeadmin:           - No
specific changes.    * textproc/kdoc:           - Remove bogus requirement that
kdoc requires Perl 5.6.0; it sure             seems to operate fine with >=
5.005.  But I'll let time tell.    * www/quanta:           - No specific changes
(--disable-debug support only).    * x11/kde2:           - No specific changes. 
  * x11/kdebase2:           - Fix ksysguard compile by merging the files from
the HEAD branch             of KDE CVS that were missing at release time for
FreeBSD[6].  :\    * x11/kdelibs2:           - Recognize CUPS' spinoff[7].      
    - Add libxslt dependency since it was removed from kdelibs.           - Fix
libxml compile problems[8] (accomplished by upgrading).           - Remove
libkformula from port Makefile; this library has been             spun off into
koffice.           - Fix mode problems with DCOP[9].  This allows you to save
files             properly.  It also seems to be a FreeBSD specific problem.    
      - Fix bashisms in kdeprint/imagetops script[10].    * x11-clocks/kdetoys2:
          - No specific changes.    * x11-toolkits/qt23:           - Do NOT
upgrade to QT 2.3.2[11].           - Allow devel/qt-designer to depend on this
port entirely for the             patches by adding a perlre to accomplish this.
   * x11-wm/kdeartwork:           - No specific changes.    

Upgrade to 2.2.1.    

Set DIST_SUBDIR=KDE    

Make CATEGORIES and MAINTAINER overridable for japanese/kde*.    

Add patch for kdoctools/xml2man.cpp, similar to xslt.cpp patch.   Bump
PORTREVISION just in case this is needed.    

Fix problem with meinproc coredumping on -CURRENT.  Basically what the   problem
is is that there are a few sloppy pieces of code in xslt.cpp.   Bump
PORTREVISION to account for recent changes (I had intended to do this   much
earlier, but wanted to include these patches first, and there was   a problem
getting them together correctly).    

Fix problem where kdelibs.sh isn't chmod 755.. this causes some filters   and
other stuff to fail.  *sigh*    

Move code designed to prevent people from compiling/installing KDE N.x   when
KDE (N+1).x (N = radix 2, shift 1, order 1) is installed to   pre-extract so one
can still download the distfiles for (N+1).x.    

Reassign MAINTAINER to kde@FreeBSD.org, a group formed specifically to  
maintain and improve QT/KDE on FreeBSD.  This group (at this time)   consists
of:  demon, olgeni, kevlo, lauri@kde.org, rwatson, and will.    

Conditionalize the dependency on bzip2.    

Add dependency on devel/pcre, it is required by Konqueror to implement   regular
expressions in javascript.    

Bump PORTREVISION for SSL fix.    

*sigh*  They changed the path to the tarballs again.  This was verified   on my
local mirror at ftp://csociety-ftp.ecn.purdue.edu/pub/kde/.  :\    

Update to KDE 2.2:    

Please bento some more.    

Upgrade to 2.1.2 (kdelibs only):  fix security issues (already fixed in the  
port, but now we remove a patch :), remove a lot of obsolete patches.  I'm   not
sure why I didn't notice that coolo@kde.org fixed the midfile.cc one   about six
months ago... ;)    

Overhaul QT/KDE support:   - bsd.port.mk update to use bsd.kde.mk for
USE_{QT,KDE}*   - Cleanup corresponding ports for bsd.kde.mk update.   - Fix
bsd.kde.mk: use correct kdelibs dependency, put qt at the bottom,     introduce
QT_NONSTANDARD variable for nonstandard configure setup.   - Update KDE2 to
2.1.1.  Two patches included in x11/kdelibs2 to fix the     proxy authentication
that was broken for 2.1.1.  Remove old patches.   - Potentially fix kdelibs
build for alpha.   - Fix qt-designer 2.3.0 build.   - Ruby stuff left alone
since it looks like black magic to me.  Should     still work w/ compat shims
for older USE_QT[,2] style.  Some others     were also left alone for the same
reason.    

Bring in my fixes for KDE2 for users of XFree86 4.0.x.  Basically, what   this
involves is this:  Cull GL from Qt by default, but still provide a   Qt+GL
library that may or may not have threads.  Then also provide a Qt   library that
has threads but not GL.  This allows us to make KDE2 depend   on a library that
will *not* have threads, ever.  Threads will be   revisited at a later date. 
Ports that require GL support need to be   updated to use the hacked library,
libqtgl.so.4.  The net result is that   we bloat our qt2 package by 1.5-2.5MB
for compatability.  Also, static   qt will not have GL support.    

Bring in my KDE 2.1 + X 4.0.2 + threads "fixes".  WARNING:  Doesn't quite   work
right yet.  This needs other eyes to look at in order for me to figure   out
what's going on here.  Help, please?    

Attempt to fix conflicts with a local getopt.h (specifically, the fix is   for
libgnugetopt's getopt.h).  Not tested, but should work.    

Lo and behold, welcome KDE 2.1 to our ports tree.  As a direct result of   the
KDE team's excellent work, I am initiating burn sequence for KDE   1.x.  All
base KDE1 ports are hereby nuked.  I am also reluctantly   reassuming
maintainership of the KDE2 ports.  Official KDE 2.1 packages   built for FreeBSD
4.2-STABLE w/ XFree86 4.0.2 are available on KDE's   official ftp mirrors now. 
Enjoy!    

kio8-* encoding improvement    

Add PORTREVISION bump.   Thanks kris@    

Fix CATEGORIES.   Noticed by Vivek Khera <khera@kciLink.com>    

Upgrade to 2.0.1    

Resign as maintainer of KDE2 ports, having brought them up from inception   to
the final release of KDE 2.0.  Kevin Lo <kevlo@FreeBSD.org> will continue   as
the new maintainer.  He has commit privileges on the KDE tree, making him   an
excellent candidate for this job.  I'll be behind the scenes for awhile,   since
there are some structural changes I'd like to make but I'd rather have   Kevin
do the work.  Please, people, direct your patches at Kevin and watch   his
"freetime deprivation process" _really_ start.  :-P    

Oops, forgot to remove -lqt2 along with -L${X11BASE}/lib, to allow people   to
compile on X4.0.1.    

Oops, forgot bsd.port.pre.mk/bsd.port.post.mk (the previous commit was  
obviously untested, sorry).    

Take a shot at mentioning what kind of OpenSSL support we have, since KDE2  
does not support OpenSSL <= 0.9.4.  Also add USE_OPENSSL, to keep people   who
don't have it installed from using the port.  Perhaps that should be a   knob,
in case people have some legitimate reason not to have OpenSSL.    

Implement fix for configure scripts in regards to finding X libs on   XFree86
4.0.1.    

Update to QT 2.2.1 / KDE 2.0 final release.  At last!  What a long road...   All
KDE2 ports now use default USE_QT2.  Still todo: Merge in MTREE stuff.    

Correct CATEGORIES - make first category in the CATEGORIES list matching parent 
 directory.    

Update to KDE 1.94, the fifth and final beta release of KDE 2.0.  If you   have
not tried KDE 2.0 or haven't done so in awhile (i.e. since July or   before),
you should try this.  This version is extremely stable and offers   better
functionality than before.  This update also introduces the KDE2   modules
kdegraphics and kdemultimedia to our ports tree.  Additionally,   this marks the
first time FreeBSD packages were announced as part of the   KDE2 beta release
announcement!  :-)    

Fix CATEGORIES and change the libkmid shlib symlink to 0.    

Update to 20000829A snapshot.  Disable kdenetwork2 for the time being so   I can
address some of its issues (should see it marked un-broken in about   3 hours,
if they're trivial enough).  It took too long to get this update   out the
door... :-(    

Fix my not-tested-enough KDE2-related ports.  :-(    

Update to 20000724A (custom-rolled snapshot).  Rejoice, because now   Konqueror
can load HTML documents, KOffice works semi-well, and KDE2 in   general seems
less buggy.  Only kdeutils was left out of this mega-update.   However, it
should return soon.  :-)    

Mark these BROKEN, they don't compile/run properly.    

Bump png shared library version.    

Rename INSTALLS_SHLIBS to INSTALLS_SHLIB.  (There was a typo in the   previous
commit message to bsd.port.mk, which said INSTALL_SHLIBS.  Boo.)    

Fourth round of INSTALLS_SHLIBS conversion.    

Remove extra  at end of line.    

Okay, okay.  Yet Another Silly Blunder by myself.  I should try to get   more
sleep before doing things like this.    

This should fix all the compile problems bento (and others probably) has   with
missing .so's.  I'm not sure how I left this out in the original   import since
this stuff was in kdelibs11.  :-(    

This should fix all the compile problems bento (and others probably) has   with
missing .so's.  I'm not sure how I left this out in the original   import since
this stuff was in kdelibs11.  :-(    

This should fix all the compile problems bento (and others probably) has   with
missing .so's.  I'm not sure how I left this out in the original   import since
this stuff was in kdelibs11.  :-(    

Number of commits found: 59

14 vulnerabilities affecting 30 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities