Number of commits found XX: 29

Fix CVE-2017-8372, CVE-2017-8373 and CVE-2017-8374

- Bump PORTREVISION for package change

Differential Revision:	https://reviews.freebsd.org/D22300
Submitted by:	Daniel Engberg <daniel.engberg.lists@pyret.net>
Obtained from:	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508133#15
Security:	b48e7b14-052a-11ea-a1de-53b029d2b061
MFH:		2019Q4

- Add LICENSE

Replace USES=libtool:oldver with USES=libtool or USES=libtool:keepla in
the 32 ports that still use it.  Bump PORTREVISION on their dependent
ports except the ones that depend on these:

audio/libogg
audio/libvorbis
devel/pcre
ftp/curl
graphics/jpeg
graphics/libart_lgpl
graphics/tiff
textproc/expat2
textproc/libxslt

In these cases the same trick as in the recent gettext update is used.

(Only the first 15 lines of the commit message are shown above )

When linking a library libA with a library libB using libtool, if libB.la
exists, libtool will add all libraries libB.la refers to (dependency_libs
field) to the linker command line and store them in the dependency_libs
field of libA.la.  So everything that subsequently links with libA will also
link to these extra libraries.  This causes too much overlinking.

This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs
field in .la libraries during staging.  However, because .la libraries have
very limited use when dependency_libs is empty it makes sense to completely
remove them during staging.

So with this commit USES=libtool is modified to remove .la libraries and a
new form (USES=libtool:keepla) is introduced in case they need to be kept
(dependency_libs is still emptied).

(Only the first 15 lines of the commit message are shown above )

- Fix USES=libtool and revert shared library changes
- Bump PORTREVISION for package change

Fix after conversion to USES=libtool

- Use USES=libtool

- Strip shared library
- Do not mkdir PREFIX/libdata/pkgconfig which is already in BSD.local.dist
- Use SUB_FILES
- Remove unnecessary patch
- Cosmetic change
- Take maintainership

- Support STAGEDIR

Add NO_STAGE all over the place in preparation for the staging support (cat:
audio)

Convert from WITH to OPTIONS
While here remove wrong pkgconfig dependency

- drop maintainership
Feature safe: yes

Sync to new bsd.autotools.mk

- fix build with new GCC
PR:             143741
Submitted by:   Rob Farmer

- Switch SourceForge ports to the new File Release System: categories starting
with A

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:      marcus and kwm
Pointyhat-exp:  a few times by pav
Tested by:      pgollucci, "Romain Tartière" <romain@blogreen.org>, and
                a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:    marcus
Approved by:    portmgr

Use libtool port instead of included one to avoid objformat a.out botch

- USE_LDCONFIG

- take maintainership
Submit:ted by:
Revi:rewed by:

Reset inactive maintainer asa@gascom.ru.

Hat:            portmgr

Conversion to a single libtool environment.

Approved by:    portmgr (kris)

Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
        http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.

Be sure the pkgconfig directory exists (it doesn't on not branch versions
of FreeBSD).

Reported by:    GNOME Tinderbox

add knob to enable speed optimization.
(maintainer timeout for two weeks.)

Submitted by:   Ingmar Gebert <ingmar.gebert@uni-rostock.de>

- Install pkgconfig file

Approved by:    maintainer
Obtained from:  Debian

Apply a big libtool patch to allow porters to use the libtool installed by
the libtoolX ports instead of the one included with each port.  Ports that
set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of
the included version.  To restore previous behavior, use the new macro,
USE_INC_LIBTOOL_VER.  Both macros accept the same argument: a libtool version.

For example, to use the ports version of libtool-1.5, add the following to
your Makefile:

USE_LIBTOOL_VER=        15

To use the included version of libtool with extra hacks provided by
libtool-1.5, add the following to your Makefile:

USE_INC_LIBTOOL_VER=    15

With this change, ports that had to add additional libtool hacks to prevent
.la files from being installed or to fix certain threading issues can now
delete those hacks (after appropriate testing, of course).

PR:             63944
Based on work by:eik and marcus
Approved by:    ade (autotools maintainer)
Tested by:      kris on pointyhat
Bound to be hidden problems:    You bet

- Update to 0.15.1b

PR:             ports/68682
Submitted by:   Evgueni V. Gavrilov <aquatique-ports@rambler.ru>
Approved by:    maintainer

Whoa there, boy, that's a mighty big commit y'all have there...

Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".

For ports-in-waiting:

        USE_LIBTOOL=YES         ->      USE_LIBTOOL_VER=13
        USE_AUTOCONF=YES        ->      USE_AUTOCONF_VER=213
        USE_AUTOMAKE=YES        ->      USE_AUTOMAKE_VER=14

Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.

Add libmad, the library backend to the MAD audio project.  MAD is a
high-quality MPEG 1 and 2 audio decoder.

PR:             59702
Submitted by:   Sergey Akifyev <asa@gascom.ru>

Number of commits found XX: 29

16 vulnerabilities affecting 98 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2020-08-06 18:24:49