Number of commits found XX: 205 (showing only 100 on this page)

1 | 2 | 3  »  

Schedule for removal. The current development branch appears to
no longer be published.

net/ntpsec: Add CONFLICTS between net/{ntp,ntp-devel,openntpd,ntpsec} because
they all install sbin/ntpd

Also remove -* for versions because this isn't needed.

PR:		246553
Reported by:	naddy
Approved by:	portmgr (port compliance, infrastructure)

Bump after FORBIDDEN

Flag ntp-devel FORBIDDEN due to
http://support.ntp.org/bin/view/Main/SecurityNotice#\
March_2020_ntp_4_2_8p14_NTP_Rele

MFH:		2020Q2

Chase r512433, (also chasing src r355388) document that rlimit memlock
is disabled by default.

Disable ntpd stack gap. When ASLR with STACK GAP != 0 ntpd suffers SIGSEGV.

PR:		241421, 241960
Reported by:	Vladimir Zakharov <zakharov.vv@gmail.com>,
		dewayne@heuristicsystems.com.au
Reviewed by:	kib, imp (previous version), ian (suggestion)
MFH:		2019Q4
Differential Revision:  https://reviews.freebsd.org/D22358

Drop the ipv6 virtual category for n* category as it is not relevant anymore

Chase src r352540:

Follow up on ports r511987 (base r352304) which disabled default
mlockall() at startup. Unfortunately though the original tarball
supports this in ./configure (for Linux), to fully support disabling
of mlockall() by default requires a little extra help otherwise the
following is logged in syslog:

        Cannot set RLIMIT_MEMLOCK: Operation not permitted

Chase base r352518:

Reduce calls to close(2) at startup through the use of closefrom(2).

Submitted by:		pawel.biernacki@gmail.com (based on)
Obtained from:		base r352518

Sync with base r352304, no longer locking ntpd in memory. Users who
wish to restore historic BSD behaviour can add the following to ntp.conf:

	rlimit memlock 32

Discussed on:	freebsd-current@ between Sept 6-9, 2019
Mentioned in Differential Revision:
		https://reviews.freebsd.org/D21581

Chase r482219: Fix build on armv6.

Chase r475132: Enable TrustedBSD MAC(4) support to ntpd.

Update 4.3.97 --> 4.3.99

Update  4.3.95 --> 4.3.97

Reported by:	portscout

Resurrect net/ntp-devel, which is in development once again.
Update 4.3.93 --> 4.3.95.

Deprecate dead -devel ports

Fix a typo.

Reported by:	Herbert J. Skuhra <herbert@gojira.at>
MFH:		2018Q3

Add a package message instructing the user how to use ports ntp
instead of base ntp.

Reported by:	adamw
MFH:		2018Q3

www/libwww: Update to 5.4.2, Fix security vulnerabilities

This a security release for libwww to take into account security advisories
CVE-2016-9063 and CVE-2017-9233.

In order to take into account current and future expat security advisories,
the expat source code was removed from the libwww tree. The makefiles were
modified so that libwww dynamically links against the system's expat library.

Patches removed were incorporated upstream.

Bump PORTREVISION of dependent ports due shlib change.

Changes:	libwww/5.4.2/ChangeLog" REL="NOFOLLOW">https://raw.githubusercontent.com/w3c/libwww/5.4.2/ChangeLog

MFH:		2018Q3
Security:	e375ff3f-7fec-11e8-8088-28d244aee256

Flag FORBIDDEN instead of IGNORE due to possbile security issues.

Reported by:	mat
MFH:		2018Q1

It appears as if the development branch of ntp is dead as no new
development tarballs have been relesed for ~ 17 months now. This is a
security concern.

MFH:		2018Q1

Fix RIPENCC TRIMBLE driver compile error.

PR:		223819

Fix whitespace issues (mixed tab/spaces, alignment) in a few ports.

This round is @FreeBSD.org residents except teams.

Register conflict with openntpd.

Reported by:	rodrigo

Use CONFIGURE_ENABLE instead of CONFIGURE_ON.

The current use of CONFIGURE_ON to handle refclock options allows
adding a refclock that is off by default, but doesn't allow a user
to eliminate refclocks that ntpd includes by default.

Using CONFIGURE_ENABLE instead of CONFIGURE_ON will add the proper
--disable-REFCLOCKNAME to the args when the user disables default-on
options.

PR:		218078
Submitted by:	ian@

Enable DEBUG option which enables debugging code in ntp via
--enable-debug. This enables -d and -D options within ntpd.

Correct the specification of ssl. This doesn't fix the brokenness
of this port when ssl is not specified but corrects the incorrect
specification regerdless.

Remove extraneous arguments and options, which don't make sense for
a file documented in volume 5.

OpenSSL includes are configured even though option is not selected
resulting in a build failure.

Bump PORTREVISION for r434562.

devel/libevent2: drop historical suffix after r362796

PR:		216777
Approved by:	mm (maintainer)

devel/libevent2: update to 2.1.8 and cleanup

- DEFAULT_VERSIONS += ssl=openssl-devel is now supported
- devel/py-event and devel/p5-Event-Lib are marked BROKEN

Changes:	https://github.com/libevent/libevent/raw/release-2.1.8-stable/whatsnew-2.1.txt
Changes:	https://github.com/libevent/libevent/raw/release-2.1.8-stable/ChangeLog
PR:		216527
Exp-run by:	antoine
Approved by:	mm (maintainer)

Correct cut&paste error, add missing dot.

Flag ntp and ntp-devel ignore if libressl is installed due to md5
symbol conflicts.

PR:		215093

Remove documentation of conflict with the ntp-rc port. net/ntp-rc
is only an active port when an NTP release candidate is available.

Submitted by:	des

Configure leap-second smearing (always).

Leap-second smearing is an experimental option that may be specified in
ntp.conf(5) to spread the effect of a leap-second over an interval as
specified by the leapsmearinterval config file statement. Recommended
values are between 7200 (2 hours) and 86400 (24 hours).

It is advised that leap-second smearing not be used for public NTP
servers (https://www.meinbergglobal.com/download/burnicki/Leap\
%20Second%20Smearing%20With%20NTP.pdf). It is also advised that NTP
clients not use a mix of NTP servers using leap-second smearing with
NTP servers not using leap-second smearing as that could cause
undefined client behaviour.

Suggested by:	des

Let USES=localbase add -L${LOCALBASE}/lib to LIBS instead of LDFLAGS.
USES=localbase:ldflags can be used to set LDFLAGS.  Normally LDFLAGS
appears too early on the command line causing some ports to link with
their own libraries in LOCALBASE (if installed) instead of WRKSRC.

Also make use of _USES_POST so -L${LOCALBASE}/lib is added as late as
possible after anything a port Makefile might set.  Use _USES_POST
instead of .include in libedit.mk and libarchive.mk so things like
'USES=libedit localbase:ldflags' work correctly.

Fix some issues with LIBS in some ports.

Switch ports that don't support LIBS to localbase:ldflags.

PR:		212987
Exp-run by:	antoine
Approved by:	portmgr (antoine)

Most commonly used build systems support silent builds, when they
hide actual commands executed and only show short summary line (like
"CC foo.c"). CMake and ninja enable this by default, some autotools
using ports do as well. This is unacceptable because we need complete
build logs at any time, so we now switch to verbose build logs
unconditionally. Note that this change deliberately affects ALL
builds and not only package builds on cluster, because we need to
be sure that user experiencing failure can always provide informative
build log regardless of settings and without rerunning the build.

Change summary:

- Always do verbose builds for cmake, ninja and GNU configure (the
  latter includes check if --disable-silent-rules is actually supported
  by the configure script; there are isolated cases when it's not true)

(Only the first 15 lines of the commit message are shown above )

Fix Makefile typo.

Rmove/merge redundant USES line.

Record an indirect libwww dependency.

Switch to USES=ssl.

Fixup sntp.8 man page formatting. This commit is the same as r304721
in base.

Submitted by:	Steve Kargl <sgk@troutmask.apl.washington.edu>
Discussed with:	bjk@

Update 4.3.91 --> 4.3.93

Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight

Update to 4.3.91.

Update 4.3.89 --> 4.3.90

Update to 4.3.89.

net/ntp-devel: Fix untracked gettext dependency & lots more

ntp links against gettext (libintl) if it is installed on the system:

- Add an NLS OPTION to explicitly enable, disable and track libintl dependency
- Add DEBUG and THREADS OPTIONS. Keep the latter enabled by OPTIONS_DEFAULT to
  preserve compatibility with existing behaviour.
- Explicitly pass OpenSSL include / library dir paths to configure
- Unsilence install command
- Enable verbose building (--disable-silent-rules)
- Use TOUCH variable instead of hardcoded command
- Add TEST_TARGET to enable test suite
- Pet portlint (*_DEPENDS order, group USE{S} sections, sort OPTIONS)

Approved by:		cy (maintainer)
MFH:			2016Q1
Differential Revision:	D4812

Update 4.3.84 --> 4.3.88

Update 4.3.82 --> 4.3.84

Update to 4.3.82.

Update 4.3.77 --> 4.3.81

Update 4.3.76 --> 4.3.77

Shebang fix update-leap.

Update 4.3.71 --> 4.3.76

Update 4.3.70 --> 4.3.71

- Switch to USES=libedit as suggested by stage-qa

Approved by:	portmgr blanket

Update 4.3.67 --> 4.3.70

Update 4.3.66 --> 4.3.67.

Update 4.3.48 --> 4.3.66

Update 4.3.47 --> 4.3.48

Update 4.3.44 --> 4.3.47

Update 4.3.42 --> 4.3.44

Update 4.3.37 --> 4.3.42

Update 4.3.36 --> 4.3.37

Update 4.3.34 --> 4.3.36

Update 4.3.33 --> 4.3.34

Update 4.3.20 --> 4.3.33

Rework r385426:
  - The include/event2 directory was being created improperly due to the lack
    of a pkgconfig dependency. Add it to USES.
  - Remove WRKSRC from SHEBANG list.

Reported by:	many

- Fix orphaned include/event2 dir (likely an upstream error that it is created)
- Fix shebang QA error when not using PERL_UTILS. This was broken in r374987.
  Error: '-w' is an invalid shebang you need USES=shebangfix for 'sbin/ntptrace'
  Must replace @PERL_PATH@ before install or it becomes a blank: '#!  -w'

Sponsored by:	EMC / Isilon Storage Division

Update 4.3.19 --> 4.3.20

Update 4.3.14 --> 4.3.19

net/ntp-devel: add CPE info

PR:		199620
Submitted by:	Shun <shun.fbsd.pr@dropcut.net>
Approved by:	portmgr blanket

Update ntp 4.2.8p1 --> 4.2.8p2

Update ntp-devel 4.3.13 --> 4.3.14

Mark ntp-rc IGNORE

PR:		199274, 199276
Submitted by:	delphij
Security:	VuXML ebd84c96-dd7e-11e4-854e-3c970e169bc2
Security:	VuXML ebd84c96-dd7e-11e4-854e-3c970e169bc2

Update ntp-rc 4.2.8p2.r2 --> 4.2.8p2.r3

Update ntp-devel 4.3.11 --> 4.3.13

Add missing =

Copy net/ntp to net/ntp-rc to track release candidates.

Register conflicts between ports.

Update 4.3.9 --> 4.3.11

Update to 4.3.9.

Update 4.3.7 --> 4.3.8

Update 4.3.6 --> 4.3.7

Update 4.3.3 --> 4.3.6

Update 4.3.1 --> 4.3.3

ntp-devel now tracks the ntp-4.3 development branch commencing with 4.3.1.

Remove redundant DOCSDIR.

Update 4.2.8p1-beta5 --> 4.2.8p1-RC2

Update 4.2.8p1-beta4 --> 4.2.8p1-beta5

Ntp devel port now tracks ntp-4.2.8p1 betas as our upline works to
iron out bugs. We start with beta4.

Forbid due to http://www.kb.cert.org/vuls/id/852879.

Security:	VUXML: 4033d826-87dd-11e4-9079-3c970e169bc2
Security:	http://www.kb.cert.org/vuls/id/852879
Security:	CVE-2014-9293
Security	CVE-2014-9294
Security	CVE-2014-9295
Security	CVE-2014-9296

Update 4.2.7p484 --> 4.2.7p486

NTP is now release candidate with 4.2.7p484.

Upline now uses devel branch for release candidates,
thus remove net/ntp-rc.

Update 4.2.7p482 --> 4.2.7p483

Update 4.2.7p481 --> 4.2.7p482
 CATEGORIES=	net ipv6

Update 4.2.7p480 --> 4.2.7p481

Update 4.2.7p479 --> 4.2.7p480

Update 4.2.7p476 --> 4.2.7p479

Update 4.2.7p475 --> 4.2.7p476

Remove USE_AUTOTOOLS

1. Update 4.2.7p474 --> 4.2.7p475

2. Remove two dead download mirrors, add an official mirror.
   	PR:		193520
   	Submitted by:	jharris@widomaker.com

Number of commits found XX: 205 (showing only 100 on this page)

1 | 2 | 3  »  

9 vulnerabilities affecting 70 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2021-01-26 20:33:26