Number of commits found XX: 61

Update devel/readline to 8.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://tiswww.case.edu/php/chet/readline/CHANGES
PR:		236156
Exp-run by:	antoine

Install texinfo files (GNU info) into ${PREFIX}/share/info

After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816

Update gnupg1 to security release 1.4.23

PR:		228936
Submitted by:	Dani
MFH:		2018Q2
Security:	CVE-2017-7526

Update to 1.4.22.

MFH:		2017Q3
Security:	CVE-2017-7526

Update devel/readline to 7.0 patch 3

- Bump PORTREVISION for shlib change

Changes:	https://cnswww.cns.cwru.edu/php/chet/readline/CHANGES
		https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00107.html
		https://lists.gnu.org/archive/html/bug-readline/2017-01/msg00002.html
Differential Revision:	https://reviews.freebsd.org/D11172
PR:		219947
Exp-run by:	antoine

Restore the link from gpg to gpg2 on uninstallation, removed in r431058.

When gnupg is installed, installing gnupg1 overwrites the link.  Uninstall
should restore the link so the system is back in the same state.

Approved by:	adamw (maintainer)

Standardize the COMMENT and pkg-descr with the other gnupg ports.

Readline for everyone instead of it sometimes showing up and never
being recorded.

Don't link gpg to gpg2 on uninstallation. This is not a good idea.
The gnupg{,20} ports handle creating that symlink.

Remove the .sig file from distinfo.

PORTREVISION bump for the dependency and plist changes.

Oops.

Notified by:	pi

Improve the compiler check by using USES=compiler and not applying
it blindly to 10+.

PR:		213932
Reported by:	dewayne heuristicsystems com au

Enable the CAMELLIA cipher and noexecstack (support for which gets
auto-detected). While here, fix a few Makefile nits and provide a
better COMMENT.

A number of simplifications and improvements.

- Don't download the unusued signature
- Use the standard ICONV knob instead of LIBICONV
- Improve option descriptions and proper capitalization
- Handle the SUID chmod in the plist instead of the Makefile
- Simplify CFLAGS modification and skip the unnecessary -std=c89 addition
- Don't patch docs installation out, just let pkg DTRT
- Switch WWW to https

No PORTREVISION bump because most of these changes are NOOPs, except
the WWW change which isn't worth forcing a rebuild for.

Complete the adoption of options helpers, remove old cruft,
and take maintainership.

PR:		212352
Approved by:	maintainer timeout

- Add LICENSE
- While here, convert to options helpers and new test framework

PR:		207449
Submitted by:	dewayne@heuristicsystems.com.au
Approved by:	maintainer timeout (kuriyama, 6 months)

- Upgrade to 1.4.21 (security, predictable bits in some situation).

References: https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

- Upgrade to 1.4.20 (minor fixes).

MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight

security/gnupg1: add CPE information

- Maintainer's timeout (kuriyama@FreeBSD.org)

PR:		198850
Submitted by:	Shun <shun.fbsd.pr@dropcut.net>

- Upgrade to 1.4.19 (with SCA fix).

Do not install gnupg(7) manpage to allow installing in parallel of regular gnupg
People using spamassing can now still use it while having anything else using
newer gnupg

With hat:	portmgr

net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

(Only the first 15 lines of the commit message are shown above )

- Upgrade to 1.4.18 (bugfix).

- Upgrade to 1.4.17 (security fix).

This release includes a *security fix* to stop a possible DoS
using garbled compressed data packets which can be used to
put gpg into an infinite loop.

References:	http://lists.gnupg.org/pipermail/gnupg-announce/2014q2/000344.html

Fix fatal error at exit regarding missing trustdb although key is imported.

Submitted by:	des, philip
References:	https://bugs.gnupg.org/gnupg/issue1622
References:	http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=23191d7851eae2217ecdac6484349849a24fd94a

Bump PORTREVISION, forgotten in previous commit.

Noticed by:	mat

- Really disable iconv support when LIBICONV option is not selected [1]
  This fixes build on 10 and head when libiconv is installed and
  LIBICONV option is disabled

While here:

- Convert to USES gmake and USES tar [2]
- Convert to new LIB_DEPENDS format [2]

Reported by:	Mike Harding <mvharding@gmail.com> (via email)
Approved by:	portmgr (bapt, implicit) [1]
Approved by:	implicit portmgr@ blanket approval [2]

- Stage support

- Upgrade to 1.4.16 (security fix).

References: http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000337.html

Fixup pkgname.

PR:		ports/184444
Submitted by:	mat
Approved by:	portmgr (bapt)

Revert NO_STAGE because packaging failure with PKGNG.

- Upgrade to 1.4.15 (security, VuXML entry will follow).
- Use $STAGEDIR.

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

- Upgrade to 1.4.14.

Security: http://lists.gnupg.org/pipermail/gnupg-announce/2013q3/000330.html

I'll write vuxml entry later.

- Update to 7.31.0
- Bump PORTREVISION for ftp/curl shlib change
- Add TEST_DEPENDS
- Convert to new options framework
- Adjust options:
  - Add COOKIES
  - Add CYASSL, NSS, POLARSSL, THREADED_RESOLVER, TLS_SRP [1]
  - Add GSSAPI and SPNEGO [2]
  - Remove KERBEROS4
  - Rename LIBIDN to IDN
  - Remove TRACKMEMORY [1]
- Sort option handler
- Add SLAVEDIRS: ftp/curl-hiphop
- Cosmetic change
- Cleanup Makefile header
- While I'm here, fix typo (PORTREVSION) in x11-wm/ede/Makefile

Changes:	http://curl.haxx.se/changes.html
PR:		ports/172325 (-exp run), ports/177369 (based on) [1]
Submitted by:	Hirohisa Yamaguchi <umq@ueo.co.jp> [1], hrs (via email) [2]
Exp run by:	miwi

- convert ports to USES= gettext

Approved by:	portmgr (bapt@)

Convert security to new options framework

- Convert USE_ICONV=yes to USES=iconv
- Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and
  USE_GETTEXT=yes to USES=gettext while here

Fix a long standing bug of lib/charset.alias being overwritten, modified, and
badly tracked by ports.

Make lib/charset.alias a file only provided by converters/libiconv
Create a new USES: charsetfix, that will modify in post patch the Makefile.in to
prevent a port from modifying/overwritting the charset.alias file during make
install.
Prevent devel/gettext from installing that files.
Fix a couple of ports that actually touch charset.alias during the build phase.

Based on a patch by ale
(http://lists.freebsd.org/pipermail/freebsd-gnome/2012-October/027747.html)

Approved by:	kwm (gnome)
Exp-run by:	miwi

- Fix build on more recent current.

PR:		ports/173678
Submitted by:	swills

- Upgrade to 1.4.13 (minor bugfixes).

- Upgrade to 1.14.12 (minor bugfixes).

- Fix build on 10-current (i386) [1]
- Fix build with clang by using CFLAGS+=-std=c89.

PR:             ports/163898 [1]
Submitted by:   swills [1]

- Remove WITH_FBSD10_FIX, is no longer needed

- Fix build on FreeBSD 10

Reported by:    pointyhat

- Upgrade to 1.4.11 (minor bugfixes).

References:    
http://lists.gnupg.org/pipermail/gnupg-announce/2010q4/000303.html

Bounce PORTREVISION for gettext-related ports.  Have fun, ya'll.

Chase the ftp/curl shlib version bump.

- Upgrade to 1.4.10.

- Chase libusb20 rename in r189585.
- Mark sane-backends broken on current due to changes
  in USB stack.

Reviewed by:    thompsa (old version), miwi
Tested by:      miwi

Bump the version of the curl shared library after the ftp/curl update
to 7.19.2.
Bump PORTREVISION, even on the ports that do not have a versioned
dependency, since the binaries will most probably still stop working.

- Remove conditional checks for FreeBSD 5.x and older

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

(Only the first 15 lines of the commit message are shown above )

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

- Update to 1.4.9

Notes:
        This update fixes a possible security vulnerability
        involving memory corruption from importing malicious
        keys.

PR:             122349 / 122155
Submitted by:   Nick Barkas <snb@threerings.net> / Hirohisa Yamaguchi
<umq@ueo.co.jp>
Approved by:    maintainer timeout
Security:      
http://www.vuxml.org/freebsd/30394651-13e1-11dd-bab7-0016179b2dd5.html

- Upgrade to 1.4.8 (GPL3).

PR:             ports/118894
Submitted by:   Hirohisa Yamaguchi <umq@ueo.co.jp>

Remove always-false/true conditions based on OSVERSION 500000

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
  supports them.  This is determined by running ``configure --help'' in
  do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
  which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
  Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
  PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
  subdirectory detection.

PR:             ports/111470
Approved by:    portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by:      pointyhat exp run

- Welcome X.org 7.2 \o/.
- Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}.
- Bump PORTREVISION for ports intalling files in ${X11BASE}.

- Upgrade to 1.4.7.
  Add safety seatbelt for inserting additional text in signed OpenPGP message.

References:    
http://lists.gnupg.org/pipermail/gnupg-devel/2007-March/023687.html,
               
http://lists.gnupg.org/pipermail/gnupg-devel/2007-March/023686.html

- I forgot to bump PORTREVISION to sync with security/gnupg as of
  before 2.0 upgrade.
- Add a patch to fix info/dir entry in gnupg1.info [1].
- Recover symlink during removing this port after installing
  security/gnupg (2.0) (I forgot to add this before...).

PR:             ports/106819 [1]
Submitted by:   Dmitry A Grigorovich <odip@bionet.nsc.ru>

- Chase security/gnupg upgrade (but still 1.4.6) after repocopy.
  (not connected in ../Makefile)
- Tweak installation directory for documents to avoid conflict against
  coming gnupg upgrade (2.0.1).

I'm still testing my patch to upgrade to 2.0.1, so please wait. :-)

Number of commits found XX: 61

24 vulnerabilities affecting 117 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2020-07-07 12:52:14