Current status

Number of commits found XX: 113 (showing only 100 on this page)

1 | 2  »  

security/libgcrypt: update 1.9.1 --> 1.9.2

security/libgcrypt: Update 1.8.7 --> 1.9.1

Note: 1.8.7 nor 1.9.1 are vulnerable to CVE-2021-3345. Only 1.9.0 is.

Update 1.8.6 --> 1.8.7

Assume maintainership.

Update 1.8.5 --> 1.8.6

Return cpm@'s ports to the pool after safekeeping his commit bit.

With hat:	portmgr-secretary

security/libgcrypt: Update to 1.8.5

- Pet portlint

Noteworthy changes in version 1.8.5
===================================

* Bug fixes:

  - Add mitigation against an ECDSA timing attack.
    [T4626,CVE-2019-13627]

  - Improve ECDSA unblinding.

* Other features:

  - Provide a pkg-config file for libgcrypt.

Release-info: https://dev.gnupg.org/T4683

For further details, see
https://lists.gnupg.org/pipermail/gnupg-announce/2019q3/000440.html

MFH:		2019Q3
Security:	http://vuxml.freebsd.org/freebsd/c9c6c2f8-cd54-11e9-af89-080027ef1a23.html

Install texinfo files (GNU info) into ${PREFIX}/share/info

After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816

security/libgcrypt: Update to 1.8.4

- Update libgpg-error version required to 1.32

Changelog: https://lists.gnupg.org/pipermail/gnupg-announce/2018q4/000431.html

security/libgcrypt: Update to 1.8.3 (bugfix)

- Improve comment in Makefile
- Provide more elaborate port description and update WWW in pkg-descr

Noteworthy changes in version 1.8.3
===================================

   - Use blinding for ECDSA signing to mitigate a novel side-channel
     attack.  [#4011,CVE-2018-0495]

   - Fix incorrect counter overflow handling for GCM when using an IV
     size other than 96 bit.  [#3764]

   - Fix incorrect output of AES-keywrap mode for in-place encryption

(Only the first 15 lines of the commit message are shown above )

security/libgcrypt: update to 1.8.2

- Update libgcrypt to 1.8.2
- Bump library version in pkg-plist

Changelog: https://abi-laboratory.pro/tracker/changelog/libgcrypt/1.8.2/log.html
Binary compatibility report:
https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.8.1/1.8.2/29a74/abi_compat_report.html

MFH:		2017Q4

security/libgcrypt: update to 1.8.1

- Update libgcrypt to 1.8.1
- Bump library version in pkg-plist

Noteworthy changes in version 1.8.1

 * Bug fixes:

   - Mitigate a local side-channel attack on Curve25519 dubbed "May
     the Fourth be With You".  [CVE-2017-0379] [also in 1.7.9]

   - Add more extra bytes to the pool after reading a seed file.

   - Add the OID SHA384WithECDSA from RFC-7427 to SHA-384.

   - Fix build problems with the Jitter RNG

   - Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE).

Changes: https://abi-laboratory.pro/tracker/changelog/libgcrypt/1.8.1/log.html
Binary compatibility report:
https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.8.0/1.8.1/31172/abi_compat_report.html

MFH:		2017Q3
Security:	https://vuxml.freebsd.org/freebsd/22f28bb3-8d98-11e7-8c37-e8e0b747a45a.html

- Fix the command line munging for jitterbase

PR:		220937
Reported by:	O. Hartmann <ohartmann@walstatt.org>
Obtained from:	https://dev.gnupg.org/rCac39522ab08fcd2483edc223334c6ab9d19e91f3
MFH:		2017Q3 (blanket)

Set MAKEINFO to the full path of makeinfo when USES=makeinfo is set.

PR:		221027
Reviewed by:	mat
Approved by:	portmgr (antoine)

- Remove unnecessary extra-patch-aarch64 (applied upstream)

Reported by:	Shawn Webb <shawn.webb@hardenedbsd.org> via email
MFH:		2017Q3 (blanket)

security/libgcrypt: update to 1.8.0

- Update libgcrypt to 1.8.0
- Update libgpg-error version required to 1.25
- Bump library version in pkg-plist

Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q3/000410.html
Binary compatibility report:
https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.8/1.8.0/d9ddd/abi_compat_report.html

PR:		220858
MFH:		2017Q3
Exp-run by:	antoine

security/libgcrypt: update to 1.7.8

- Update libgcrypt to 1.7.8
- Bump library version in pkg-plist

Noteworthy changes in version 1.7.8

 * Bug fixes:

   - Mitigate a flush+reload side-channel attack on RSA secret keys
     dubbed "Sliding right into disaster".  For details see
     <https://eprint.iacr.org/2017/627>.  [CVE-2017-7526]

Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html
Binary compatibility report:
https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.7/1.7.8/95cc7/abi_compat_report.html

PR:		220382
MFH:		2017Q3
Exp-run by:	antoine
Security:	https://www.vuxml.org/freebsd/ed3bf433-5d92-11e7-aa14-e8e0b747a45a.html

security/libgcrypt: update to 1.7.7

- Update libgcrypt to 1.7.7
- Silence all explicitly called commands
- Update WWW in pkg-descr: use https://
- Bump library version in pkg-plist

Noteworthy changes in version 1.7.7

* Bug fixes:

  - Fix possible timing attack on EdDSA session key.
  - Fix long standing bug in secure memory implementation which could
     lead to a segv on free. [bug#3027].

PR:		219747
MFH:		2017Q2
Exp-run by:	antoine

- Patch only applies to aarch64. Remove armv6 check.

Reported by:	jbeich
MFH:		2017Q1 (blanket)

security/libgcrypt: fix build on aarch64

libtool: compile:  cc -DHAVE_CONFIG_H -I. -I.. -I../src -I../src
-Wa,--noexecstack -O2 -pipe -fno-strict-aliasing -std=gnu89 -MT
cipher-gcm-armv8-aarch64-ce.lo -MD -MP -MF .deps/cipher-gcm-armv8-aarch64-ce.Tpo
-c cipher-gcm-armv8-aarch64-ce.S  -fPIC -DPIC -o
.libs/cipher-gcm-armv8-aarch64-ce.o
cipher-gcm-armv8-aarch64-ce.S:190:3: error: instruction requires: neon
eor v31.16b, v31.16b, v31.16b
  ^

PR:		217271
Submitted by:	krion
Reported by:	Simon Rozman <simon@rozman.si>
MFH:		2017Q1 (blanket)

security/libgcrypt: update to 1.7.6

Noteworthy changes in version 1.7.6

* Bug fixes:

  - Fix AES CTR self-check detected failure in the SSSE3 based
     implementation.
  - Remove gratuitous select before the getrandom syscall.

PR:		216305
MFH:		2017Q1
Exp-run by:	antoine

security/libgcrypt: Update to 1.7.5

- Update to 1.7.5
- Remove files useless to install from DOCS
- Remove patch since sparc v8 is not supported on FreeBSD
- Bump library version in pkg-plist

Changelog:
  https://lists.gnupg.org/pipermail/gnupg-announce/2016q4/000399.html

PR:		215236
Approved by:	amdmi3 (mentor)
MFH:		2016Q4
Exp-run by:	antoine

${RM} already has -f.

PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

- Update to 1.7.3 (security fixes)
- Bump library version in pkg-plist

ref: https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html

Reviewed by:	amdmi3 (mentor)
Approved by:	amdmi3 (mentor)
MFH:	2016Q3
Differential Revision:	D7558

- Update to 1.7.2
- Bump library version in pkg-plist

Changelog:
  https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000392.html

PR:	211153
Reviewed by:	junovitch (mentor)
Approved by:	junovitch (mentor)
MFH:		2016Q3
Exp-run:	antoine
Differential Revision:	D7221

- Update to 1.7.1
- Remove unneeded patch (applied upstream)
- Convert to new test framework

  https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000389.html

PR:		210328
Reviewed by:	amdmi3, junovitch (mentors)
Approved by:	amdmi3, junovitch (mentors)
MFH:		2016Q2
Exp-run:	antoine
Differential Revision:	D6865

- Update to 1.7.0
- Remove unneeded patches (applied upstream)
- Fix inline assembler error on 9.x
- Fix pkg-plist

Changelog: https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000386.html

PR:		208907
Approved by:	junovitch (mentor)
Exp-run:	antoine
Differential Revision:	D5989

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

- cipher/salsa20.c (selftest): Ensure 16-byte alignment for salsa20
context structure.

- mpi/longlong.h: Fix build on sparc.

PR:		206919
Approved by:	junovitch (mentor)

- Update libgcrypt to 1.6.5
- Change LICENSE since support has been added for "or later" variants of GNU
licenses.
- Remove needless patch-cipher_salsa20.c

Changes:
  https://lists.gnupg.org/pipermail/gnupg-announce/2016q1/000384.html

PR:		207107
Approved by:	junovitch (mentor)

This patch fixes alignment of self-test context in salsa20 required
for amd64 implementation.

Other changes:
   - Regenerate patches to make portlint(1) happy
   - Update MAINTAINER to my @FreeBSD.org address
   - Bump PORTREVISION

PR:		206919
Approved by:	junovitch (mentor)

Add upstream commit to fix build errors with -pedantic.

This fixes at least devel/ccrtp's build on 9.3, which is currently broken:

  In file included from ccrtp/crypto/gcrypt/gcrypthmac.cpp:23:
  /usr/local/include/gcrypt.h:509: error: comma at end of enumerator list
  /usr/local/include/gcrypt.h:1346: error: comma at end of enumerator list
  Makefile:571: recipe for target 'gcrypthmac.lo' failed

MFH'ing this is not necessary, this bug is only present in libgcrypt 1.6.4.

PR:		205000
Approved by:	maintainer timeout (15 days)

security/libgcrypt: Re-add missing patch

- This patch was removed when updating to 1.6.4, so the patch needs
  to be put back in order to solve the bug 204399.

PR:		204600
Submitted by:	Carlos J. Puga Medina <cpm@fbsd.es> (maintainer)

Enable the building and installation of the .a version of the library
for static linking.  This affects emulators/qemu-user-static primarily
but will help anyone trying to statically link their applications.

Reviewed by:	tijl cpm@fbsd.es (Maintainer)

- Update to 1.8.4

Changes:	http://lists.gnupg.org/pipermail/gnupg-announce/2015q3/000375.html
PR:		204003
Submitted by:	Carlos J Puga Medina <cpm@fbsd.es> (maintainer)

- Drop 8.x support
- Switch to options helpers

Approved by:	portmgr blanket

MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight

- Add CPE information

PR:		198985
Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es> (maintainer)

security/libgcrypt: 1.6.2 -> 1.6.3

Changes:
http://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html

PR:		198109
Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es> (maintainer)

security/libgcrypt: fix some issues

- Fix crash at cipher/salsa20.c module on amd64.
- Fix strip shared object.
- Bump PORTREVISION.

PR:		197146
Submitted by:	cpm@fbsd.es (maintainer)

security/libgcrypt: 1.6.1 -> 1.6.2, bump depends

Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
  with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
  error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code.  Take
	care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in

(Only the first 15 lines of the commit message are shown above )

security/libgcrypt: fix build with GCC on 8.x/amd64, 2nd attempt

Thanks to tijl@ for spotting the Makefile bug.

PR:		192555
Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es>
Approved by:	maintainer (timeout)

security/libgcrypt: fix build without assembler on 8.x/amd64

PR:		192555
Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es>
Approved by:	maintainer (timeout)

Bump PORTREVISION on more ports that depend on libgcrypt after the update
in r363436 and remove the UPDATING entry because it did not guarantee
that all ports were updated nor that they were updated in the right order.
Also remove libgcrypt.la again.

PR:		192342
Approved by:	portmgr (implicit, bump unstaged ports)

devel/security: re-add .la file

- py-gnome-extras (and others) depend on it

PR:		192342
Submitted by:	freebsd@johnlevine.com

security/libgcrypt: avoid non-portable use of assembler instruction on amd64

PR:		191256
Submitted by:	arcade@b1t.name

security/libgcrypt: 1.5.3_3 -> 1.6.1

- Update to 1.6.1
- Remove some unneeded patches
- Fix pkg-plist
- report configure bug upstream
  https://bugs.g10code.com/gnupg/issue1668
- report API breakage downstream and find that MacPorts had the same issue
  https://rt.cpan.org/Ticket/Display.html?id=97201
- bump PORTREVISION for dependent ports (approx. 100 ports)
- Thanks to exp-run by antoine@ to find ports that break
- patch ports that would otherwise break
  security/shishi with PR 192164 is already committed
  [1] devel/ccrtp
  [2] editors/abiword
  [3] security/p5-Crypt-GCrypt

PR:		191256, 192162 [1], 192163 [2], 192166 [3]
Submitted by:	Carlos Jacobo Puga Medina <cjpugmed@gmail.com>
Approved by:	maintainer timeout, antoine (exp-run), portmgr (implicit)

Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS.

Added needed ASM instructions for armv6 architecture support.

PR:	190848
Submitted by:	andrew@freebsd.org
Reviewed by:	mat@freebsd.org

Fix build on system built WITHOUT_INFO

With hat:	portmgr

When linking a library libA with a library libB using libtool, if libB.la
exists, libtool will add all libraries libB.la refers to (dependency_libs
field) to the linker command line and store them in the dependency_libs
field of libA.la.  So everything that subsequently links with libA will also
link to these extra libraries.  This causes too much overlinking.

This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs
field in .la libraries during staging.  However, because .la libraries have
very limited use when dependency_libs is empty it makes sense to completely
remove them during staging.

So with this commit USES=libtool is modified to remove .la libraries and a
new form (USES=libtool:keepla) is introduced in case they need to be kept
(dependency_libs is still emptied).

(Only the first 15 lines of the commit message are shown above )

- USES=libtool tar:bzip2.
- Enable asm on FreeBSD/i386 >= 10.0.
- Enable asm on FreeBSD/amd64. [1]
- Use MAKE_CMD instead of MAKE to run regression tests.

PR:		ports/187441
Submitted by:	Stoyan Dimov <pr.freebsd.org@registrations.systeem.com> [1]
Approved by:	maintainer timeout (2 weeks)

Replace USE_GCC=4.2+ by USE_GCC=any. [1]
And USE_GMAKE by USES=gmake where touching a port because of the above.

Approved by:	portmgr (bapt) [1]

security/libgcrypt: Remove BROKEN on powerpc

- Remove BROKEN on powerpc [1]
- Enable STAGE support

PR:		ports/183066
Submitted by:	jhibbits
Approved by:	maintainer timeout (1 month)

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

Use GCC 4.2+ on armv6.

Reviewed by:	umq
Approved by:	umq

Update security/libgcrypt to 1.5.3 [1], and document the latest gnupg
and libgcrypt vulnerability

PR:		181231
Submitted by:	Hirohisa Yamaguchi (maintainer) [1]
Security:	http://www.vuxml.org/freebsd/689c2bf7-0701-11e3-9a25-002590860428.html

Update to 1.5.2

Changelog:
http://lists.gnupg.org/pipermail/gnupg-announce/2013q1/000324.html (1.5.1)
http://lists.gnupg.org/pipermail/gnupg-announce/2013q2/000325.html (1.5.2)

PR:             177100
Submitted by:   Hirohisa Yamaguchi <umq@ueo.co.jp> (maintainer)

Mark as broken on powerpc only on -current.  This will unblock gnome,
kde, and other builds on 8 and 9.

Hat:		portmgr

- Properly define deprecated functions to remove warnings in other
  ports
- Avoid installing multiple copies of the GPLv2 and LGPL21 licenses
- Bump PORTREVISION

PR:		170488
Submitted by:	Jason E. Hale <bsdkaffee@gmail.com>
Approved by:	Hirohisa Yamaguchi (maintainer)

- Mark Broken for ppc
- Remove check for obsolete, unsupported OS version
- pet portlint (space/vs tab, like 41, 44 of Makefile)

PR:		ports/166388
Submitted by:	scheidell@ (me)
Reported by: 	glevand <geoffrey.levand@mail.ru>
Approved by:	maintainer (timeout, 21 days)

- Add a workaround to fix build on FreeBSD 10.0 i386

Require ligpg-error>=1.8 to build succesfully

PR:             ports/159873
Submitted by:   Michael Scheidell <scheidell@secnap.net>
Approved by:    maintainer, miwi, wen (mentors implicit)

- Update to 1.5.0

PR:             ports/158574
Submitted by:   Hirohisa Yamaguchi <umq@ueo.co.jp> (maintainer)

Sync to new bsd.autotools.mk

Fix linking with clang, and give longlong.h a simular treatment like was
done in 9-current so clang can build it on i386.

Update LICENSE block, and remove md5 sum.

PR:             ports/151349
Submitted by:   myself
Approved by:    Yamaguchi Hirohisa <umq@ueo.co.jp> (maintainer)

Update to 1.4.6.

PR:             ports/148755
Submitted by:   Hirohisa Yamaguchi <umq@ueo.co.jp> (maintainer)

Bump PORTREVISION for latest gettext update. (I'm not sure anyone still needs
it, but it doesn't really hurt, either.)

PR:             147295
Submitted by:   Grzegorz Blach <magik@roorback.net>
Approved by:    maintainer timeout (>3 weeks)
Feature safe:   yes

Upgrade to version 1.4.5

PR:     ports/144312
Submitted by:   Sunpoet Po-Chuan Hsieh <sunpoet at sunpoet.net>
Reviewed by:    Hirohisa Yamaguchi (maintainer)
Approved by:    itetcu (mentor)

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:      marcus and kwm
Pointyhat-exp:  a few times by pav
Tested by:      pgollucci, "Romain Tartière" <romain@blogreen.org>, and
                a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:    marcus
Approved by:    portmgr

- Update to 1.4.4

PR:             130914
Submitted by:   Hirohisa Yamaguchi <umq at ueo dot co dot jp> (maintainer)

- Update to 1.4.3
- Pass maintainership to submitter per PR 127224

PR:             ports/127478
Submitted by:   Hirohisa Yamaguchi <umq at ueo.co.jp>
Approved by:    arved (maintainer)

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

(Only the first 15 lines of the commit message are shown above )

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

Update to 1.4.1

PR:             123099
Submitted by:   Hirohisa Yamaguchi

Disable padlock-support on 6.x

PR:             121207
Submitted by:   ale, Mark Andrews

Update to 1.4.0

PR:             118541
Submitted by:   Hirohisa Yamaguchi

security/libgcrypt portlint fixes

        1. remove quotes from COMMENT
        2. INSTALLS_SHLIB -> USE_LDCONFIG

PR:             ports/115286
Submitted by:   David Yeske <dyeske@gmail.com>
Approved by:    maintainer timeout

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
  supports them.  This is determined by running ``configure --help'' in
  do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
  which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
  Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
  PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
  subdirectory detection.

PR:             ports/111470
Approved by:    portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by:      pointyhat exp run

Track libgpg-error shlib version change.

Update to 1.2.4

Use libtool port instead of included one to avoid objformat a.out botch

- Chase libgpg-error version bump [1]
- Add explicit version to libgpg-error dependency where missing [2]
- Bump PORTREVISION [1]

Approved by:    maintainers (arved, lofi, novel,
                ports at mcdermottroe dot com) [1]
Suggested by:   novel, lofi [2]

Update to 1.2.3 (Minor bugfix release)

Remove USE_REINPLACE from all categories starting with S

- Chase libgpg-error shlib version bump (.1 -> .2)
- Bump PORTREVISION

Conversion to a single libtool environment.

Approved by:    portmgr (kris)

Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
        http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.

Update to 1.2.2

Noteworthy changes are:
 * Made the RNG immune against fork without exec.
 * Minor changes to some function declarations.  Buffer arguments are
   now typed as void pointer.  This should not affect any compilation.
 * A bug in the definition of gcry_cipher_register has been fixed.

Fix build on powerpc

Bump PORTREVISION for previous change.

Reported by:    pointyhat

Remove USE_PERL

PR:             80046
Submitted by:   leeym

Update libgcrypt to 1.2.1. Changes:
        * made the code try to lock secure memory pool not only when running as
          root,
        * fixed type usage in Serpent,
        * made the code mix the PID into the entropy pool for better protection
          after a fork,
        * fixed memory leak in RSA.
        * fixed alignment problems in Rijndael,
        * fixed memory leak in gcry_pk_sign(),
        * fixed broken pointer access in gcry_ac_open(),
        * updated the documentation,
        * fixed several other bugs.
Chase Shared library version and bump PORTREVISION of affected ports.

Use libtool 15

 managed to break this just in time for the ports freeze.

Submitted by:   lofi, eik
Approved by:    portmgr (eik)

Nuke the gnupg sigchecking code. There are bugs and I don't have the time
to work on this now.

PR:             66417
Submitted by:   Lupe Christoph <lupe@lupe-christoph.de>

Apply a big libtool patch to allow porters to use the libtool installed by
the libtoolX ports instead of the one included with each port.  Ports that
set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of
the included version.  To restore previous behavior, use the new macro,
USE_INC_LIBTOOL_VER.  Both macros accept the same argument: a libtool version.

For example, to use the ports version of libtool-1.5, add the following to
your Makefile:

USE_LIBTOOL_VER=        15

To use the included version of libtool with extra hacks provided by
libtool-1.5, add the following to your Makefile:

USE_INC_LIBTOOL_VER=    15

With this change, ports that had to add additional libtool hacks to prevent
.la files from being installed or to fix certain threading issues can now
delete those hacks (after appropriate testing, of course).

PR:             63944
Based on work by:eik and marcus
Approved by:    ade (autotools maintainer)
Tested by:      kris on pointyhat
Bound to be hidden problems:    You bet

Add EXTRACT_ONLY

Noticed by:     bsdtar

Fix pkg-plist

Reported by:                            kris, markus
Pointy hat (not 216.136.204.22) to:     arved

Add dependency on ligpg-error

PR:             66228
Submitted by:   michael johnson

Number of commits found XX: 113 (showing only 100 on this page)

1 | 2  »  

10 vulnerabilities affecting 79 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2021-03-05 21:21:29