It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is
documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on
adversarial .deb packa…
VuXML only (0) · listed, port not fixed yet
None. pkg audit reports nothing for this version.
Fixed (1)
VuXML entries whose affected range this version has left.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590
Reset MAINTAINER on ports maintained by amutu@amutu.com
Based on the new policy of all maintained ports reset
when maintaner is absent for 3 months.
Bug#226400 for science/py-tensorflow is ignored since 2018-03-06 (3+ months).
portscout database indicates that 48.94% of his ports aren't updated.
I have been advised by the maintainer of debootstrap that this port can be used as a cross-tool. Revert previous commit.
Submitted by: Nikolai Lifanov <lifanov@mail.lifanov.com>
Mark as not for sparc64. Debian claims to run on mips and powerpc but I do not know whether we support that in the linuxolator.
Approved by: portmgr (tier-2 blanket)
Mistkenly some positions in pkg-plist were created as directories instead of empty files. Fix this and use @sample keyword for they removal management in place of install/deinstall scripts.
PR: 207527
Reported by: amdmi3
- Drop run dependency on sysutils/coreutils, checksums are now calculated by perl functions - Port now compiles fine with warnings switches, don't turn them off - Remove configure PERL_LIBDIR patch, we set PERL_LIBDIR in CONFIGURE_ENV so perl libdir path is set properly - Remove obsolete REINPLACE_CMD commands, in latest release all that stuff was fixed and I missed it in last port update -
CCLD dpkg-deb
./lib/dpkg/.libs/libdpkg.a(buffer.o): In function `buffer_digest':
buffer.c:(.text+0x44): undefined reference to `_libmd_MD5Init'
buffer.c:(.text+0x52): undefined reference to `_libmd_MD5Update'
./lib/dpkg/.libs/libdpkg.a(buffer.o): In function `buffer_digest_done':
buffer.c:(.text+0xbf): undefined reference to `_libmd_MD5Final'
./lib/dpkg/.libs/libdpkg.a(buffer.o): In function `buffer_copy':
buffer.c:(.text+0x2fc): undefined reference to `_libmd_MD5Init'
buffer.c:(.text+0x39f): undefined reference to `_libmd_MD5Update'
cc: error: linker command failed with exit code 1 (use -v to see invocation)
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
- Update to version 1.7.25 - Sort USES, use correct option helper, fix plist when NLS=off - Add build fix patch (when NLS=off and compiler == clang) which prevents mixing C and C++ code in C header file