CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

archivers/gcpio2.15_1

GNU cpio copies files to and from archives

Maintainer
naddy@FreeBSD.org
Packages
gcpio 2.15_1
Upstream
up to date
CPE
gnu:cpio from the port
WWW
https://www.gnu.org/software/cpio/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range this version has left.

Commits (33)

Christian Weisgerber (naddy) · 2.15_1
*/*: Remove GNU_CONFIGURE_MANPREFIX

After 9fd7ee1cdf6c remove GNU_CONFIGURE_MANPREFIX from my ports.
5d55ec5b18
Gleb Popov (arrowd) · 2.15_1
*/*: Move manpages to share/man

Approved by:	portmgr (blanket)
533d7de9eb
Christian Weisgerber (naddy) · 2.15
archivers/gcpio: update to 2.15

Changes:
* Fix operation of --no-absolute-filenames --make-directories
* Restore access and modification times of symlinks in copy-in
  and copy-pass modes.
66965607d3
Christian Weisgerber (naddy) · 2.14
archivers/gcpio: update to 2.14

User-visible changes:
* New option --ignore-dirnlink
* The --reproducible option now implies --ignore-dirlink
9a5c058dda
Stefan Eßer (se) · 2.13_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.13_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mathieu Arnold (mat) · 2.13_1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.13_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Christian Weisgerber (naddy) · 2.13_1
Actually bump PORTREVISION after fixing -fno-common build.
9467e58d8b
Christian Weisgerber (naddy) · 2.13
Remove superfluous declaration to fix build with -fno-common.

Reported by:	pkg-fallout
Obtained from:	upstream
b757cfa8e7
Christian Weisgerber (naddy) · 2.13
Security update to 2.13: * Fix CVE-2015-1197 * Fix CVE-2016-2037 * Fix CVE-2019-14866 * Remove --extract-over-symlinks option again, which was part of an earlier   third-party fix for CVE-2015-1197.

Security:	f59af308-07f3-11ea-8c56-f8b156b6dcc8
a2a0136a06
Baptiste Daroussin (bapt) · 2.12_1
Install texinfo files (GNU info) into ${PREFIX}/share/info

After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816
7990f81066
Dmitry Marakasov (amdmi3) · 2.12
Most commonly used build systems support silent builds, when they hide actual commands executed and only show short summary line (like "CC foo.c"). CMake and ninja enable this by default, some autotools using ports do as well. This is unacceptable because we need complete build logs at any time, so we now switch to verbose build logs unconditionally. Note that this change deliberately affects ALL 

Change summary:

- Always do verbose builds for cmake, ninja and GNU configure (the
  latter includes check if --disable-silent-rules is actually supported
  by the configure script; there are isolated cases when it's not true)
- Remove CMAKE_VERBOSE, NINJA_VERBOSE and
  CONFIGURE_ARGS=--disable-silent-rules from all ports which set them
  for this is no longer needed
- Revert hacks for --disable-silent-rules support priorly committed
  to biology/ncbi-blast+ and net-p2p/mldonkey - no longer needed as well

Submitted by:	amdmi3
Reviewed by:	mat
Exp-run by:	antoine
Approved by:	portmgr (mat, antoine)
Differential Revision:	D7534
30a00f2227
Christian Weisgerber (naddy) · 2.12
Use the new test framework in my ports, if applicable. While here, also strip more libraries.
0b0cf9fc3e
Christian Weisgerber (naddy) · 2.12
Build fix for FreeBSD 9.  Define variable, since the old make throws

Error expanding embedded variable.

for this valid construct:

  FOO =
  BAR = $(FOO$(BAZ))
  all: $(BAR)

The bug is fixed in bmake.

Reported by:	pkg-fallout
477535a220
Christian Weisgerber (naddy) · 2.12
Update to 2.12, but retain local fix for CVE-2015-1197.
cc8446f3ae
Mathieu Arnold (mat) · 2.11_3
MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight
60d1a83c2a
Christian Weisgerber (naddy) · 2.11_3
CVE-2014-9112: Heap-based buffer overflow in the process_copy_in function allows remote attackers to cause a denial of service via a large block value in a cpio archive. Fix from a series of upstream commits by Sergey Poznyakoff.

CVE-2015-1197: cpio, when using the --no-absolute-filenames option,
allows local users to write to arbitrary files via a symlink attack
on a file in an archive.
Fix from Vitezslav Cizek after 3.5 years of gestation in the SUSE
bug tracker.

PR:		198954
Obtained from:	Debian
22141a97fb
Christian Weisgerber (naddy) · 2.11_2
Add CPE information.

PR:		198236
Submitted by:	shun.fbsd.pr@dropcut.net

While here, add LICENSE, too.
25c8965284
Christian Weisgerber (naddy) · 2.11_1
USE_BZIP2 -> USES+=tar:bzip2 USE_XZ    -> USES+=tar:xz
62ef31db61
Baptiste Daroussin (bapt) · 2.11_1
Fix properties on pkg-plist
75d1dff36d
Christian Weisgerber (naddy) · 2.11_1
Use MAKE_CMD to run regression tests.
487b0e5355
Christian Weisgerber (naddy) · 2.11_1
Use stage and options helpers.
afc2bdaaf3
Baptiste Daroussin (bapt) · 2.11_1
Add NO_STAGE all over the place in preparation for the staging support (cat: archivers)
b80ec3e204
Christian Weisgerber (naddy) · 2.11_1
For all my ports * remove MAKE_JOBS_SAFE (default now) * change USE_GMAKE=yes to USES=gmake
9c7a77ab1e
Alex Kozlov (ak) · 2.11_1
- Convert USE_GETTEXT to USES (part 3)

Approved by:	portmgr (bapt)
e159824929
Christian Weisgerber (naddy) · 2.11_1
Convert to OptionsNG and trim Makefile headers.
6f90146232
Christian Weisgerber (naddy) · 2.11_1
Remove pointless header lines from ports I created once upon a time.
0062a3fa62
Martin Wilke (miwi) · 2.11_1
- Get Rid MD5 support

With hat:	portmgr (myself)
65e190c0f0
Ade Lovett (ade) · 2.11_1
Bounce PORTREVISION for gettext-related ports.  Have fun, ya'll.
8d837132c7
Christian Weisgerber (naddy) · 2.11
* Do not mark as broken on sparc64.

* Fix the build framework so it can successfully #define a wrapper for
  stat() on those systems where namei() behaves strangely--independent
  of architecture.
45a4dbb95b
Mark Linimon (linimon) · 2.11
Mark as broken on sparc64.

Hat:		portmgr
5208dca85e
Christian Weisgerber (naddy) · 2.11
Initial import for GNU cpio 2.11.

GNU cpio copies files into or out of a cpio or tar archive.  The
archive can be another file on the disk, a magnetic tape, or a pipe.
572049dc82