CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

archivers/rpm44.18.2_3

Red Hat Package Manager

Maintainer
rodrigo@FreeBSD.org
Packages
rpm4 4.18.2_3, rpm4-noopenmp 4.18.2_3
Upstream
Higher version available: 6.1.0
CPE
rpm:rpm from the port
WWW
https://rpm.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (2)

VuXML entries whose affected range this version has left.

Commits (144)

Jan Beich (jbeich) · 4.12.0.1_3
devel/nspr, security/nss: drop version from SONAME

No other downstream appends synthetic library version, and doing so
causes underlinking due to fragile build system (see below). Not to
mention being unable to swap out bundled libs from upstream builds.

  $ cc -lplds4 -L/usr/local/lib
  /usr/lib/crt1.o: In function `_start1':
  crt1_c.c:(.text+0xa6): undefined reference to `main'
  /usr/local/lib/libplds4.so: undefined reference to `pthread_set_name_np'
  /usr/local/lib/libplds4.so: undefined reference to `pthread_create'
  /usr/local/lib/libplds4.so: undefined reference to `pthread_condattr_init'
  /usr/local/lib/libplds4.so: undefined reference to `pthread_setschedparam'
  /usr/local/lib/libplds4.so: undefined reference to `pthread_getschedparam'

PR:		213144
Exp-run by:	antoine
f5f47a5a4e
Mathieu Arnold (mat) · 4.12.0.1_2
USE_BDB cleanup.

- USE_BDB=4x+ -> USES=bdb.
- USE_BDB=yes -> USES=bdb.
- USE_BDB=xx  -> USES=bdb:xx.

Other modernisations when I see them.

PR:		209183
Sponsored by:	Absolight
f037e39601
Mathieu Arnold (mat) · 4.12.0.1_2
Cleanup patches, a* categories.

Rename them to follow the make makepatch naming, and regenerate them.

With hat:	portmgr
Sponsored by:	Absolight
9fa9eb9ac7
Dmitry Marakasov (amdmi3) · 4.12.0.1_2
Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by default anyway and don't need to be listed

Approved by:	portmgr blanket
c86e9d9724
Mathieu Arnold (mat) · 4.12.0.1_2
Remove ${PORTSDIR}/ from dependencies, Mk and categories a, b, and c.

With hat:	portmgr
Sponsored by:	Absolight
7f4572eae4
Baptiste Daroussin (bapt) · 4.12.0.1_2
mirrorservice.org no longer mirrors this ftp
96cb6e6742
Baptiste Daroussin (bapt) · 4.12.0.1_2
Enforce libarchive from ports
4e2de50b4d
Johan van Selst (johans) · 4.12.0.1_2
Add security fix for CVE-2014-8118

PR:		198796
Submitted by:	Sevan Janiyan <venture37@geeklan.co.uk>
Obtained from:	https://bugzilla.redhat.com/show_bug.cgi?id=1168715
MFH:		2015Q1
7abac1dbfe
John Marino (marino) · 4.12.0.1_1
Add USES=alias to several ports

Alias is a new USES tool that allows DragonFly to masquerade as FreeBSD
by setting CFLAGS+= -D__FreeBSD__.  For some ports, this fixes the build
without the need for additional patches.

Approved by:	portmgr (bapt, blanket)
badd7a1eba
Baptiste Daroussin (bapt) · 4.12.0.1_1
Clean up plist
161b92dff7
Antoine Brodin (antoine) · 4.12.0.1_1
Really unbreak on freebsd 8/9
41ace001d9
Johan van Selst (johans) · 4.12.0.1_1
Remove dbus option, which has no effect

Submitted by:	tijl
5efdbede94
Johan van Selst (johans) · 4.12.0.1_1
- Use archivers/libarchive for FreeBSD < 10 - Bump portrevision

Submitted by:	John Hein <john.hein@microsemi.com>
0b80c90f59
Johan van Selst (johans) · 4.12.0.1
- Update to rpm 4.12.0.1 - Add missing dependency
81a2e90426
Johan van Selst (johans) · 4.12.0
Update to rpm 4.12.0
f68cf750cc
John Marino (marino) · 4.11.3_1
archivers/rpm4: Fix build (was missing pkg-plist changes due to update)

The upgrade from version 4.11.2 => 4.11.3 required several lines in the
pkg-plist to be changed, but the file wasn't modified.  "Just fix it" now.
BTW, the pkg-plist needs badly to be alphabetized, but I didn't do this.
ea3f80e6c0
Johan van Selst (johans) · 4.11.3
Update to rpm 4.11.3
179f774c4c
Dmitry Marakasov (amdmi3) · 4.11.2_2
Revert unneeded plist changes
d379ee7cfa
Dmitry Marakasov (amdmi3) · 4.11.2_2
- Fix build by providing LIBS - Fix plist

Approved by:	portmgr blanket
8b69c817b8
Matthias Andree (mandree) · 4.11.2_2
Berkeley DB cleanup, remove versions 4.0 ... 4.7. - Mk/bsd.database.mk rewrite, new default to db5. - db6 is eligible by default only if installed on the system. - Bump PORTREVISION of all ports that directly depend on BerkeleyDB or   where USE_BDB is found in the port's directory - Patch a few ports such that they will pick up or work with newer   versions. - Add UPDATING entry - Drive-by format 

NOTE: please read UPDATING and the Wiki page before proceeding!

Announcement:	http://lists.freebsd.org/pipermail/freebsd-ports-announce/2014-August/000090.html
Wiki reference:	https://wiki.freebsd.org/Ports/BerkeleyDBCleanup
PR:		192690
Approved by:	portmgr (implicit, PORTREVISION bump on unstaged ports)
b50a4b0708
Johan van Selst (johans) · 4.11.2_1
rpm4 does not build if default python is 3.x - force use of python 2.7

PR:		192061
Submitted by:	pi
0d0f056de5
Tijl Coosemans (tijl) · 4.11.2_1
Remove two libtool fixes from Mk/Uses/libtool.mk.  They don't always work when an older version of a package is installed.  This is the case when an executable links with installed libraries and with uninstalled libraries that link with other uninstalled libraries.  For each of the directly linked libraries the executable will have an rpath (/usr/local/lib for the installed libraries and a path un

With this commit executables will overlink with uninstalled indirect
libraries again so their location is added to the rpath of the executable.

This partially reverts r358784.

PR:		191611
Approved by:	portmgr (bapt)
c958a48581
Adam Weinberger (adamw) · 4.11.2_1
Reduce unnecessary bsd.port.options.mk inclusions by using OPTIONS helpers.

For liborange, reverse the logic, as I'm pretty sure the OPTIONS were being
used to disable the selected options.

Approved by:	portmgr (blanket)
41fcfb64f9
Tijl Coosemans (tijl) · 4.11.2_1
Add 4 new sed commands to USES=libtool.  The first two apply some of the changes that Debian made to their libtool.  The first command applies to libtool versions 1.4 and up.  The second command is somewhat more elaborate but essentially it uses the sed hold space to move an "elif...fi" block down.  It applies to 2.x.  Together these reduce overlinking to unpatched .la files (from ports that don't

The third and fourth command fix relinking.  During staging libtool may
relink libA when it links to another library in the work directory libB.
The reason is that libA created during build phase has its runpath set to
the location of libB in the work directory.  This allows running an
executable that links to libA from within the work directory.  The relink
removes this extra runpath.

When libtool relinks libA it replaces "libB.la" on the linker command line
with "-L${STAGEDIR}${PREFIX}/lib -lB" with the intention to link to libB in
the stage directory but this -L flag isn't necessarily the first so another
libB may be linked instead.  The two sed commands make relink the same as a
normal link.  This means libtool will relink with libraries from the work
directory using a path similar to "../srcB/.libs/libB.so" without -L flags.
This applies to libtool 1.4 and up.  Earlier versions don't seem to relink
libraries.
(This fixes ports like devel/apr1 so they link with freshly built libraries
instead of installed libraries.)

Fix all ports with missing libraries.

Additionally:
archivers/rpm4: USES=patchfix.
databases/gdbm: INSTALL_TARGET=install-strip.
devel/gnome-vfs: remove patch that doesn't change anything.
devel/ois: INSTALL_TARGET=install-strip and use standard USE_AUTOTOOLS.
devel/zziplib: INSTALL_TARGET=install-strip, MAKE_CMD.
multimedia/mjpegtools: remove USE_AUTOTOOLS, use modern compiler on i386
   instead of disabling optimisations.
net/libnetdude: disable static plugins.

PR:		190941
Exp-run:	antoine
Approved by:	portmgr (antoine)
3e4a806167
Baptiste Daroussin (bapt) · 4.11.2_1
Replace lang/lua with the new lang/lua51

lang/lua51 is working the same way lang/lua52, chase ports using lua 5.1
Make the default lua lua52
Make all lua ports using USES=lua

Approved by:	portmgr (implicit)
e836ab008a
Johan van Selst (johans) · 4.11.2
- Update to rpm 4.11.2 - Minor port clean-ups
8735e22ac3
Rene Ladan (rene) · 4.11.1_1
Python cleanup: - USE_PYTHON* = 2.X -> USE_PYTHON* = 2 - USE_PYTHON* = 2.X+ -> USE_PYTHON* = yes Reviewed by:	python (mva, rm) Approved by:	portmgr-lurkers (mat)
50f8eaece1
Baptiste Daroussin (bapt) · 4.11.1_1
Fix pkgname conflicts
dd82006981
Johan van Selst (johans) · 4.11.1_1
- Use PKGNAMESUFFIX instead of LATEST_LINK to avoid conflicts - Enable staging support - Shebang-fix in installed scripts - Explicit PORTDOCS file list - Remove additional patch for old FreeBSD releases

The first part of these changes were committed in r331479
98f95a8549
Johan van Selst (johans) · 4.11.1
update
7e07f77eb4
Baptiste Daroussin (bapt) · 4.11.1
Add NO_STAGE all over the place in preparation for the staging support (cat: archivers)
b80ec3e204
Baptiste Daroussin (bapt) · 4.11.1
Convert archivers from USE_GMAKE to USES=gmake While here: - Trim headers - Convert some port to the new perl world - Convert some port from USE_GNOME=pkgconfig to USES=pkgconfig
ecfa41e79d
Johan van Selst (johans) · 4.11.1
Update RPM to 4.11.1
44fa95635b
Marcus von Appen (mva) · 4.11.0.1
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig while here

Reviewed by:	bapt, kwm
821843ca06
Alex Kozlov (ak) · 4.11.0.1
- Convert USE_GETTEXT to USES (part 3)

Approved by:	portmgr (bapt)
e159824929
Johan van Selst (johans) · 4.11.0.1
- Update rpm to 4.11.0.1   Release notes: http://rpm.org/wiki/Releases/4.11.0
54345369c0
Johan van Selst (johans) · 4.10.2
Shortly after the initial release, a new tarball was uploaded which includes a small fix that was duplicated already in the FreeBSD port. - Update checksum and remove patch introduced with the original release

No functional changes.
801590780d
Johan van Selst (johans) · 4.10.2
- Update rpm 4.10.2 - Trim makefile header - Update local patch to fix compilation issue
a89bb95f1b
Johan van Selst (johans) · 4.10.1
Update rpm to 4.10.1 Release notes http://rpm.org/wiki/Releases/4.10.1
053c7b5c57
Johan van Selst (johans) · 4.10.0
Fix build on FreeBSD 7.x

Reported by:	pav (pointyhat)
5ceaed7ee7
Johan van Selst (johans) · 4.10.0
- Update rpm to 4.10   http://rpm.org/wiki/Releases/4.10.0 - Remove unneeded library version numbers - Remove patch file that's no longer relevant - Register conflict with rpm 5.x - Convert to new options framework - Note: shared library version got bumped
bfd38a27c0
Johan van Selst (johans) · 4.9.1.3
Correct previous commit: now use the real patch, rather than a patch of the patch to update the port

Reported by:	fluffy
Pointyhat to:	johans
c14da463da
Johan van Selst (johans) · 4.9.1.3
Add patch to fix compilation on CURRENT (10.x)

PR;		ports/168463
Submitted by:	Rodrigo OSORIO <rodrigo@bebik.net>
51d481d8eb
Johan van Selst (johans) · 4.9.1.3
Update rpm4 to 4.9.1.3

Feature safe:	yes
377795f82b
Johan van Selst (johans) · 4.9.1.2_2
- Fix plist when python is not selected [1] - Aggregate variable settings

Reported by:	Peter <pmc@citylink.dinoex.sub.org> [1]
Feature safe:	yes
3f0b8fea95
Johan van Selst (johans) · 4.9.1.2_1
Fix conflicting glob_t definitions, which triggered a crash when importing the rpm4 module in Python.

PR:		ports/162483
Submitted by:	Sean Mitchell <smitchell@hcn-inc.com>
Feature safe:	yes
c8144eafb4
Martin Wilke (miwi) · 4.9.1.2
- Get rid FreeBSD 6.X support
f0306011f3
Johan van Selst (johans) · 4.9.1.2
Update to rpm 4.9.1.2 (bugfix release)
177f503bd7
Dmitry Marakasov (amdmi3) · 4.9.1.1_1
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav
6f6fbe4bdf
Johan van Selst (johans) · 4.9.1.1_1
- Fix segmentation faults caused by missing libc function prototypes   Returned pointers could be truncated to (potentially smaller) integers

Reported by:	will (with detailed analysis)
b2f06fb4c7