CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

audio/musescore4.7.3

Free music composition & notation software

Maintainer
adridg@FreeBSD.org
Packages
musescore 4.7.3
Upstream
Higher version available: 4.7.5
CPE
none, CVEs only via VuXML
WWW
https://musescore.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (91)

Gleb Popov (arrowd) · 4.7.3
audio/musescore: Fix staging violation

Approved by:	portmgr (fixit blanket)
bf3dc181d6
Adriaan de Groot (adridg) · 4.7.3
audio/musescore: update to 4.7.3, latest upstream

The 4.7 series announcements are at
	https://musescore.org/en/4.7

Submitted by Keith White, additional patches for build and bump to .3 by me.
586b4d361c
Jason E. Hale (jhale) · 4.6.5_2
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.11.1 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt
4dab0722de
Jason E. Hale (jhale) · 4.6.5_1
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.10.1 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt
45fef8811c
Jason E. Hale (jhale) · 4.6.5
audio/musescore: Update to 4.6.5

Fix build with Qt 6.10.1

https://github.com/musescore/MuseScore/releases/tag/v4.6.5

With hat:	kde@
415c3004e6
Jason E. Hale (jhale) · 4.5.1_1
audio/musescore: Prepare for Qt 6.10

Add upstream patches to fix configure and build with upcoming
Qt 6.10.1.

With hat:	kde@
bf3e0ac5ee
Yuri Victorovich (yuri) · 4.5.1_1
audio/musescore: Fix wrong tag

The previous port version had teh v4.5 tag and the port built
the version 4.5 and not 4.5.1

PR:		286527
Submitted by:	Keith White <kwhite.uottawa@gmail.com> (initial version)
43a73ce001
Jason E. Hale (jhale) · 4.5.1
audio/musescore: Fix build with Qt 6.9

With hat:	kde@
PR:		286051
e08d7fba8f
Yuri Victorovich (yuri) · 4.5.1
audio/musescore: update 4.5.0 → 4.5.1

PR:	285716
Approved by:	adridg (maintainer's timeout; 26 days)
a07f05d29a
Po-Chuan Hsieh (sunpoet) · 4.5.0_1
textproc/tinyxml2: Update to 11.0.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/leethomason/tinyxml2/releases
c8cec9e758
Adriaan de Groot (adridg) · 4.5.0
audio/musescore: update to 4.5.0, latest upstream

Release notes at
	https://github.com/musescore/MuseScore/releases/tag/v4.5
13a8d00c09
Yuri Victorovich (yuri) · 4.4.4
audio/musescore: update 4.2.1 → 4.4.4

PR:	284101
Approved by:	adridg (maintainer's timeout; 45 days)
0a9ea56907
Yuri Victorovich (yuri) · 4.2.1
Revert "audio/musescore: update 4.2.1 → 4.4.4"

This reverts commit e7692b5aad5cc61d5a5742c4e888fbdb4ca91ccc.
d19f1a5a53
Yuri Victorovich (yuri) · 4.4.4
audio/musescore: update 4.2.1 → 4.4.4
e7692b5aad
Adriaan de Groot (adridg) · 4.2.1
audio/musescore: update to 4.2.1, latest upstream

While here, add a .desktop file as requested in PR 275314 .
d2a73d2682
Adriaan de Groot (adridg) · 4.1.1
audio/musescore: update to 4.1.1, latest upstream

Update to 4.1.1 and repair some dependencies.

PR:		273793
Reported by:	Keith White
Provided by:	Keith White
f5ce69fb0a
Adriaan de Groot (adridg) · 4.1.0
audio/musescore: update to 4.1.0, latest release

All of the audio-backend options have gone away -- I don't see
MuseScore searching for them, either, and do not feel like digging
too far into the configure-and-build of this package either.
It bundles all kinds of stuff, where the most-worstest culprits
are dealt with in post-stage: why this installs Google Test headers
I really don't know.
7bc5bbbfdd
Christian Weisgerber (naddy) · 3.6.1_4
audio/opus: bump consumers after update to 1.4
feb1fa34f5
Felix Palmen (zirias) · 3.6.1_3
Mk/Uses: always use colon for build/run suffix

Most USES use a colon for build/run(/test) suffixes. Change kde.mk,
qt.mk and pyqt.mk to do the same, and update all ports using that.

Document in CHANGES.

PR:			266034
Exp-run by:		antoine
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36349
ddae4e92d8
Stefan Eßer (se) · 3.6.1_3
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.6.1_3
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Adriaan de Groot (adridg) · 3.6.1_3
audio/musescore: ignore qmake (the Qt3 one)

If devel/qmake (the Qt3 version) is installed, it is un-suffixed
and is found as "qmake", rather than the current "qmake-qt5" which
is what Musescore needs.

Patch out the name "qmake" entirely.

Submitted by Mamoru Iwaki in the linked PR. I don't know if we have
a policy on adding people's email addresses out of the PR database,
so I left it out in this commit.

PR:		265775
f701da3ef0
Hans Petter Selasky (hselasky) · 3.6.1_3
audio/musescore: Add missing patch.

Fixes 60fe38c099458bc1afcb8983c7bdeed0872f438c .

Approved by: pi (implicit)
e0ebf7b759
Hans Petter Selasky (hselasky) · 3.6.1_3
audio/musescore: Enable support for ALSA MIDI under FreeBSD.

Discussed with:	adridg (maintainer)
Approved by: pi (implicit)
60fe38c099
Rene Ladan (rene) · 3.6.1_2
cleanup: remove transitive py27 deprecation (www/qt5-webengine)
48d98ef918
Alexey Dokuchaev (danfe) · 3.6.1_2
Cleanup: for ports under a* categories, drop redundant GH_{ACCOUNT,PROJECT}.
8c5d3929dd
Yuri Victorovich (yuri) · 3.6.1_2
audio/jack: Update to Jack2: 0.125.0 -> 1.9.16

Big thank you to Florian Walpen <dev@submerge.ch> and
Goran Mekić <meka@tilda.center> for working on Jack2.

PR:		251125
Submitted by:	Florian Walpen <dev@submerge.ch> (original version)
5708ae4005
Loïc Bartoletti (lbartoletti) · 3.6.1_1
misc/qtchooser: remove

QtChooser allows you to select your version of Qt among those installed.
However, this tool is no longer supported upstream and will not be
available for Qt6.
By default, our Qt installations are done in
${LOCALBASE}/lib/qt${QT_VERSION} as recommended.

We have added symbolic linking for the main binaries to
${LOCALBASE}/bin with the suffix -qt5.
be86c4fe23
Dmitry Marakasov (amdmi3) · 3.6.1
Remove useless Created by: headers mentioning me
5823922c58
Mathieu Arnold (mat) · 3.6.1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Rene Ladan (rene) · 3.6.1
Mark ports recursively depending on Python 2.7 for expiration on June 23.

For ports optionally dependending on Python 2.7, just mark those options
as expired. Remove konquerer from the x11/kde-baseapps metaport and bump
its PORTREVISION.

Submitted by:	rene
Reviewed by:	portmgr, adridg, ehaupt, lme, madpilot, pizzamig, se, sunpoet, yuri
Approved by:	portmgr
Differential Revision:	https://reviews.freebsd.org/D28665
b217c7fc9c
Adriaan de Groot (adridg) · 3.6.1
Update audio/musescore to latest upstream release

Musescore helps you create beautiful sheet music.

Release notes are at
	https://musescore.org/en/3.6.1
	https://musescore.org/en/node/316462

It's some crash fixes. FreeBSD ports skipped 3.6.0, which had lots more
changes and new sound fonts.

The port Makefile changes more than usual, because I took out
some REINPLACE_CMD and made regular patches from them. Also
MuseScore's CMake code is really weird, so it needs extra
patching to find libogg and such.
8b2197a90a
Adriaan de Groot (adridg) · 3.5_2
Add USES=localbase to audio/musescore

It is possible to set port OPTIONS so that nothing "else" picks up
LOCALBASE, and Musescore itself just links to -lvorbis without
doing any CMake footwork for it, so we need to add it explicitly.

PR:		251589
Reported by:	greg@unrelenting.technology
1e1984c9b5
Piotr Kubaj (pkubaj) · 3.5_1
audio/musescore: fix build on GCC architectures

FreeBSD is not Linux. For some reason this builds with Clang but not GCC.

MFH:		2020Q4 (fix build blanket)
9b92d719f3
Thomas Zander (riggs) · 3.5_1
Chase libsndfile 1.0.30 update.

Details:
- Missing symbol sf_version_string, not auto-resolved by pkg + rebuild.
- Bump PORTREVISION for consumers.
8337fc6d5f
Adriaan de Groot (adridg) · 3.5
Update audio/musescore to latest upstream release, 3.5

- There's no minor (3.5.0) so fiddle a bit with the PLIST substitution
- Adds dependencies for Qt graphicaleffects
- Since musescore is not Qt 5.15 compatible (the palettes are broken,
  see https://musescore.org/en/node/307238) but usable-ish, I'm still
  committing this since it's no worse than the previous version w/ Qt 5.15,
  and users with an older Qt can build against that.

Upstream release notes:
	https://musescore.org/en/handbook/developers-handbook/release-notes/release-notes-musescore-3x/release-notes-musescore-35x-3

PR:		247466
cbdfbf3cf7
Tobias C. Berner (tcberner) · 3.4.2
Remove Webengine from default options on ppc64

- This is another followup to r531601, which updated WebEngine,
  but does not yet support ppc64.

Submitted by:	pkubaj
43858e9b3c
Adriaan de Groot (adridg) · 3.4.2
audio/musescore prep-work for CMake 3.17

Prepare for building with CMake 3.17, which suffers from Musescore
upcasing the BUILD_TYPE halfway through. Bug report to CMake is
	https://gitlab.kitware.com/cmake/cmake/-/issues/20539
(but I think it's a Musescore problem).

No PORTREVISION bump because nothing changes in current builds,
and this affects only builds that happen after CMake 3.17 comes out.
(and even then the package remains the same)
51a8281463
Adriaan de Groot (adridg) · 3.4.2
audio/musescore Update to latest upstream release, 3.4.2

Release notes at:
	https://musescore.org/en/handbook/developers-handbook/release-notes/release-notes-musescore-3x/release-notes-musescore-34x-4

Important fixes:
 - accessibility
 - the letter L was unavailable

Reported by:	portscout
11d59383eb
Adriaan de Groot (adridg) · 3.4.1
Update audio/musescore to latest upstream release, 3.4.1

3.4 was a features release, followed quick by a bugfix 3.4.1:
	https://musescore.org/en/handbook/developers-handbook/release-notes/release-notes-musescore-3x/release-notes-musescore-34x-2
	https://musescore.org/en/handbook/developers-handbook/release-notes/release-notes-musescore-3x/release-notes-musescore-34x-3

The patches change more than usual, since the bizzarre copy-webengine
CMake code moved to another directory.

Reported by:	portscout
6d84c55b5f
Adriaan de Groot (adridg) · 3.3.4
Update audio/musescore to latest upstream release, 3.3.4

Release notes:
	https://musescore.org/en/3.3.3
	https://musescore.org/en/3.3.4

Mostly palette and note input workflow fixes, as well as bugfixes.
e7a236b0a8
Adriaan de Groot (adridg) · 3.3.2
Enable WEBENGINE in audio/musescore on ppc64 in FreeBSD 13.0

Following the options pattern from pkubaj@, there's an upcoming
ABI change which will allow musescore to build. See r519036.
f1da786437
Adriaan de Groot (adridg) · 3.3.2
Update audio/musescore to latest upostream release, 3.3.2

Release notes:
	https://musescore.org/en/3.3.2
	https://musescore.org/en/3.3
844fc954fa
Mathieu Arnold (mat) · 3.2.3
Use USE_GITHUB properly.

Pointy hat:	adridg arved
16ae14e3a6
Adriaan de Groot (adridg) · 3.2.3
Update audio/musescore to the latest version

- The sources have moved to GitHub, and are no longer hosted by OSUOSL
 - Missed a bunch of releases, see
	https://github.com/musescore/MuseScore/releases
   for all the missed release notes.

PR:		238803
Reported by:	chitty_cloud@me.com
25a23f5d9a
Gerald Pfeifer (gerald) · 3.0.5_1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Adriaan de Groot (adridg) · 3.0.5
audio/musescore try to get portscout to report new versions

- MASTER_SITES here contains only the one release, so try to
   tell portscout to look above it (and hope it understands subdirs).
 - While here, pet portlint.
8420ea7b48
Adriaan de Groot (adridg) · 3.0.5
Update audio/musescore to latest 3.0.5

The interesting improvements are in 3.0.3, UI and playback improvements:
	https://musescore.org/en/handbook/developers-handbook/release-notes/release-notes-musescore-3/release-notes-musescore-303
Then 3.0.4 is some regression fixes, and 3.0.5 has plugin improvements:
	https://musescore.org/en/handbook/developers-handbook/release-notes/release-notes-musescore-3x/release-notes-musescore-305

PR:		237198
Reported by:	chitty_cloud@me.com
8d31c48e79
Adriaan de Groot (adridg) · 3.0.2
Update audio/musescore to 3.0.2 (latest release).

We missed 3.0.1, so the two changelogs are:
	https://musescore.org/en/handbook/developers-handbook/release-notes/release-notes-musescore-301-january-15-2019
	https://musescore.org/en/handbook/developers-handbook/release-notes/release-notes-musescore-302-january-29-2019
I don't know enough about the application's internals to summarize them
here; mostly looks like "lots of bugfixes, please upgrade."

In the port itself:
 - dropped option OCR, it's always disabled in source anyway.
 - wrestled with option WEBENGINE. It needs to be defined, so that
   the correct CMake flag is switched OFF automatically. But it should
   not be visible or selectable except on architectures where it makes
   sense. OPTIONS_DEFINE_amd64 would add it where needed, but then it's
   not defined for architectures where it needs to be off. OPTIONS_EXCLUDE
   requires me to list all the architectures it's *not* supported on,
   which seems like a bit much. Therefore, leaving the option available,
   but off, as a booby-trap for people trying non-default options and
   wanting WebEngine on (e.g.) PPC.

PR:		235544
Reported by:	chitty_cloud@me.com
1128c26456
Tijl Coosemans (tijl) · 3.0.0_2
Fix Qt5 symbol version scripts to put the catch-all clause first.  When a symbol matches multiple clauses the last one takes precedence.  If the catch-all is last it captures everything.  In the case of Qt5 libraries this caused all symbols to have a Qt_5 label while some should have Qt_5_PRIVATE_API.  This only affects lld because GNU ld always gives the catch-all lowest priority.

Older versions of Qt5Webengine exported some memory allocation symbols from
the bundled Chromium.  Version 5.9 stopped exporting these [1] but the
symbols were kept as weak wrappers for the standard allocation functions to
maintain binary compatibility. [2][3]  The problem is that the call to the
standard function in these weak wrappers is only resolved to the standard
function if there's a call to this standard function in other parts of
Qt5Webengine, because only then is there a non-weak symbol that takes
precedence over the weak one.  If there's no such non-weak symbol the call
in the weak wrapper resolves to the weak wrapper itself creating an infinite
call loop that overflows the stack and causes a crash.  Some of the
allocation functions are variants of C++ new and delete and it probably
depends on the compiler whether these variants are used in other parts of
Qt5Webengine.

Remove the weak wrappers (make them Linux specific).  This isn't binary
compatible but we are already breaking that with the changes to the symbol
versions.

[1] https://github.com/qt/qtwebengine/commit/5c2cbfccf9aafb547b0b30914c4056abd25942a4
[2] https://github.com/qt/qtwebengine/commit/2ed5054e3a800fa97c2c9e920ba1e6ea4b6ef2a5
[3] https://github.com/qt/qtwebengine/commit/009f5ebb4bd6e50188671e0815a5dae6afe39db5

Bump all ports that depend on Qt5.

PR:		234070
Exp-run by:	antoine
Approved by:	kde (adridg)
1bf487d3e7