CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

databases/duckdb1.5.6

In-process SQL OLAP database management system

Maintainer
yuri@FreeBSD.org
Packages
duckdb 1.5.6
Upstream
Higher version available: 2.0.0
CPE
duckdb:duckdb from the port
WWW
https://duckdb.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (42)

Yuri Victorovich (yuri) · 1.5.6
databases/{,py-}duckdb: update 1.5.5 → 1.5.6
dfcf7ab1ab
Jimmy Olgeni (olgeni) · 1.5.5_1
databases/duckdb: Do not pull in dependencies of unselected extensions

The extension loop adds each extension's library dependencies with

	LIB_DEPENDS+=${PORT_OPTIONS:M${opt}:?${${opt}_LIB_DEPENDS}:}

The intent is "if this extension's option is selected, append its
<OPT>_LIB_DEPENDS", mirroring the two lines above it. Those work because
${PORT_OPTIONS:M${opt}:S/...} is empty-in-empty-out, but :? does not
behave the same way: per make(1), it evaluates the variable *name* -- not
the value the preceding modifiers produced -- as a conditional
expression. The condition here is therefore the bare word PORT_OPTIONS,
which is always true, so the true branch is always taken:

	PORT_OPTIONS=FOO BAR
	${PORT_OPTIONS:MAWS} -> ""
	${PORT_OPTIONS:MAWS:?${AWS_LIB_DEPENDS}:} -> libaws.so:devel/aws

As a result AVRO_LIB_DEPENDS (avro-c, jansson, snappy), AWS_LIB_DEPENDS
(aws-sdk-cpp) and ODBC_SCANNER_LIB_DEPENDS (unixODBC) are added to every
build, even though all three options are marked BROKEN and are off by
default. Besides the needless dependencies, this makes the port
unbuildable in trees where devel/aws-sdk-cpp is unavailable, and it takes
every consumer of databases/duckdb down with it.

The line is not needed in the first place: <OPT>_LIB_DEPENDS is a
standard options helper, and bsd.options.mk already applies it for the
selected options, group options included. Drop it and bump
PORTREVISION, since the dependency list of the default package changes.

Reviewed by:	yuri
Differential Revision:	https://reviews.freebsd.org/D59163
53759365ba
Yuri Victorovich (yuri) · 1.5.5
databases/{,py-}duckdb: update 1.5.4 → 1.5.5
7ddaa3ea89
Yuri Victorovich (yuri) · 1.5.4
databases/{,py-}duckdb: update 1.5.3 → 1.5.4
8725643282
Bernard Spil (brnrd) · 1.5.3
databases/*: Add CPE info
176dd6586b
Yuri Victorovich (yuri) · 1.5.3
databases/duckdb: Add missing patch
8d9ce86bb5
Yuri Victorovich (yuri) · 1.5.3
databases/{,py-}duckdb: update 1.5.2 → 1.5.3
05076d94de
Yuri Victorovich (yuri) · 1.5.2
databases/{,py-}duckdb: update 1.5.0 → 1.5.2
13a57e5bac
Yuri Victorovich (yuri) · 1.5.0
databases/{,py-}duckdb: update 1.4.4 → 1.5.0
e0cb3deae5
Yuri Victorovich (yuri) · 1.4.4_1
databases/duckdb: Add options for extension mysql and postgres

Unfortunately both fail to build at the moment.
9da111afbf
Yuri Victorovich (yuri) · 1.4.4
databases/{,py-}duckdb: update 1.3.2 → 1.4.4
cfb415911a
Yuri Victorovich (yuri) · 1.3.2
databases/{,py-}duckdb: update 1.3.1 → 1.3.2
5fdb30fc74
Yuri Victorovich (yuri) · 1.3.1
databases/{,py-}duckdb: update 1.2.2 → 1.3.1

Reported by:	portscout
272c9ebadd
Yuri Victorovich (yuri) · 1.2.2
databases/{,py-}duckdb: update 1.2.1 → 1.2.2

Reported by:	portscout
ad8c080a84
Yuri Victorovich (yuri) · 1.2.1
databases/{,py-}duckdb: update 1.2.0 → 1.2.1

Reported by:	portscout
6ebf33ac8d
Yuri Victorovich (yuri) · 1.2.0
databases/{,py-}duckdb: update 1.1.3 → 1.2.0

Reported by:	portscout
d988331d05
Yuri Victorovich (yuri) · 1.1.3
databases/{,py-}duckdb: update 1.1.2 → 1.1.3
08a25ed701
Yuri Victorovich (yuri) · 1.1.2
databases/{,py-}duckdb: update 1.1.1 → 1.1.2
86de60771c
Yuri Victorovich (yuri) · 1.1.1_1
databases/duckdb: Fix runtime crashes by removing the jemalloc extension; Fix options handling
f04fa9eb99
Yuri Victorovich (yuri) · 1.1.1
databases/{,py-}duckdb: update 1.1.0 → 1.1.1

Reported by:	portscout
eb1ae55902
Yuri Victorovich (yuri) · 1.1.0
databases/{,py-}duckdb: update 1.0.0 → 1.1.0
da6b097e30
Yuri Victorovich (yuri) · 1.0.0
databases/{,py-}duckdb: update 0.10.3 → 1.0.0

Reported by:	portscout
6d27a3ccf0
Yuri Victorovich (yuri) · 0.10.3
databases/{,py-}duckdb: update 0.10.2 → 0.10.3

Reported by:	portscout
b09bfeaea3
Yuri Victorovich (yuri) · 0.10.2
databases/duckdb: FIx most tests by correcting how OVERRIDE_GIT_DESCRIBE is passed to the build

2 tests still fail.
b6cd01e912
Yuri Victorovich (yuri) · 0.10.2
databases/{,py-}duckdb: update 0.10.1 → 0.10.2
fe851593d3
Yuri Victorovich (yuri) · 0.10.1
databases/duckdb: Backport the patch fixing build on 13

PR:		278139
18566f7da0
Yuri Victorovich (yuri) · 0.10.1
databases/duckdb: Broken on 13
05ea239716
Yuri Victorovich (yuri) · 0.10.1
databases/{,py-}duckdb: update 0.10.0 → 0.10.1

Reported by:	portscout
65cb998aee
Yuri Victorovich (yuri) · 0.10.0
databases/{,py-}duckdb: update 0.9.2 → 0.10.0

Reported by:	portscout
bb6689b659
Yuri Victorovich (yuri) · 0.9.2_1
databases/duckdb: Add pre-compiled sqlite extension; Fix version reported by DuckDB

Other extensions should be added as pre-compiled extensions the same way,
because otherwise DuckDB attempts to download pre-compiled extensions
as binaries which only works for Linux, and is also very insecure.
a313aafb0e
Yuri Victorovich (yuri) · 0.9.2
databases/{,py-}duckdb: update 0.8.1 → 0.9.2

Reported by:	portscout
af65e304f4
Yuri Victorovich (yuri) · 0.8.1
databases/{,py-}duckdb: Update 0.8.0 → 0.8.1

Reported by:	portscout
b91315dfec
Yuri Victorovich (yuri) · 0.8.0
databases/{,py-}duckdb: Update 0.7.1 → 0.8.0

Reported by:	portscout
d6584be4c0
Yuri Victorovich (yuri) · 0.7.1
databases/duckdb: Update 0.6.1 → 0.7.1

Reported by:	portscout
a3dee70388
Yuri Victorovich (yuri) · 0.6.1
databases/duckdb: Update 0.6.0 -> 0.6.1

Reported by:	portscout
264b6c98fc
Yuri Victorovich (yuri) · 0.6.0
databases/{,py-}duckdb: Update 0.5.1 -> 0.6.0

Reported by:	portscout
5e87f17643
Yuri Victorovich (yuri) · 0.5.1
databases/{,py-}duckdb: Update 0.5.0 -> 0.5.1

Reported by:	portscout
e11131c838
Stefan Eßer (se) · 0.5.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.5.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Yuri Victorovich (yuri) · 0.5.0
databases/{,py-}duckdb: Update 0.4.0 -> 0.5.0

Reported by:	portscout
d4d017cf60
Yuri Victorovich (yuri) · 0.4.0
databases/duckdb: Correction in the options code
65ea4576e1
Yuri Victorovich (yuri) · 0.4.0
databases/duckdb: New port: In-process SQL OLAP database management system
e3781e0f2a