CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

deskutils/pinot1.24_2

Personal search and metasearch for the Free Desktop

Maintainer
thierry@FreeBSD.org
Packages
pinot 1.24_2
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/FabriceColin/pinot/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (191)

Dima Panov (fluffy) · 1.24_2
*/*: update boost consumers after boost-1.92
97a84ef467
Dima Panov (fluffy) · 1.24_1
*/*: bump consumers after devel/boost update
213840c151
Thierry Thomas (thierry) · 1.24
deskutils/pinot: upgrade to v1.24

Release notes at https://github.com/FabriceColin/pinot/releases/tag/1.24
e720799bd7
Po-Chuan Hsieh (sunpoet) · 1.23_1
databases/xapian-core: Update to 2.0.0

- Update CONFLICTS_INSTALL
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://trac.xapian.org/wiki/ReleaseOverview
		https://github.com/xapian/xapian/blob/main/xapian-core/NEWS
36f95e3cfa
Thierry Thomas (thierry) · 1.23
deskutils/pinot: upgrade to v1.23

Fix for Curl 8.16.
df85d01daf
Dima Panov (fluffy) · 1.22_6
devel/boost: bump consumers after boost upgrade (+)

Get rid of direct dependency ob libbost_system.so, use libboost_thread.so instead
67fb95fb3b
Dima Panov (fluffy) · 1.22_5
deskutils/pinot: prepare for Boost-1.89, do not link with stub Boost::system (+)

Get rid of overlinking on empty stub library Boost::system, it is header-only since boost-1.70
While here, unbreak vuild with curl-1.86+

With hat:	office/boost
3bcd8992ba
Baptiste Daroussin (bapt) · 1.22_4
libxml2: chase libxml soversion bump
3068854dd0
Dima Panov (fluffy) · 1.22_3
devel/boost: bump consumers after Boost update
18632db919
Po-Chuan Hsieh (sunpoet) · 1.22_2
databases/xapian-core: Update to 1.4.29

Changes:	https://trac.xapian.org/wiki/ReleaseOverview
		https://github.com/xapian/xapian/blob/RELEASE/1.4/xapian-core/NEWS
5d7ff68d7a
Charlie Li (vishwin) · 1.22_1
gnome.mk: rename gdkpixbuf2 to gdkpixbuf to prepare for port move

The GTK 1-based gdk-pixbuf has not existed for some time.

No functional or package changes.
e87d8134a3
Gleb Popov (arrowd) · 1.22_1
*: Bump revisions after dbus update

PR:		285253
Reported by:	Martin Birgmeier <d8zNeCFG@aon.at>
a347a92e6e
Gleb Popov (arrowd) · 1.22
deskutils/pinot: Update to 1.22

PR:		283998
Approved by:	thierry (maintainer)
bf666655aa
Dima Panov (fluffy) · 1.21_16
devel/boost: bump consumers after Boost-1.87 update

Sponsored by:	Future Crew, LLC
fa53920e72
Dima Panov (fluffy) · 1.21_15
devel/boost: bump consu,ers after update Boost to 1.86 release

Sponsored by:	Future Crew, LLC
312ee18b02
Dima Panov (fluffy) · 1.21_14
*/*: bump consumers after devel/boost* update

With hat:	office
Sponsored by:	Future Crew, LLC
55cfbcf56c
Jason E. Hale (jhale) · 1.21_13
*/*: Chase audio/taglib shlib version bump

PR:		266677
621c43884f
Dima Panov (fluffy) · 1.21_12
devel/boost: bump consumers after library update
db616534ff
Thierry Thomas (thierry) · 1.21_11
deskutils/pinot: move manpages
31a486304d
Nuno Teixeira (eduardo) · 1.21_10
*/*: Bump consumers of x11-toolkits/gtk30

New version of gtk3 in tree
3572ca3e01
Dima Panov (fluffy) · 1.21_9
devel/boost*: bump all consumers after 1.83.0
21d8008e86
Matthias Andree (mandree) · 1.21_8
deskutils/pinot: make compatible with exiv2 0.28

PR:		272311
5e7242d99a
Dima Panov (fluffy) · 1.21_7
*/*: bump all direct Boost cunsumers
3e45e8e244
Tobias C. Berner (tcberner) · 1.21_6
accessibility/at-spi2-core: update to 2.46.0

What's new in at-spi2-core 2.46.0:
* Fix GetInterfaces documentation on org.a11y.atspi.Accessible
  interface.

What's new in at-spi2-core 2.45.91:
* Send device event controller events using the same signature as other
  events.
* Document the Accessible, Action, and Cache dbus interfaces.
* Fix license of atspi-gmain.c (#87).

What's new in at-spi2-core 2.45.90:
* xml: Add some documentation.
* xml: Fix event arguments.
* xml: Add some missing DeviceEventController methods.
* Bind the AT-SPI bus to the graphical session.
* Mark bus service as belonging to the session slice.
* Add ATSPI_ROLE_PUSH_BUTTON_MENU.
* Add an "announcement" event/signal to allow objects to send
  notifications (!63).
* Various code clean-ups and test improvements.

What's new in at-spi2-core 2.45.1:
* Atk and at-spi2-atk are now merged into this project.
* Now requires meson 0.56.2 and glib 2.67.4.
* at-spi2-atk: Expose the accessible hierarchy via dbus introspection.
* Properly escape the AT-SPI bus address; fixes warnings about the address
  not containing a colon (!55).
* Add a text value to AtspiValue, so that a value can expose a textual
  description, as in the new Atk value API.
* Add atspi_event_listener_register_with_app, to allow an event listener
  to be registered only for a given application (!52).

- accessibility/atk and accessibility/at-spi2-atk have been merged into
  accessibility/at-spi2-core

- accessibility/at-spi2-core: bump consumers of removed ports atk and at-spi2-atk

PR:		269704
Exp-run by:	antoine
---
fa81a4f5f8
Dima Panov (fluffy) · 1.21_5
*/*:	bump libboost*.so libraries consumert after Boost upgrade
e1287d0d12
Stefan Eßer (se) · 1.21_4
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.21_4
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dima Panov (fluffy) · 1.21_4
*/*: bump all consumers after recent boost upgrade
4cf39decb3
Tobias C. Berner (tcberner) · 1.21_3
deskutils: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Alex "lissyara" Keda <admin@lissyara.su>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexander Vereeken <Alexander88207@protonmail.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Andreas Kohn <andreas@syndrom23.de>
  *  Andrew Hsu <ahsu@users.sf.net>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Zakhvatov
  *  Andrey Zakhvatov <andy@icc.surw.chel.su>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Beat Gaetzi <beat@chruetertee.ch>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christian Brueffer <chris@unixpages.org>
  *  Cyrille Lefevre <clefevre@citeweb.net>
  *  Daniel Eischen <deischen@FreeBSD.org>
  *  Danilo Egea Gondolfo <danilo@FreeBSD.org>
  *  Dean Povey <povey@wedgetail.com>
  *  Dennis Herrmann <dhn@FreeBSD.org>
  *  Edwin Groothuis
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emmanuel Vadot <manu@FreeBSD.org>
  *  Eric L. Hernes <erich@FreeBSD.org>
  *  Eric Turgeon <ericbsd@FreeBSD.org>
  *  Eric Turgeon <ericturgeon@ghostbsd.org>
  *  FreeBSD GNOME Team
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Guillaume Paquet <amyfoub@gmail.com>
  *  Gustau Perez <gustau.perez@gmail.com>
  *  Gustau Perez i Querol <gustau.perez@gmail.com>
  *  Gvozdikov Veniamin <g.veniamin@googlemail.com>
  *  Herbert J. Skuhra <h.skuhra@gmail.com>
  *  Jason Helfman <jgh@FreeBSD.org>
  *  Jeremy Messenger <mezz@FreeBSD.org>
  *  Jim Mock <jim@FreeBSD.org>
  *  Jimmy Olgeni <olgeni@uli.it>
  *  Joe Marcus Clarke <marcus@FreeBSD.org>
  *  Joey Mingrone <joey@mingrone.org>
  *  Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe>
  *  Joseph Benden <joe@thrallingpenguin.com>
  *  Ken Moore <ken@pcbsd.org>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kris Kennaway <kris@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Leinier Cruz Salfran <salfrancl@yahoo.es>
  *  Lewis Thompson <purple@lewiz.net>
  *  Loïc Bartoletti <lbartoletti@FreeBSD.org>
  *  Lucas Holt <luke@justjournal.com>
  *  MITA Yoshio <mita@iis.u-tokyo.ac.jp>
  *  Marcin Cieslak <saper@saper.info>
  *  Markus Brueffer <brueffer@phoenix-systems.de>
  *  Markus Brueffer <markus@FreeBSD.org>
  *  Martin Klaffenboeck <martin.klaffenboeck@gmx.at>
  *  Martin Wilke
  *  Mathieu Arnold
  *  Matt Braithwaite <mab@red-bean.com>
  *  Matt Lancereau <matt@rimasec.net>
  *  Matthew Seaman <matthew@FreeBSD.org>
  *  Matthias Andree <mandree@FreeBSD.org>
  *  Nicola Stanislao Vitale <nivit@FreeBSD.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Olivier Duchateau
  *  Pav Lucistnik <pav@oook.cz>
  *  Pete Fritchman <petef@databits.net>
  *  Richard Gallamore <ultima@FreeBSD.org>
  *  Rob Evers <rob@debank.tv>
  *  Roman Bogorodskiy <bogorodskiy@inbox.ru>
  *  Rusmir Dusko <nemysis@FreeBSD.org>
  *  Thierry Thomas (<thierry@thomas.as>)
  *  Thierry Thomas <thierry@pompo.net>
  *  Thorsten Greiner <thorsten.greiner@web.de>
  *  Tobias Roth <ports@fsck.ch>
  *  Veniamin Gvozdikov <vg@FreeBSD.org>
  *  alepulver@FreeBSD.org
  *  cartola (Carlos E. G. Carvalho)
  *  che@bein.link
  *  gahr
  *  ijliao
  *  jamrich.majo@gmail.com
  *  joerg
  *  johans
  *  john@jnielsen.net
  *  lightside <lightside@gmx.com>
  *  mi
  *  mi@aldan.ziplink.net
  *  olevole@olevole.ru
  *  shanee@rabbit.augusta.de
  *  stas
  *  thierry@pompo.net

With hat:	portmgr
4dd7a7430e
Dima Panov (fluffy) · 1.21_3
devel/boost-all: bump all library consumers after boost upgrade

PR:	246106
b082b3d13e
Charlie Li (vishwin) · 1.21_2
textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
d63665f7cd
Matthias Fechner (mfechner) · 1.21_1
textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
247c7db751
Thierry Thomas (thierry) · 1.21
deskutils/pinot: upgrade to 1.21

Release notes at <https://github.com/FabriceColin/pinot/releases/tag/1.21>.
e638181305
Thierry Thomas (thierry) · 1.20_1
deskutils/pinot: really upgrade to 1.20

The previous tarball was a pre-release.

Reported by:	pkg-fallout
adb82006b1
Thierry Thomas (thierry) · 1.20
deskutils/pinot: upgrade to v1.20

Release notes at <https://github.com/FabriceColin/pinot/releases/tag/1.20>.
7bef3594d3
Tobias Kortkamp (tobik) · 1.10
*: apply refactor.remove-consecutive-empty-lines

Submitted by:	portedit
ce1af7fdc2
Baptiste Daroussin (bapt) · 1.10
INSTALLS_ICONS: retire the macro and rework the related dependencies

While here, make sure gtk-update-icon-cache is only on run dependency
where added as a dependency
Enforce gtk3 to depend on gtk-update-icon-cache (previously it was
inheriting the dependency)
2c672a4de9
Mathieu Arnold (mat) · 1.10
Remove # $FreeBSD$ from Makefiles.
305f148f48
Thierry Thomas (thierry) · 1.10
Upgrade to v1.10.

Release notes at <https://github.com/FabriceColin/pinot/releases/tag/1.10>.
b4a7815960
Jan Beich (jbeich) · 1.09_22
devel/boost-*: update to 1.72.0

Changes:	http://www.boost.org/users/history/version_1_72_0.html
PR:		241449
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D22136
701aa3bcf8
Niclas Zeising (zeising) · 1.09_21
Add USES=xorg USES=gl, ports categories d

Add USES=xorg, USES=gl and in a few cases USES=gnome to ports in categories
starting with 'd'.
366790689c
Jan Beich (jbeich) · 1.09_21
devel/boost-*: update to 1.71.0

Changes:	http://www.boost.org/users/history/version_1_71_0.html
PR:		238827
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D20774
befa71e0f3
Gerald Pfeifer (gerald) · 1.09_20
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Jan Beich (jbeich) · 1.09_19
devel/boost-*: update to 1.70.0

Changes:	http://www.boost.org/users/history/version_1_70_0.html
PR:		235956
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19303
9b21a3a084
Tobias C. Berner (tcberner) · 1.09_18
graphics/exiv2: update to 0.27

Changelog:
	http://www.exiv2.org/changelog.html

- All depending ports have been bumped.
- graphics/py-exiv2 has been marked broken; use graphics/gexiv2 for python bindings

Exp-run by:	antoine
PR:		235943
PR:		234830
fda98ed059
Tobias C. Berner (tcberner) · 1.09_17
deskutils/pinot: prepare fore exiv2-0.27

Replace include of xmp.hpp with exiv2.hpp.

PR:		235943
4e4c470b31
Tijl Coosemans (tijl) · 1.09_16
Fix Qt5 symbol version scripts to put the catch-all clause first.  When a symbol matches multiple clauses the last one takes precedence.  If the catch-all is last it captures everything.  In the case of Qt5 libraries this caused all symbols to have a Qt_5 label while some should have Qt_5_PRIVATE_API.  This only affects lld because GNU ld always gives the catch-all lowest priority.

Older versions of Qt5Webengine exported some memory allocation symbols from
the bundled Chromium.  Version 5.9 stopped exporting these [1] but the
symbols were kept as weak wrappers for the standard allocation functions to
maintain binary compatibility. [2][3]  The problem is that the call to the
standard function in these weak wrappers is only resolved to the standard
function if there's a call to this standard function in other parts of
Qt5Webengine, because only then is there a non-weak symbol that takes
precedence over the weak one.  If there's no such non-weak symbol the call
in the weak wrapper resolves to the weak wrapper itself creating an infinite
call loop that overflows the stack and causes a crash.  Some of the
allocation functions are variants of C++ new and delete and it probably
depends on the compiler whether these variants are used in other parts of
Qt5Webengine.

Remove the weak wrappers (make them Linux specific).  This isn't binary
compatible but we are already breaking that with the changes to the symbol
versions.

[1] https://github.com/qt/qtwebengine/commit/5c2cbfccf9aafb547b0b30914c4056abd25942a4
[2] https://github.com/qt/qtwebengine/commit/2ed5054e3a800fa97c2c9e920ba1e6ea4b6ef2a5
[3] https://github.com/qt/qtwebengine/commit/009f5ebb4bd6e50188671e0815a5dae6afe39db5

Bump all ports that depend on Qt5.

PR:		234070
Exp-run by:	antoine
Approved by:	kde (adridg)
1bf487d3e7
Gerald Pfeifer (gerald) · 1.09_15
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Jan Beich (jbeich) · 1.09_14
devel/boost-*: update to 1.69.0

Changes:	http://www.boost.org/users/history/version_1_69_0.html
PR:		232525
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17645
7c879267dc
Thierry Thomas (thierry) · 1.09_13
- Fix OpenSSL build (1)

- Enable libnotify

PR:		232234
Submitted by:	Nathan <ndowens (at) yahoo.com> (1)
c2cfd31075