CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

deskutils/solanum5.0.0_27

Pomodoro timer for the GNOME desktop

Maintainer
ports@FreeBSD.org
Packages
solanum 5.0.0_27
Upstream
Higher version available: 6.0.0
CPE
none, CVEs only via VuXML
WWW
https://gitlab.gnome.org/World/Solanum
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (74)

Mikael Urankar (mikael) · 5.0.0_27
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Alan Somers (asomers) · 5.0.0_26
*/*: Fix many Rust ports to run without COMPAT11

RISCV does not include COMPAT11 by default.  But Rust's libc bound the
compat-11 symbols until version 0.2.176.  Patch a great many Rust ports
to use a newer version of libc, to eliminate the dependency on COMPAT11.
Explicitly patching Cargo.lock isn't usually necessarily, since within
the build jail cargo is forced to use whichever crates Makefile.crates
installs there.

Notes on specific ports:

* textproc/bookokrat: Rework bookokrat's existing patch to be more
  robust.  Also, report the issue upstream:
  https://github.com/bugzmanov/bookokrat/issues/182

* security/sequoia-chameleon-gnupg security/sequoia-sq
  "cargo update -p libc" insisted on updating some other crates, too.

* devel/cargo-generate finance/tickrs net-im/gurk-rs
  net-p2p/oura textproc/mdbook-linkcheck www/lychee
	These creates contained an extra entry in CARGO_CRATES for
	openssl-src.  I don't know why.  Remove it.

* www/tuifeed
	Alone among all the crates touched, this one uses cargo's
	--locked argument.  So I had to create a patch-Cargo.lock file
	for it.

There are several other ports that still use old versions of libc.  But
for various reasons, each needs more attention that I can afford in this
already-large commit.

PR:		297814
exp-run:	antoine
Approved by:	portmgr timeout (2+ weeks)
396c159306
Mikael Urankar (mikael) · 5.0.0_25
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Mikael Urankar (mikael) · 5.0.0_24
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Mikael Urankar (mikael) · 5.0.0_23
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Mikael Urankar (mikael) · 5.0.0_22
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Mikael Urankar (mikael) · 5.0.0_21
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Mikael Urankar (mikael) · 5.0.0_20
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Mikael Urankar (mikael) · 5.0.0_19
lang/rust: Bump revisions after 1.92.0

PR:		291582
5e496c7707
Mikael Urankar (mikael) · 5.0.0_18
lang/rust: Bump revisions after 1.91.1

PR:		290816
d6b6027df6
Mikael Urankar (mikael) · 5.0.0_17
lang/rust: Bump revisions after 1.90.0

PR:		289709
97b5de4ffc
Mikael Urankar (mikael) · 5.0.0_16
lang/rust: Bump revisions after 1.89.0

PR:		288923
b21956d7db
Mikael Urankar (mikael) · 5.0.0_15
lang/rust: Bump revisions after 1.88.0

PR:		287766
f3f7e555b0
Mikael Urankar (mikael) · 5.0.0_14
lang/rust: Bump revisions after 1.87.0

PR:		286829
3ed29b8185
Mikael Urankar (mikael) · 5.0.0_13
lang/rust: Bump revisions after 1.86.0

PR:		285840
2a5976aebe
Mikael Urankar (mikael) · 5.0.0_12
lang/rust: Bump revisions after 1.85.0

PR:		284884
cf7c4b037d
Mikael Urankar (mikael) · 5.0.0_11
lang/rust: Bump revisions after 1.84.0

PR:		283962
fccaa1b326
Mikael Urankar (mikael) · 5.0.0_10
lang/rust: Bump revisions after 1.83.0

PR:		283000
1d1fd15a3e
Jan Beich (jbeich) · 5.0.0_9
Remove remnant comments/code after f99a708957bd

PR:		280305
33610ebde0
Mikael Urankar (mikael) · 5.0.0_9
lang/rust: Bump revisions after 1.82.0

PR:		282516
ca048c2884
Yuri Victorovich (yuri) · 5.0.0_8
Mk/Uses/cargo.mk: Remove cross-compilation options for Rust-based ports

Reasons:
* Port build shouldn't use cross-compilation mode
  because it buids for the same architecture.
* RUSTFLAGS isn't passed to the build of all or some Rust ports
  in the cross-compilation mode.

Essential changes:
* Remove the CARGO_BUILD_TARGET make variable.
* Remove CARGO_BUILD_TARGET and CARGO_TARGET_* from CARGO_ENV.
* Update many ports that used CARGO_BUILD_TARGET.
* Build paths now don't include the architecture triplet part.

Immadiate benefits:
* Unbreak build on architectures like i386 that sometimes require
  special RUSTFLAGS that were not effective in the cross-compilation
  mode.

Ports that really need cross-compilation for some reason should
enable it on case-by-case basis. Example: net-p2p/cncli
(Not sure why does net-p2p/cncli actually need it, but it only
builds with these options.)

PR:		280305
Approved by:	rust@FreeBSD.org (maintainer's timeout; 98 days)
f99a708957
Mikael Urankar (mikael) · 5.0.0_8
lang/rust: Bump revisions after 1.81.0

PR:		281300
89ab81d0e2
Jan Beich (jbeich) · 5.0.0_7
deskutils/solanum: drop maintainership
defd476f6a
Mikael Urankar (mikael) · 5.0.0_7
lang/rust: Bump revisions after 1.80.1

PR:		280490
7a55f95425
Mikael Urankar (mikael) · 5.0.0_6
lang/rust: Bump revisions after 1.79.0

PR:		279707
21476ca8a9
Mikael Urankar (mikael) · 5.0.0_5
lang/rust: Bump revisions after 1.78.0

PR:		278834
2322b66100
Mikael Urankar (mikael) · 5.0.0_4
lang/rust: Bump revisions after 1.77.0

PR:		277786
d632fbe55e
Mikael Urankar (mikael) · 5.0.0_3
lang/rust: Bump revisions after 1.76.0

PR:		276920
7f5a7b0e52
Mikael Urankar (mikael) · 5.0.0_2
lang/rust: Bump revisions after 1.75.0

PR:		276033
109c3d4629
Mikael Urankar (mikael) · 5.0.0_1
lang/rust: Bump revisions after 1.74.1

PR:		275243
b2afd89fb2
Jan Beich (jbeich) · 5.0.0
deskutils/solanum: update to 5.0.0

Changes:	https://gitlab.gnome.org/World/Solanum/-/compare/4.0.0...5.0.0
Reported by:	GitLab (notify releases)
bb59a8242d
Mikael Urankar (mikael) · 4.0.0_3
lang/rust: Bump revisions after 1.73.0

PR:		274499
dd10dc88a7
Mikael Urankar (mikael) · 4.0.0_2
lang/rust: Bump revisions after 1.72.0

PR:		273331
aba8da2be1
Mikael Urankar (mikael) · 4.0.0_1
lang/rust: Bump revisions after 1.71.0

PR:		272449
cdf28617b4
Jan Beich (jbeich) · 4.0.0
deskutils/solanum: drop GL_TAGNAME
70bf89f48c
Felix Palmen (zirias) · 4.0.0
bsd.sites.mk: Update all ports using USE_GITLAB

Replace GL_COMMIT by GL_TAGNAME in all ports. The new GL_TAGNAME is
backwards-compatible (accepting any commit hash as before), but also
understands an actual tag name. Moving to tag names where appropriate is
left to individual ports' maintainers.

Approved by:		portmgr (tcberner, mentor)
Differential Revision:	https://reviews.freebsd.org/D37077
7d1faa7179
Jan Beich (jbeich) · 4.0.0
deskutils/solanum: update to 4.0.0

Changes:	https://gitlab.gnome.org/World/Solanum/-/compare/v3.0.1...4.0.0
Reported by:	GitLab (notify releases)
3bed3511a6
Mikael Urankar (mikael) · 3.0.1_13
lang/rust: Bump revisions after 1.70.0

PR:		271797
e1d1045bc7
Mikael Urankar (mikael) · 3.0.1_12
lang/rust: Bump revisions after 1.69.0

PR:		270953
3db55c4e97
Mikael Urankar (mikael) · 3.0.1_11
lang/rust: Bump revisions after 1.68.0

PR:		270080
ebf29acc6c
Tobias C. Berner (tcberner) · 3.0.1_10
accessibility/at-spi2-core: update to 2.46.0

What's new in at-spi2-core 2.46.0:
* Fix GetInterfaces documentation on org.a11y.atspi.Accessible
  interface.

What's new in at-spi2-core 2.45.91:
* Send device event controller events using the same signature as other
  events.
* Document the Accessible, Action, and Cache dbus interfaces.
* Fix license of atspi-gmain.c (#87).

What's new in at-spi2-core 2.45.90:
* xml: Add some documentation.
* xml: Fix event arguments.
* xml: Add some missing DeviceEventController methods.
* Bind the AT-SPI bus to the graphical session.
* Mark bus service as belonging to the session slice.
* Add ATSPI_ROLE_PUSH_BUTTON_MENU.
* Add an "announcement" event/signal to allow objects to send
  notifications (!63).
* Various code clean-ups and test improvements.

What's new in at-spi2-core 2.45.1:
* Atk and at-spi2-atk are now merged into this project.
* Now requires meson 0.56.2 and glib 2.67.4.
* at-spi2-atk: Expose the accessible hierarchy via dbus introspection.
* Properly escape the AT-SPI bus address; fixes warnings about the address
  not containing a colon (!55).
* Add a text value to AtspiValue, so that a value can expose a textual
  description, as in the new Atk value API.
* Add atspi_event_listener_register_with_app, to allow an event listener
  to be registered only for a given application (!52).

- accessibility/atk and accessibility/at-spi2-atk have been merged into
  accessibility/at-spi2-core

- accessibility/at-spi2-core: bump consumers of removed ports atk and at-spi2-atk

PR:		269704
Exp-run by:	antoine
---
fa81a4f5f8
Mikael Urankar (mikael) · 3.0.1_9
lang/rust: Bump revisions after 1.67.1

PR:		269336
109e35fd59
Daniel Engberg (diizzy) · 3.0.1_8
*/*: Bump rust (cargo) ports to reflect on WITH_LTO

Bump ports in tree so they get rebuilt with new default settings
for cargo ports
12f1c627d4
Mikael Urankar (mikael) · 3.0.1_7
lang/rust: Bump revisions after 1.66.0

PR:		268415
ba14e01a52
Mikael Urankar (mikael) · 3.0.1_6
lang/rust: Bump revisions after 1.65.0

PR:		267622
9bf6a99963
Jan Beich (jbeich) · 3.0.1_5
*/*: move CARGO_CRATES to Makefile.crates in my ports
c818b3c58a
Mikael Urankar (mikael) · 3.0.1_5
lang/rust: Bump revisions after 1.64.0

PR:		267173
afe651cf62
Stefan Eßer (se) · 3.0.1_4
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.0.1_4
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Baptiste Daroussin (bapt) · 3.0.1_4
rust: bring back update to 1.63

Revert back the revert of the update of rust and related commits

This revert was drive by beside validation by portmgr via exp-run
and not respectful of the etiquette we have between committers

This reverts commit 8ecb1f8141144c1603eb4026122d2e60eeaccd64.
This reverts commit 04d257baa182926cff158f32cf459e560426add0.
This reverts commit 2757c63bd0e6d01f9f0657fe03bb3a7b49adcae2.
This reverts commit 75f4713de5e3fbd1c6a0cb572e08121814a4072e.
This reverts commit e88e592111c86fdd1c0ac8717dbef9342e15e27c.
This reverts commit 783c056d7d681d66e2c5c59251c275d65274028e.

With hat:	portmgr
b9b250f912