CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

devel/cmake-core3.31.12_3

Cross-platform Makefile generator

Maintainer
kde@FreeBSD.org
Packages
cmake-core 3.31.12_3
Upstream
Higher version available: 4.4.4
CPE
cmake_project:cmake from the port
WWW
https://www.cmake.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

VuXML entries whose affected range this version has left.

Commits (54)

Gleb Popov (arrowd) · 3.31.12_3
devel/cmake-core: Teach CMake to prefer our PYTHON_DEFAULT when find_package(Python3) is called

Reported by:	vvd
75989113a4
Dima Panov (fluffy)
evel/cmake-core: backport boost-1.91+ support from upstream (+)

Prepare to boost-1.91 landing to the portstree
6adc7bd796
Gleb Popov (arrowd)
devel/cmake-core: Drop now obsolete patch

This patch was added 16 years ago and now doesn't really make sense. There are
only a few consumers affected by this patch and it is better to fix consumers
rather than plague all FindSDL.cmake users with extra -I${LOCALBASE}

Approved by:	makc (kde)
Pull Request:	https://github.com/freebsd/freebsd-ports/pull/530
fe4ca0e767
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.12

https://www.kitware.com/cmake-3-31-11-available-for-download/
https://www.kitware.com/cmake-3-31-12-available-for-download/
683b759c5f
Daniel Engberg (diizzy)
devel/cmake-core: Use fat LTO instead of thin LTO

As we hardcode thin LTO to one thread [1] without any resolve for more
than a year use fat which performs better

1: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281765

PR:		292178
Approved by:	timeout (no objections for 3+ weeks)
Exp-run by:	antoine
86e6270acf
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.10

https://www.kitware.com/cmake-3-31-10-available-for-download/
3534699fdb
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.9

https://discourse.cmake.org/t/cmake-3-31-8-available-for-download/14236
https://discourse.cmake.org/t/announce-cmake-3-31-9-available-for-download/15199
728e2789d5
Yuri Victorovich (yuri)
Revert "devel/cmake-core: Remove FindBoost module"

This reverts commit 9b5005a44fdbe85db87d9b244ca79e50d68f6bcd.
fcc1066e70
Yuri Victorovich (yuri)
devel/cmake-core: Remove FindBoost module

It breaks many other ports, for example multimedia/lms, math/curv, science/votca

cmake doesn't support Boost any more and doesn't know about
the latest boost versions.

Reported by:	fallout
Approved by:	portmgr (blanket unbreak)
9b5005a44f
Dima Panov (fluffy)
devel/cmake-core: backport boost-1.88+ support from upstream (+)

Also track conversion Boost.system from library to header-only after 1.70 release

Prepare to boost-1.89 landing to the portstree
fd2c612f52
Jason E. Hale (jhale)
devel/cmake-core: Respect user CFLAGS/CXXFLAGS

CMake has set a few compiler optimization flags for ages, depending upon
the build type. For Debug and Release build types, especially, these
flags are overridden in Mk/Uses/cmake.mk for projects that use CMake,
including other CMake components, i.e., devel/cmake-(doc|gui|man), but
not cmake-core, since it has to bootstrap itself.

This change makes the core component build with the same flags as the
rest of the cmake ports. For most users, this just means that cmake-core
will now build with -O2 instead of -O3 by default.

Not bumping PORTREVISION since nobody has really cared about this for the
past 15 years. To be clear, all other CFLAGS/CXXFLAGS have been
respected. This just elimitates the -O3 flag that CMake internally adds
for Release builds of cmake-core.

Based upon work by former FreeBSD committer koobs. [1]

[1] https://github.com/koobs/ports/commit/da342cfb3dd94f005e4a44d2ef9c863fc19b58e2 [1]

Co-authored-by: Daniel Engberg <diizzy@FreeBSD.org>

PR:		286494
c7532c2761
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.7

kde@ is aware that CMake 4.0.x is out, but an update at this time would
likely entail fallout from 500+ ports, which we'd rather let upstream
projects deal with until fixing problems ourselves reaches a manageable
level. Most of these are easily fixable, but it's still a lot to clear
for a very small team with other projects to consider. See, for example:
https://build.opensuse.org/project/show/home:simotek:cmake4

https://www.kitware.com/cmake-3-31-7-available-for-download/
2250b9fbaa
Jason E. Hale (jhale)
devel/cmake-(core|gui): Fix build with curl 8.13

Add upstream patch to fix incompatibility with curl >= 8.13.0. This is fixed
in CMake 3.31.7 and newer.

/wrkdirs/usr/ports/devel/cmake-gui/work/cmake-3.31.6/Source/cmCurl.cxx:178:26:
error: assigning to 'CURL_NETRC_OPTION' from incompatible type 'long'
  178 |       curl_netrc_level = CURL_NETRC_OPTIONAL;
      |                          ^~~~~~~~~~~~~~~~~~~
/usr/local/include/curl/curl.h:2355:29: note: expanded from macro 'CURL_NETRC_OPTIONAL'
 2355 | #define CURL_NETRC_OPTIONAL 1L /* A user:password in the URL will be preferred
      |                             ^~
/wrkdirs/usr/ports/devel/cmake-gui/work/cmake-3.31.6/Source/cmCurl.cxx:180:26:
error: assigning to 'CURL_NETRC_OPTION' from incompatible type 'long'
  180 |       curl_netrc_level = CURL_NETRC_REQUIRED;
      |                          ^~~~~~~~~~~~~~~~~~~
/usr/local/include/curl/curl.h:2357:29: note: expanded from macro 'CURL_NETRC_REQUIRED'
 2357 | #define CURL_NETRC_REQUIRED 2L /* A user:password in the URL will be ignored.
      |                             ^~
/wrkdirs/usr/ports/devel/cmake-gui/work/cmake-3.31.6/Source/cmCurl.cxx:182:26:
error: assigning to 'CURL_NETRC_OPTION' from incompatible type 'long'
  182 |       curl_netrc_level = CURL_NETRC_IGNORED;
      |                          ^~~~~~~~~~~~~~~~~~
/usr/local/include/curl/curl.h:2353:29: note: expanded from macro 'CURL_NETRC_IGNORED'
 2353 | #define CURL_NETRC_IGNORED  0L /* The .netrc will never be read.
      |                             ^~

PR:		286404
Reported by:	Ian Dickens <ian@south-border.com>, pkg-fallout
173806f44b
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.6

Announcement:
https://www.kitware.com/cmake-3-31-6-available-for-download/
bff8e32a2f
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.5

Announcement:
https://www.kitware.com/cmake-3-31-5-available-for-download/
88d2c11dbc
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.4

Announcement:
https://www.kitware.com/cmake-3-31-4-available-for-download/
eb8f36e62c
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.3

Announcement:
https://www.kitware.com/cmake-3-31-3-available-for-download/
b516cc3e5b
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.2

Announcement:
https://www.kitware.com/cmake-3-31-2-available-for-download/
a16d253f12
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.1

Announcement:
https://www.kitware.com/announce-cmake-3-31-1-available-for-download/
898c28136c
Jason E. Hale (jhale)
devel/cmake-core: Remove CPACK option

This option has been a point of confusion several times. It was once an
experimental feature, but it has been on by default for many years and
there is really no point in disabling it anymore.

Make sure we are always linking to libarchive from base. This was
previously conditionalized to only happen if the CPACK option was
enabled, so if the user had the CPACK option disabled and had libarchive
from ports installed, the ports version would be linked to. [1]

Add missing dns/libidn2 dependency. This is an optional dependency that
didn't manifest itself in poudriere, but it gets linked to if previously
installed on a live system build.

Reported by:	vvd on #freebsd-desktop [1]
f7c59ccf4e
Jason E. Hale (jhale)
devel/cmake*: Update to 3.31.0

devel/cmake-gui: Convert to out-of-source build

Announcement:
https://www.kitware.com/cmake-3-31-0-available-for-download/

Release notes:
https://cmake.org/cmake/help/latest/release/3.31.html

PR:		282725
Exp-run by:	antoine
4263e3aac0
Jason E. Hale (jhale)
devel/cmake-core: Fixup 76b8901dae25efc80678bb950

Despite switching to an out-of-source build, .bak and .orig files were
still being pattern matched and installed into STAGEDIR. These were never
packaged nor installed on the system, however, so this is a no-op to the
end-user.

MFH:		2024Q4
22bf11bc9c
Jason E. Hale (jhale)
devel/cmake*: Update to 3.30.5

Announcement:
https://www.kitware.com/cmake-3-30-5-available-for-download/
7882db2f6d
Jason E. Hale (jhale)
devel/cmake*: Update to 3.30.4

Announcement:
https://www.kitware.com/cmake-3-30-4-available-for-download/
85c3bcc0ed
Yuri Victorovich (yuri)
*/*: Bump dependencioes after devel/jsoncpp update

PR:		281462
Reported by:	Ale <discipline@tiscali.it>
a63bcef051
Jason E. Hale (jhale)
devel/cmake*: Update to 3.30.3

Announcement:
https://www.kitware.com/cmake-3-30-3-available-for-download/
c21eed4415
Jason E. Hale (jhale)
devel/cmake-core: Refactor

Move the update reminder to Uses/Mk/cmake.mk where the version has
been changed since after 7bdeb4414c22 and will be more likely noticed.

Switch to an out-of-source build. This eliminates the need to remove
certain unwanted files prior to install.

Define a sensible CONFIGURE_LOG for users to report as the default
doesn't exist.

Sort CONFIGURE_ARGS, not necessarily alphabetically, but to improve
readability.

Pet portclippy(1): hoist the post-patch target.

Settle on one sed(1) delimiter instead of three. Pipes (|) seems to
be the most readable here.

Remove cruft from ${FILESDIR}/InitialCache.cmake and convert to SUB_FILES
to take advantage of framework substitutions. archivers/lzmalib is gone,
so there is no need to patch for that. Remove the CPACK_OPTION_COMMENT
variable in favor of CMake logic.
76b8901dae
Jason E. Hale (jhale)
devel/cmake*: Update to 3.30.2

Announcement:
https://www.kitware.com/cmake-3-30-2-available-for-download/
134a62d863
Jason E. Hale (jhale)
devel/cmake*: Update to 3.30.1

Announcements:
https://www.kitware.com/cmake-3-30-0-available-for-download/
https://www.kitware.com/cmake-3-30-1-available-for-download/

Release notes:
https://cmake.org/cmake/help/latest/release/3.30.html

PR:		280381
Exp-run by:	antoine
fbb737b613
Jason E. Hale (jhale)
devel/cmake*: Update to 3.29.6

Announcement:
https://www.kitware.com/cmake-3-29-6-available-for-download/
65fe831aa1
Jason E. Hale (jhale)
devel/cmake*: Update to 3.29.5

Announcements:
https://www.kitware.com/cmake-3-29-4-available-for-download/
https://www.kitware.com/cmake-3-29-5-available-for-download/
5a4f245097
Jason E. Hale (jhale)
devel/cmake: Update to 3.29.3

Announcement:
https://www.kitware.com/cmake-3-29-3-available-for-download/
b3b138076f
Jason E. Hale (jhale)
devel/cmake*: Update to 3.29.2

Qt5 support has been removed from devel/cmake-gui. The kde@ team
recommends migrating away from Qt5 and using Qt6 for individual
applications whenever possible.

Announcements:
https://www.kitware.com/cmake-3-29-0-available-for-download/
https://www.kitware.com/cmake-3-29-1-available-for-download/
https://www.kitware.com/cmake-3-29-2-available-for-download/

Release notes:
https://cmake.org/cmake/help/latest/release/3.29.html

PR:		278693
Exp-run by:	antoine
8c719da72f
Max Brazhnikov (makc)
devel/cmake-core: drop duplication with cmake.mk
ba50bfd158
Jason E. Hale (jhale)
devel/cmake*: Update to 3.28.3

Changes made since CMake 3.28.2:

- Tests: Add case covering PCH in a unity build
- Unity: Clarify source comments on unity build transformation
- cmGlobalGenerator: Add unity/pch sources after computing compile
  features
- zlib 2022-10-12 (04f42cec)
- zlib: Fix 1.2.13 version and date notice

https://www.kitware.com/cmake-3-28-3-available-for-download/
8ac8784c62
Jason E. Hale (jhale)
devel/cmake*: Pet portclippy(1) and migrate to Qt6

Migrate towards Qt6:
- Switch the default flavor of devel/cmake-gui to qt6.
- Use qt6-tools instead of qt5-help in devel/cmake-doc to generate the Qt
  help file.

Depend on the flavorized version of textproc/py-sphinx.

Pet portclippy(1) and portlint(1) and make Makefile order more consistent
within the devel/cmake* ports. Remove duplicate DISTINFO_FILE line from
devel/cmake-man. [1]

Make build of devel/cmake-core verbose [2] and respect WITH_CCACHE_BUILD
in bootstrapping phase.

Remove the "experimental" annotation from the CPACK option in
devel/cmake-core to avoid end-user confusion. [3] The FreeBSD CPack
generator has been marked experimental since version 3.11.4, but is
supported upstream and shouldn't be considered experimental even if
we've had to make some local changes to it. If it isn't working
correctly, please file a bug report.

PR:		276792 [1], 276782[2], 274640 [3]
Reported by:	diizzy [1], Anton Saietskii <vsasjason@gmail.com> [2],
		Martin Waschbüsch <martin@waschbuesch.de> [3]
97c31b9399
Jason E. Hale (jhale)
devel/cmake*: Update to 3.28.2

Install manpages in share/man.

Changes made since CMake 3.28.1:
- Autogen: Forward dependencies when both Makefile and DEPFILE are used
- CUDA/Clang: Record architectures supported by Clang 16
- CUDA/Clang: Update architectures supported by CUDA 12
- CUDAToolkit: Correctly search all include paths from compiler
- ExternalProject: revert `BYPRODUCTS` for download outputs
- FindBoost: Add support for Boost 1.84
- FindFreetype: Revert use of upstream freetype cmake package
- FindMatlab: Accept long ver in matlab_get_release_name_from_version
- FindMatlab: Document all registry paths for version lookup
- FindMatlab: Document that version mappings do not apply to MCR
- FindMatlab: Fix error message from function
- FindMatlab: Fix major.minor version lookups in Windows Registry
- FindMatlab: Restore support for finding EXACT major.minor version
- FindMatlab: Restore support for versions without VersionInfo.xml
- FindMatlab: Some versions use major.minor.patch in the registry
- FindMatlab: matlab_get_release_name_from_version is a function now
- FindMatlab: use correct registry view when extracting versions
- HIP: Propagate CMAKE_HIP_PLATFORM from/to the test project in
  check_language
- HIP: Really forward CMAKE_HIP_HOST_COMPILER in check_language(HIP)
- Help: Add missing DIRECTORY keyword to set_tests_properties()
  signature
- Help: Fix typo not accounting for addition of visionOS
- Help: Fix wrong return values for unset inherited properties
- Help: Note CMAKE_IOS_INSTALL_COMBINED deprecation in toolchains
  example
- Help: Update missed text for dynamically generated resource spec files
- Help: Use <variable> consistently in property getter commands
- Help: Use <xxx> for non-keyword arguments in property command
  signatures
- Help: string(LENGTH): Fix synopsis link to command description
- Help: update lua.org links to be HTTPS
- Makefile: Fix double escaping when DEPFILE is used
- Makefile: Reduce string copies
- Ninja: LINK_OPTIONS property should support newlines
- Revert use of libuv for process execution for 3.28
- Source: Restore compilation on OpenBSD
- Source: Simplify hasher object construction
- Tests/CXXModules/scan_properties: use `ixx` extension
- Tests/CXXModules: add a test case for VS generation without flags
- Tests/CXXModules: add a test with unity build support
- Tests: Add missing include in testUVProcessChainHelper on Windows
- Tests: Improve C compatibility of LoadCommand tests
- Tests: Verify CUDA::cupti existence on a subset of machines
- UsePkgConfig: Restore removal of trailing whitespace from pkg-config
  output
- Xcode: Restore support for standalone IMPORTED_LOCATION_
- cmDyndepCollation: clarify CXX_MODULES-without-BMI error message
- cmGlobalGenerator: add unity sources after computing target compile
  features
- cmLocalGenerator: ignore scanned sources for unity builds
- cmNinjaTargetGenerator: use scan flag for modmap usage inexported
  commands
- cmQtAutoGenInitializer: Improve Const-correctness
- cmUVProcessChain: Simplify SetExternalStream usage
- cmUVProcessChain: Simplify builder initialization
- cmUVProcessChain: Tolerate fileno() of invalid FILE stream
- cmVisualStudio10TargetGenerator: always specify scanning
- cmVisualStudio10TargetGenerator: fix typo in flag name
- cxxmodules: compute link information for C++ module-consuming targets
- cxxmodules: make export trampoline script files unique
- zlib 2022-10-12 (04f42cec)
- zlib: Update script to get zlib 1.2.13

https://www.kitware.com/cmake-3-28-2-available-for-download/
f5b24810ef
Jason E. Hale (jhale)
devel/cmake*: Update to 3.28.1

Announcements: https://www.kitware.com/cmake-3-28-0-available-for-download/
               https://www.kitware.com/cmake-3-28-1-available-for-download/
Release notes: https://cmake.org/cmake/help/latest/release/3.28.html

PR:		275730
Exp-run by:	antoine
be58b09c1d
Jason E. Hale (jhale)
devel/cmake-*: Update to 3.27.9

Changes made since CMake 3.27.8:
- Help: Document that CMP0149 should be set before project()
- Help: Fix ctest(1) manual links to www.cdash.org
- Ninja: Revert exact collation dependencies for 3.27
- Ninja: depfile: keep rules without dependencies
- Tests/FortranModules: add test for TARGET_OBJECTS-as-sources module
  usage
- Tests/FortranModules: add test for TARGET_OBJECTS-as-linked-items
  module usage
- fileapi: Fix file sets' base directories relative to top source

https://www.kitware.com/cmake-3-27-9-available-for-download/
6c4806b462
Jason E. Hale (jhale)
devel/cmake-*: Update to 3.27.8

Changes made since CMake 3.27.7:
- FindOpenMP: Add support for openmp 5.1 (llvm 17) and 5.2
- GetPrerequisites: Revert "Ignore relative paths printed by ldd"
- Fortran: Restore support for TARGET_OBJECTS providing modules
- Tests/ObjectLibrary: fix comment
- cmComputeLinkDepends: also copy the target from object link items
- cmComputeLinkInformation: skip over linking to items for object
  purposes
- cmComputeLinkInformation: Track targets named by TARGET_OBJECTS
  sources
- cmCommonTargetGenerator: Factor out GetLinkedTargetDirectories loop
  body
- curl: Backport SOCKS5 heap buffer overflow fix from curl 8.4.0

https://www.kitware.com/cmake-3-27-8-available-for-download/

Security:	d6c19e8c-6806-11ee-9464-b42e991fc52e
d870a95b5a
Jason E. Hale (jhale)
devel/cmake*: Update to 3.27.7 [1]

Add support for keywords like RUNTIME_DEPENDENCY_SET and
RUNTIME_DEPENDENCIES in the install() command and
GET_RUNTIME_DEPENDENCIES in the file() command. [2]

https://cmake.org/cmake/help/v3.27/release/3.27.html

PR:		274225 [1], 274275 [2]
Reported by:	yuri [2]
Exp-run by:	antoine [1]
5244b8425c
Jason E. Hale (jhale)
devel/cmake-core: Fix build with non-base SSL

This is a just a hotfix to keep things building, but more investigation
is certaintly warranted.

PR:		274512
Reported by:	Dean E. Weimer <dweimer@dweimer.net>
90b6cf7448
Dimitry Andric (dim)
devel/cmake-core devel/cmake-gui misc/mbuffer: cope with librhash.so bump

Because rhash 1.4.4 updated the librhash.so symlink from .0 to .1,
build-time dependents such as cmake-core and cmake-gui need their
PORTREVISION bumped.

The other case is misc/mbuffer, which uses librhash only at runtime, but
hardcodes dlopen("librhash.so.0", RTLD_NOW). I changed this to just
"librhash.so", and it seems to work fine with light testing.

PR:		273775
Reported by:	Tomoaki AOKI <junchoon@dec.sakura.ne.jp>
Fixes:		e0acbd158ec9 security/rhash: update to 1.4.4 and fix build with lld 17
MFH:		2023Q3
28149de0a6
Adriaan de Groot (adridg)
devel/cmake-core: add patch for ZLIB 1.3

Add upstream patch (which is in 3.27.4, but we don't
have a CMake update going on right now) that fixes
finding ZLIB 1.3 -- which is necessary for FreeBSD 14.

PR:		273915
ad47cbd7d7
Robert Clausecker (fuz)
devel/cmake-core: remove outdated FindOpenMP.cmake patch

This patch broke the build of any armv6/armv7 package that tried to
use OpenMP.  It was once appropriate, but is now no longer correct
or needed.

PR:		270954
MFH:		2023Q2
Approved by:	ports-secteam (fluffy), adridg
Tested by:	portmgr (antoine, exp-run)
b13bdddc80
Adriaan de Groot (adridg)
devel/cmake: update to 3.26.1, latest upstream

See release notes at
	https://cmake.org/cmake/help/v3.26/release/3.26.html

Some "while we're at it" changes:
- remove obsolete patch, reported by: diizzy (PR 270337)
- set LOCALSTATEDIR to /var (PR 267748)

Thanks antoine@ for the exp-run.

PR:		270491 270337 267748
2f35240f67
Dima Panov (fluffy)
devel/cmake-core: Fix build with libnghttp2 installed

While building the bundled curl, -I/usr/local/include appears too early
on the compiler command line causing the compiler to use headers from
an installed libnghttp2 instead of the bundled libnghttp2.  Add
USES=localbase so CFLAGS contains -isystem /usr/local/include making
the compiler search the directory after all the -I flags.

PR:		269253
1e149b25f5
Adriaan de Groot (adridg)
devel/cmake*: update to 3.25.1

While here, remove a stale patch (upstreamed in CMake 3.10 or so)
and repair the CPack FreeBSD pkg generator.

Prepared by lbartoletti@
Exp-runs by antoine@

PR:		267872, 267894
efaecf6690
Adriaan de Groot (adridg)
devel/cmake-core: needs USES+=ssl

PR:		267780
78037463c0
Dima Panov (fluffy)
devel/cmake-core: drop dependency on some external libs to avoid a loop cycle (+)

Switch to bundled libcurl+libnghttp2 to utilize fetch ability for cmake
Always use system libarchive/zlib

Discussed with:	tcberner
cbdb82ae53