CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

devel/qbs3.1.2_5

Qbs Build Suite

Maintainer
kde@FreeBSD.org
Packages
qbs 3.1.2_5
Upstream
Higher version available: 3.3.1
CPE
none, CVEs only via VuXML
WWW
https://doc.qt.io/qbs/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (62)

Michael Osipov (michaelo) · 3.1.2_5
*/*: Bump consumers of www/beautifulsoup4 after port rename

PR:		297837
Approved by:	wen (maintainer via email)
45ea4cf85c
Jason E. Hale (jhale) · 3.1.2_4
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.11.2 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt

MFH:		2026Q3
82a328aa9b
Alexey Dokuchaev (danfe) · 3.1.2_3
devel/qbs: add missing documentation file to unbreak packaging

Reported by:	make check-plist
b895caf359
Jason E. Hale (jhale) · 3.1.2_2
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.11.1 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt
4dab0722de
Jason E. Hale (jhale) · 3.1.2_1
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.10.2 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt
8c49a1e64d
Jason E. Hale (jhale) · 3.1.2
devel/qbs: Update to 3.10.2

Ultimately, no changes; just formalities. The Qt 6.10 build fix that we
have been applying locally was made into offical release.
8f2cc3c138
Jason E. Hale (jhale) · 3.1.1
devel/qbs: Update to 3.1.1

Include upstream patch [1] to fix build with upcoming Qt 6.10.x,

Annoucement (for 3.1.0):
https://qbs.io/blog/release-3.1.0/
Changes:
https://code.qt.io/cgit/qbs/qbs.git/tree/changelogs/changes-3.1.0.md?h=3.1
https://code.qt.io/cgit/qbs/qbs.git/tree/changelogs/changes-3.1.1.md?h=3.1

[1] https://code.qt.io/cgit/qbs/qbs.git/commit/?h=3.1&id=ee78fcb399ec5968a43dc0160ee40cdd5357cc1a

MFH:		2025Q4
07f8059c43
Hiroki Tagato (tagattie) · 3.0.3_1
*/*: switch dependency from devel/py-lxml5 to devel/py-lxml

Currently, there are two versions of python XML processing library
which conflict each other in the ports tree, namely:
- devel/py-lxml5 (now at version 5.4.0)
- devel/py-lxml  (now at version 6.0.1)

To avoid the situation that some ports depend on py-lxml5 and some
others do on py-lxml (by switching dependencies individually), this
commit switches the dependencies from py-lxml5 to py-lxml at once.

Additional note: There are still two ports (textproc/py-rdflib and
www/py-draftjs-exporter) depending on py-lxml5 since they limit upper
version to less than 6.

PR:		289491
Approved by:	Michiel van Baak Jansen <michiel@vanbaak.eu>, arrowd,
		crees, madpilot, delphij, marcus, nivit, kai,
		skreuzer, fluffy, bofh, thierry, stephen, sunpoet,
		0mp, Eric Camachat <eric@camachat.org>
a6233e5a2f
Jason E. Hale (jhale) · 3.0.3
devel/qbs: Update to 3.0.3

Remove upstreamed patches.
9e6501dedb
Jason E. Hale (jhale) · 3.0.1_1
devel/qbs: Fix build on i386 [1]

In file included from /wrkdirs/usr/ports/devel/qbs/work/qbs-src-3.0.1/src/lib/corelib/api/internaljobs.cpp:52:
In file included from /wrkdirs/usr/ports/devel/qbs/work/qbs-src-3.0.1/src/lib/corelib/language/scriptengine.h:52:
/wrkdirs/usr/ports/devel/qbs/work/qbs-src-3.0.1/src/lib/corelib/tools/scripttools.h:193:47: error:
member reference base type 'const JSValue' (aka 'const unsigned long long') is not a structure or union
  193 |     operator bool() const { return m_exception.tag != JS_TAG_UNINITIALIZED; }
      |                                    ~~~~~~~~~~~^~~~

Add upstream patch to support -STABLE and -CURRENT.

Reported by:	pkg-fallout [1]
f83fa7a957
Jason E. Hale (jhale) · 3.0.1
devel/qbs: Update to 3.0.1

https://qbs.io/blog/release-3.0.1/
a3484468ed
Hiroki Tagato (tagattie) · 2.6.0_1
*/*: update dependency on devel/py-lxml to devel/py-lxml5

www/py-beautifulsoup has switched dependency on devel/py-lxml to
devel/py-lxml5.

Ports which directly or indirectly depends on both
www/py-beautifulsoup and devel/py-lxml must also switch their
dependencies on devel/py-lxml to devel/py-lxml5 to avoid conflicts.

PR:		288047
Approved by:	portmgr (chase dependency change)
230fb2661c
Jason E. Hale (jhale) · 2.6.0
devel/qbs: Resurrect port and update to 2.6.0

Qbs is a tool that helps simplify the build process for developing
projects across multiple platforms. Qbs can be used for any software
project, regardless of programming language, toolkit, or libraries used.

Qbs is an all-in-one tool that generates a build graph from a high-level
project description (like qmake or CMake) and additionally undertakes the
task of executing the commands in the low-level build graph (like make).
4ef37cf5a3
Rene Ladan (rene)
cleanup: Remove expired ports:

2022-06-25 lang/cmucl: Not supported upstream since 2017 and broken since FreeBSD 12.1
2022-06-25 devel/qbs: Abandoned and not working with modern clang
2022-06-25 lang/cmucl-extra: lang/cmucl is not supported upstream since 2017 and broken since FreeBSD 12.1
2022-06-25 security/protonvpn-cli: This version is deprecated and unsupported upstream. The port needs an update, which would require a fair amount of effort. Use OpenVPN or Wireguard with configuration files provided by ProtonVPN instead.
2022-06-27 sysutils/firstboot-growfs: A better version is available on all FreeBSD version
2022-06-27 security/modsecurity3-apache: The project was not developed further
2022-06-29 net-mgmt/zabbix54-frontend: Unsupported by upstream
2022-06-29 net-mgmt/zabbix54-server: Unsupported by upstream
2fb224a12b
Tobias C. Berner (tcberner) · 1.21.0_1
devel/qbs: mark for removal

PR:		260802
1ef62d0494
Adriaan de Groot (adridg) · 1.21.0_1
devel/qbs: mark BROKEN

(The build system) qbs fails to build when QScript is built with
clang13 and any kind of optimization. There's an upstream bug
for this,
	https://bugreports.qt.io/browse/QBS-1684
but no resolution yet. Since QScript is -- maybe not *deprecated*,
but not-really-maintained -- unlikely to get fixes, we end up
with qbs blocking its one single consumer, qtcreator. But qtcreator
doesn't actually **need** qbs and can get by without.

So mark as broken, so that the package builders will stop complaining.
b97a7f5984
Adriaan de Groot (adridg) · 1.21.0
devel/qbs: update to 1.21, latest upstream

There's no release notes for this, but portscout spotted it
(and fedora packages it as well, already). Bump qtcreator,
which is the only consumer of the library / buildsystem.
7f39b57153
Adriaan de Groot (adridg) · 1.20.0
devel/qbs: update to 1.20, latest upstream, and changed ports norms

- Bump version and fix build.
- See CHANGES, 20200115: ${PREFIX}/share/man is for manpages, so
  remove the patch that put the manpages elsewhere, and update plist.
- When looking for qmake, look for suffixed names as well; we
  stopped using qtchooser some time ago, and adopted a qmake-qt5.
  Linux hosts do this with a check, we'll just `true` it in.
- Pull in an upstream patch to warn when there is no qmake;
  massage it to look for suffixed qmakes as well.

PR:		258444
Reported by:	yuri
9f62e710c4
Tobias C. Berner (tcberner) · 1.19.2
devel/qbs: update to 1.19.2
dbfbf9e048
Kevin Bowling (kbowling) · 1.19.1_1
graphics/mesa-libs: Bump reverse deps for libglvnd

Per discussion with bapt on helping pkg handle the changing of these
deps and avoiding impossible upgrade senarios.

PR:		246767
Reviewed by:	manu, bapt
Approved by:	x11
Differential Revision:	https://reviews.freebsd.org/D30824
da3162c7c9
Tobias C. Berner (tcberner) · 1.19.1
devel/qbs: update to 1.19.1
a6989eedfe
Adriaan de Groot (adridg) · 1.19.0
devel/qbs: update to 1.19, latest upstream

qbs may be deprecated, but it still gets new releases until
it is **really** end-of-life. Release notes at
	https://doc.qt.io/qbs/
a41b29b2f0
Mathieu Arnold (mat) · 1.17.0
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.17.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Tobias C. Berner (tcberner) · 1.17.0
devel/qbs: update to 1.17.0
76769ed212
Tobias C. Berner (tcberner) · 1.16.0
devel/qbs: update to 1.16.0
86028d2925
Tobias C. Berner (tcberner) · 1.15.0
devel/qbs: update to 1.15.0
4ac8652ad8
Tobias C. Berner (tcberner) · 1.14.1
devel/qbs: update to 1.14.1
cf7e3147fe
Niclas Zeising (zeising) · 1.14.0
Add USES=xorg USES=gl, ports categories d

Add USES=xorg, USES=gl and in a few cases USES=gnome to ports in categories
starting with 'd'.
366790689c
Raphael Kubo da Costa (rakuco) · 1.14.0
Update to 1.14.0.
eb7831c21b
Gerald Pfeifer (gerald) · 1.13.1_1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Tobias C. Berner (tcberner) · 1.13.1
devel/qtcreator: update to 4.9.1 (with it qbs to 1.31.1)
ddc3c34c1b
Tobias C. Berner (tcberner) · 1.13.0
devel/qbs: update to 1.13.0
65e21bd569
Tijl Coosemans (tijl) · 1.12.2_1
Fix Qt5 symbol version scripts to put the catch-all clause first.  When a symbol matches multiple clauses the last one takes precedence.  If the catch-all is last it captures everything.  In the case of Qt5 libraries this caused all symbols to have a Qt_5 label while some should have Qt_5_PRIVATE_API.  This only affects lld because GNU ld always gives the catch-all lowest priority.

Older versions of Qt5Webengine exported some memory allocation symbols from
the bundled Chromium.  Version 5.9 stopped exporting these [1] but the
symbols were kept as weak wrappers for the standard allocation functions to
maintain binary compatibility. [2][3]  The problem is that the call to the
standard function in these weak wrappers is only resolved to the standard
function if there's a call to this standard function in other parts of
Qt5Webengine, because only then is there a non-weak symbol that takes
precedence over the weak one.  If there's no such non-weak symbol the call
in the weak wrapper resolves to the weak wrapper itself creating an infinite
call loop that overflows the stack and causes a crash.  Some of the
allocation functions are variants of C++ new and delete and it probably
depends on the compiler whether these variants are used in other parts of
Qt5Webengine.

Remove the weak wrappers (make them Linux specific).  This isn't binary
compatible but we are already breaking that with the changes to the symbol
versions.

[1] https://github.com/qt/qtwebengine/commit/5c2cbfccf9aafb547b0b30914c4056abd25942a4
[2] https://github.com/qt/qtwebengine/commit/2ed5054e3a800fa97c2c9e920ba1e6ea4b6ef2a5
[3] https://github.com/qt/qtwebengine/commit/009f5ebb4bd6e50188671e0815a5dae6afe39db5

Bump all ports that depend on Qt5.

PR:		234070
Exp-run by:	antoine
Approved by:	kde (adridg)
1bf487d3e7
Tobias C. Berner (tcberner) · 1.12.2
Update Qt5 to 5.12.0

http://blog.qt.io/blog/2018/12/06/qt-5-12-lts-released/

- This breaks support for libressl again. Patches are welcome.

PR:		233705
Exp-run by:	antoine
ea792330aa
Gerald Pfeifer (gerald) · 1.11.1_3
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Gerald Pfeifer (gerald) · 1.11.1_2
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6
Tobias C. Berner (tcberner) · 1.11.1_1
Replace bsd.qt.mk by Uses/qt.mk and Uses/qt-dist.mk

From now on, ports that depend on Qt4 will have to set
	USES=		qt:4
	USE_QT=		foo bar
ports depending on Qt5 will use
	USES=		qt:5
	USE_QT=		foo bar

PR:		229225
Exp-run by:	antoine
Reviewed by:	mat
Approved by:	portmgr (antoine)
Differential Revision:	→https://reviews.freebsd.org/D15540
b1a1d38bf9
Tobias C. Berner (tcberner) · 1.11.1_1
Update devel/qtcreator to 4.6.2

While here, fix a typo in devel/qbs's Makefile.
0c286a1b7a
Tobias C. Berner (tcberner) · 1.11.1
Update devel/qtcreator and devel/qbs to 4.6.1 and 1.11.1 respectively.
ad98de9192
Tobias C. Berner (tcberner) · 1.11.0
Update devel/qtcreator and devel/qbs to 4.6.0 and 1.11.0
293d6cbf6f
Tobias C. Berner (tcberner) · 1.10.1
Update devel/qtcreator and devel/qbs to 4.5.1 and 1.10.1.
3b161b4abd
Tobias C. Berner (tcberner) · 1.10.0
Update devel/qbs and devel/qtcreator to 1.10.0 and 4.5.0

Changelog:
  http://blog.qt.io/blog/2017/12/07/qt-creator-4-5-0-released/

Reviewed by:	rakuco
Differential Revision:	https://reviews.freebsd.org/D13639
ab7e365b94
Tobias C. Berner (tcberner) · 1.9.0
Update devel/qtcreator and devel/qbs to 4.4.0 and 1.9.0

https://blog.qt.io/blog/2017/09/05/qt-creator-4-4-0-released/

Reviewed by:	adridg
Differential Revision:	https://reviews.freebsd.org/D12266
3c985bcc07
Gerald Pfeifer (gerald) · 1.8.1_1
Bump PORTREVISION for ports depending on the canonical version of GCC (via Mk/bsd.default-versions.mk and lang/gcc) which has moved from GCC 5.4 to GCC 6.4 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
   c++14-lang, c++0x, c11, or gcc-c++11-lib.

PR:		219275
e59c88cece
Tobias C. Berner (tcberner) · 1.8.1
Update devel/qbs to 1.8.1.
1ed432fbd2
Tobias C. Berner (tcberner) · 1.8.0
Update devel/qbs to 1.8.0 and devel/qtcreator to 3.4.0

Differential Revision:	https://reviews.freebsd.org/D10996
8ddccda203
Matthew Rezny (rezny) · 1.7.2_1
Revision bump of all ports with USE_GL after consolidation of mesa-libs

Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D10845
b760897dde
Tobias C. Berner (tcberner) · 1.7.2
Update devel/qbs to 1.7.2.

Reviewed by:	rakuco, mat
Approved by:	mat (mentor)
Differential Revision:	https://reviews.freebsd.org/D10521
9c0589ff66
Gerald Pfeifer (gerald) · 1.7.1_1
Bump PORTREVISIONs for ports depending on the canonical version of GCC and lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some circumstances such as versions of FreeBSD or platforms).

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using using Mk/bsd.octave.mk which in turn has USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
   c++11-lang, c++0x, c11, or gcc-c++11-lib.

PR:		216707
04d6f52202