CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

finance/skrooge26.8.0_1

Personal finance manager

Maintainer
kde@FreeBSD.org
Packages
skrooge 26.8.0_1
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://skrooge.org
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (109)

Michael Osipov (michaelo) · 26.8.0_1
*/*: Bump consumers of www/beautifulsoup4 after port rename

PR:		297837
Approved by:	wen (maintainer via email)
45ea4cf85c
Max Brazhnikov (makc) · 26.8.0
finance/skrooge: Update to 26.8.0
45c979b2a3
Max Brazhnikov (makc) · 26.4.0
finance/skrooge: Update to 26.4.0
ab890d5a76
Max Brazhnikov (makc) · 25.10.0
finance/skrooge: Update to 25.10.0 and switch to Qt6
035e7aa1fa
Rene Ladan (rene) · 2.33.0_1
all: bump PORTREVISION after updating graphics/libyuv

Using the Tools/scripts/bump_revision.pl script
b304d8ab18
Jason E. Hale (jhale) · 2.33.0
finance/skrooge: Update to 2.33.0

https://skrooge.org/news/2024-09-22-skrooge_2.33.0_released/
05da1663c9
Tobias C. Berner (tcberner) · 2.32.0
finance/skrooge: update to 2.32.0
374eda42b3
Tobias C. Berner (tcberner) · 2.31.0
Uses/kde.mk: rename attica5 component to attica
1c5c9b1ac9
Jason E. Hale (jhale) · 2.31.0
finance/skrooge: Update to 2.31.0

https://skrooge.org/news/2023-10-02-skrooge_2.31.0_released/
a97201ef4c
Adriaan de Groot (adridg) · 2.30.0
finance/skrooge: repair build

Used invalid Qt component, didn't notice the local build failure,
pushed it anyway.
3bcaef2a18
Adriaan de Groot (adridg) · 2.30.0
finance/skrooge: update to latest upstream

Reported-by:	portscout
20b19ca549
Rene Ladan (rene) · 2.29.0_1
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Christian Weisgerber (naddy) · 2.29.0_1
audio/opus: bump consumers after update to 1.4
feb1fa34f5
Tobias C. Berner (tcberner) · 2.29.0
finance/skrooge: update to 2.29.0

* Correction bug 459775: User must be able to unlink the current
   account connected with a credit card account
 * Correction bug 459378: Merging imported operation with an existing
   one fails when both have the same property
 * Correction bug 456895: Skrooge seems to work better under Wayland, so
   remove broken Wayland override
 * Correction bug 455427: Allow to add operations to a scheduled
   operation
 * Correction bug 409705: Add category adds as subcategory of selected,
   which doesn't match the Name line
 * Correction bug 463245: Exchange rates converter no longer works
 * Correction bug 465335: Skrooge v2.28.0 AppImage Icons Don't show
 * Correction: When a document is open, settings stored in the document
   (underligned) must be reload
 * Correction: Remove deprecated api for loading plugins
 * Feature: Change of XML export and addition of XML import (this will
   facilitate some other XML import like ISO 20022)
 * Feature: Import ISO 20022
 * Feature: Align the category of all single operations with the
   category of their payee (quality check + view + auto correction)

Changelog: https://skrooge.org/news/2023-02-12-skrooge_2.29.0_released/
afd6367e3c
Dima Panov (fluffy) · 2.28.0_3
devel/grantlee5: bump library consumers after grantlee update
e6475127d6
Felix Palmen (zirias) · 2.28.0_2
Mk/Uses: always use colon for build/run suffix

Most USES use a colon for build/run(/test) suffixes. Change kde.mk,
qt.mk and pyqt.mk to do the same, and update all ports using that.

Document in CHANGES.

PR:			266034
Exp-run by:		antoine
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36349
ddae4e92d8
Stefan Eßer (se) · 2.28.0_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.28.0_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dima Panov (fluffy) · 2.28.0_2
finance/skrooge: pet stage-qa
e6e0763369
Tobias C. Berner (tcberner) · 2.28.0_1
devel/qca: add flavors for Qt 5 and Qt 6
630a8a1ea5
Tobias C. Berner (tcberner) · 2.28.0
finance/skrooge: update to 2.28.0
67a956301e
Tobias C. Berner (tcberner) · 2.27.0
finance/skrooge: update to 2.27.0

Changelog:
     * Correction bug 440271: 2.26.1 still installs skrooge_unit.knsrc
       to depreciated /etc/xdg/ location
     * Correction bug 446353: you can't tab to the number and duration
       fields in Operations "Show" table filter
     * Correction bug 446915: Import from Woob using Ofx
     * Correction: Weeks without operation are missing in reports
     * Correction: Crash when the dashboard is closed during animation
     * Feature: New release process for appimage
     * Feature: Unit values can be negative now (see
       https://forum.kde.org/viewtopic.php?f=210&t=173318)
     * Feature: Skrooge uses now the LC_MONETARY environement variable
       to use the specific locale for currency format
59d1d8b0d4
Tobias C. Berner (tcberner) · 2.26.1
finance/skrooge: update to 0.26.1
7d4f44e097
Adriaan de Groot (adridg) · 2.25.0_1
finance/skrooge: fix build due to missing build-deps
e1186c4e45
Tobias C. Berner (tcberner) · 2.25.0
finance/skrooge: update to 0.25.0
47b8cdb140
Mathieu Arnold (mat) · 2.24.6_1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.24.6_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Jason E. Hale (jhale) · 2.24.6_1
finance/libofx: Update to 0.10.0

This version is not ABI compatible with the previous version, so PORTREVISION
has been bumped on consumers.
25e8be3fe0
Tobias C. Berner (tcberner) · 2.24.6
finance/skrooge: update to 2.24.6
474c582259
Tobias C. Berner (tcberner) · 2.24.0
finance/skrooge: update to 2.24.0
a7d30c2186
Adriaan de Groot (adridg) · 2.23.0
Update finance/skrooge to latest upstream release

While here, alphabetize the shebang-fixes.
70639ac51c
Tobias C. Berner (tcberner) · 2.22.1
finance/skrooge: update to 2.22.1
e001ef61ce
Tobias C. Berner (tcberner) · 2.21.1_2
devel/qca: update to 2.3

- qca-2.3 drop support for OSSL<1.1
- copy devel/qca to devel/qca-legacy which is held at the current version
- update devel/qca to 2.3
- Add Uses/qca.mk which handles dependency on either of the ports depending on
  the FreeBSD version

Users on FreeBSD11 must therefore change their pkg orign à la:

   pkg set -o devel/qca:devel/qca-legacy

PR:		244682
Exp-run by:	antoine
Reviewed by:	arrowd
Differential Revision:	https://reviews.freebsd.org/D24042
62aa63f89c
Tobias C. Berner (tcberner) · 2.21.1_1
devel/grantlee: update to 5.2.0

- While here, remove the patches to install the headers in a prefix;
  there currently is only one grantlee version in the tree, so no
  reason to make life harder for ourselves.
2e9af81b9a
Tobias C. Berner (tcberner) · 2.21.1
finance/skrooge: update to 2.21.1
2ac5cd70cb
Adriaan de Groot (adridg) · 2.20.0_1
Update KDE Frameworks to latest upstream release, 5.61

Release notes at
	https://kde.org/announcements/kde-frameworks-5.61.0.php

Thanks to
	antoine@ for the exp-runs,
	tcberner@ for most of the prep-work,
	the Gentoo community for cherry-picking patches

There are a bunch of changes in (implicitly included) headers, which
broke existing KDE Applications builds; that's why there are a whole
bunch of "patch-gentoo-kf5-5.61-headers" patches (taken from Gentoo
packaging). Those will go away with the next KDE Applications release,

PR:		239777
Submitted by:	tcberner
0a7455c83c
Gerald Pfeifer (gerald) · 2.20.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Tobias C. Berner (tcberner) · 2.20.0
finance/skrooge: update to 2.20.0
fa55777ef4
Tobias C. Berner (tcberner) · 2.19.1
finance/skrooge: update to 2.19.1
8d5b2e6d19
Adriaan de Groot (adridg) · 2.19.0
Update finance/skrooge to latest upstream, 2.19.0

https://skrooge.org/node/236

Looks like lots of QIF import issues fixed.
28cd11a2dc
Tobias C. Berner (tcberner) · 2.18.0_1
devel/qca: remove flavors (Qt4 deprecation)
e7527e8c59
Tobias C. Berner (tcberner) · 2.18.0
finance/skrooge: update to 2.18.0
069763fa0a
Tijl Coosemans (tijl) · 2.17.0_1
Fix Qt5 symbol version scripts to put the catch-all clause first.  When a symbol matches multiple clauses the last one takes precedence.  If the catch-all is last it captures everything.  In the case of Qt5 libraries this caused all symbols to have a Qt_5 label while some should have Qt_5_PRIVATE_API.  This only affects lld because GNU ld always gives the catch-all lowest priority.

Older versions of Qt5Webengine exported some memory allocation symbols from
the bundled Chromium.  Version 5.9 stopped exporting these [1] but the
symbols were kept as weak wrappers for the standard allocation functions to
maintain binary compatibility. [2][3]  The problem is that the call to the
standard function in these weak wrappers is only resolved to the standard
function if there's a call to this standard function in other parts of
Qt5Webengine, because only then is there a non-weak symbol that takes
precedence over the weak one.  If there's no such non-weak symbol the call
in the weak wrapper resolves to the weak wrapper itself creating an infinite
call loop that overflows the stack and causes a crash.  Some of the
allocation functions are variants of C++ new and delete and it probably
depends on the compiler whether these variants are used in other parts of
Qt5Webengine.

Remove the weak wrappers (make them Linux specific).  This isn't binary
compatible but we are already breaking that with the changes to the symbol
versions.

[1] https://github.com/qt/qtwebengine/commit/5c2cbfccf9aafb547b0b30914c4056abd25942a4
[2] https://github.com/qt/qtwebengine/commit/2ed5054e3a800fa97c2c9e920ba1e6ea4b6ef2a5
[3] https://github.com/qt/qtwebengine/commit/009f5ebb4bd6e50188671e0815a5dae6afe39db5

Bump all ports that depend on Qt5.

PR:		234070
Exp-run by:	antoine
Approved by:	kde (adridg)
1bf487d3e7
Tobias C. Berner (tcberner) · 2.17.0
finance/skrooge: update to 2.17.0

The Skrooge Team announces the release 2.17.0 version of its popular Personal
Finances Manager based on KDE Frameworks.

Changelog [1]
    * Correction bug 400695: Designer plugins get installed as versioned libraries
    * Correction bug 400724: Import of Quicken 2012 .QIF file failed due to tags
    * Correction bug 402031: ERR-4/ERR-5 opening relative path to .skg from command line, then zombie Skrooge
    * Correction: Transfer created with value at 0. Regression due to 399672. (see https://forum.kde.org/viewtopic.php?f=210&t=155713&p=406978)
    * Correction: QIF import with transfer on split (see https://forum.kde.org/viewtopic.php?f=210&t=155614)
    * Correction: Add delay (300 ms) on text filter
    * Correction: "Search & Process" create a duplicate a duplicated category in some cases
    * Correction: Compliance with SQLCipher 4
    * Correction: Close SQL database in mmb import
    * Feature: Like on transfer, the ratio is requested when creating a share operation (see https://forum.kde.org/viewtopic.php?f=210&t=155605&p=406979)
    * Feature: Progress bar in taskbar
    * Feature: Support only QT >= 5.7.0

[1] https://skrooge.org/node/234
d6fbf6e1de
Tobias C. Berner (tcberner) · 2.16.2_1
Change cmake default behaviour to outsource.

Ports that build out of source now simply can use "USES=cmake"
instead of "USES=cmake:outsource". Ports that fail to build
out of source now need to specify "USES=cmake:insource".

I tried to only set insource where explictely needed.

PR:		232038
Exp-run by:	antoine
707c6bf295
Gerald Pfeifer (gerald) · 2.16.2_1
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Tobias C. Berner (tcberner) · 2.16.2
finance/skrooge: update to 2.16.2
bbb48bd30d
Tobias C. Berner (tcberner) · 2.15.0_1
Merge lang/qt5-qml and x11-toolkits/qt5-quick into x11-toolkits/qt5-declarative

- There was no obvious reason to split these ports, and it makes
  porting simpler; the set of ports using either mostly coincided.

Exp-run by:	antoine
PR:		223687
PR:		232751
89d1bb9ab0
Adriaan de Groot (adridg) · 2.15.0
Update finance/skrooge to 2.15.0

- changelog at https://skrooge.org/node/232 (minor bugfixes)
 - massage the port description and comment a little, this is
   *by* KDE, but runs everywhere (so it's not *for* KDE)

Reported by:	portscout
d28b582aed
Gerald Pfeifer (gerald) · 2.14.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6