Unspecified vulnerability in the chtbl_lookup function in hash.c for WzdFTPD 8.0 and earlier allows remote attackers to cause a denial of service via a crafted FTP comma…
VuXML only (0) · listed, port not fixed yet
None. pkg audit reports nothing for this version.
Fixed (1)
Show 1 fixed
VuXML entries whose affected range this version has left.
devel/libtextstyle, devel/gettext*: Update to 0.26
Recent versions of gettext no longer install m4 files in
PREFIX/share/aclocal. They have to be installed in the work
directory by autopoint for aclocal to find them.
Patch devel/autoconf so autoreconf runs autopoint when gettext related
macros are used in configure.ac (e.g. AM_ICONV). Previously it only
ran autopoint when AM_GNU_GETTEXT_(REQUIRE_)VERSION was used.
The following ports now require autopoint (i.e. USES=gettext-tools):
benchmarks/sysbench, devel/libhtp, editors/fxite, filesystems/rar2fs,
graphics/gd, net/ucarp, news/fidogate, sysutils/cdrdao
Other fixes:
emulators/mednafen, misc/lifelines: Use older version of gettext macros.
ftp/axel: Patch Makefile.am and configure.ac to get gettext working and
add NLS option.
ftp/wzdftpd: Use autoreconf 2.72.
mail/sympa: Remove hack from configure.ac.
multimedia/dvdauthor: Use ports autoreconf.
net/asterisk-chan_sccp: Drop autoreconf and gettext-tools dependencies.
security/pam_pkcs11: Patch configure.ac so autoreconf can find the
custom directory with m4 files.
sysutils/grub2-efi, sysutils/grub2-pcbsd: Add patch to run autoreconf
with -f flag so it updates all files.
www/wget2: Patch configure.ac to what autopoint expects.
PR: 287167
Exp-run by: antoine
*/*: Refactor with IGNORE_WITH_MYSQL
- There are multiple ports which has MYSQL options and are non-DEFAULT.
Most of the time committers actually forget to check with the OPTION
enabled and in some cases they are BROKEN with newr versions of mysql.
So test with different versions of mysql and mark IGNOPRE_WITH_MYSQL
appropriately. Due to the EOL of 5.7 this has not been checked.
- Unbreak sysutils/cfengine* with MySQL 8.0 and later
- The primary purpose of running this check is having statistics of the
MySQL usability over MariaDB to explore the future possibility of
shifting to MariaDB as the default as major ports upstream have moved
their codebase to support MariaDB over MySQL.
- The following actions will also be taken after the sunset of MySQL 5.7
If a port is broken on all instances of MySQL/MariaDB:
- If a port has the option of multiple DB backends and MySQL is the
default then the DEFAULT will be changed to PGSQL/SQLITE before
2024Q1. And the OPTION will be removed before 2024Q2. If a
MAINTAINER is aware about such cases and want to prefer PGSQL over
SQLITE or vice versa please do so at your own accord. Otherwise
PGSQL will be preferred over SQLITE.
- If a port has the option of multiple DB backends and MySQL is not
the default then the the OPTION will be removed before 2024Q1.
Approved by: portmgr (blanket)
ftp/wzdftpd: fix build with LLVM 15
Seems like the compiler got a whole lot stricter with this release.
The biggest fix was changing the thread ID from unsigned long to
pthread_t, which will probably break compilation on Win32.
While we are at it, replace static uses of REINPLACE_CMD with patch
files as per policy. This change is responsible for most of the
newly added patches.
The wzdftpd build scripts want to install plugins into ${PREFIX}/share
when they belong into ${PREFIX}/lib. Instead of patching this in each
Makefile.am, set --datadir=${PREFIX}/lib and work around the one file
for which this is wrong.
Approved by: eduardo (mentor)
Differential Revision: https://reviews.freebsd.org/D38523
*/*: Update fuz@fuz.su to fuz@FreeBSD.org
www/writefreely had a stray duplicate MAINTAINER block
from an earlier botched commit. I did intentionally not
touch the entry in UPDATING.
Reviewed by: eduardo, flo
Differential Revision: https://reviews.freebsd.org/D38435
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
devel/autoconf: update to 2.71
- Copy devel/autoconf to devel/autoconf2.69.
- Update devel/autoconf to 2.71.
- Allow ports to use 2.69 with USES=autoreconf:2.69.
PR: 258046
Exp-run by: antoine
ftp/wzdftpd: the port had been further improved (+)
- Unbreak the build against OpenSSL (untested)
- Do not install useless static libraries
- Build with PAM support (and enable by default)
- Annotate installed sample configuration file as @sample
- Minor textual nits in rc script and port description
ftp/wzdftpd: resurrect^Wreadd previously deleted port
Despite that original author stopped working on the project, it has
its userbase and remains fairly popular and demanded, known for its
versatility and capabilities, so:
- Bring back from the attic and fix the build with -fno-common
- Mark OPENSSL option as BROKEN for the time being
- Expand the default options a bit to get more useful package
- Tighten one regex (escape the dot) and kill stray backslash
- Fix a typo and adjust WWW line in the port description text
- Submitter assumes maintainership of the port (thanks!)
PR: 256840
Submitted by: Robert Clausecker
Remove expired ports:
2021-04-01 ftp/wzdftpd: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 astro/roadmap: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 games/cosmo: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 games/bomberinstinct: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 games/drm: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 games/bygfoot: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 games/cre: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 irc/hybserv: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 irc/xaric: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 mail/elmo: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 misc/cave: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 security/bugs: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 security/dmitry: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 security/doorman: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 shells/esh: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 sysutils/cpu: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 textproc/libcrm114: No known users, dead upstream
2021-04-01 x11/wmmatrix: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 x11/wmxss: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 x11/tycoon: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 x11/xgrab: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 x11/xbanner: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 x11/bricons: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 x11/xmon: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 games/cavezofphear: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 astro/saoimage: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 audio/ksmp3play: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 audio/jamin: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 audio/musicbox-tag-editor: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 audio/nspmod: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 audio/cdplay: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 audio/gimmix: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 audio/ghostess: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 audio/wmrecord: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 audio/toolame: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 audio/shout: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 biology/grappa: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 biology/phylip: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 biology/lagan: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 cad/varkon: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 cad/transcalc: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 comms/seyon: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 comms/efax: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 converters/vda2fbd: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 converters/shftool: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 devel/openzz: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 devel/sourcenav: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 devel/gb: Unmaintained and dead upstream
2021-04-01 dns/checkdns: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 dns/inadyn-mt: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 editors/gate: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 editors/thoteditor: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 emulators/cinc: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 emulators/e-uae: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 emulators/dtcyber: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 ftp/jftpgw: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-01 ftp/pureadmin: Unmaintained and dead upstream, does not build with -fno-common (llvm 11)
2021-04-02 textproc/hs-pandoc-citeproc: Integrated into textproc/hs-pandoc
Extend expiration of ports broken with -fno-common
Extend the expiration of unmaintained leaf ports that are broken with
-fno-common and previously had a short expiration date. The new date is set
to 2021-04-01, meaning the ports will be in the 2021Q2 branch, giving people
until 2021-06-30 (10 months from now) to fix issues.
Improve the wording of the deprecation message, mentioning both llvm 11 and
-fno-common.
Bump portrevision to force reinstall. This way the warning message about
deprecation will be displayed to users installing or reinstalling the
software.
MFH: 2020Q3 (maybe)
Remove USE_SQLITE from bsd.databases.mk, replaced by USES=sqlite.
While there replace USE_SQLITE=x by USES=sqlite:x.
PR: 208971
Submitted by: mat
Exp-run by: antoine
With hat: portmgr
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D5951
- Update security/gnutls to 3.4.10. - Rename the LIBDANE option DANE because that's the name of the protocol supported by libgnutls-dane and gnutls-cli. Also clarify the option description. - Add an IDN option. - libgnutls-openssl has been removed in 3.4. Some ports used this library in their LIB_DEPENDS but no port actually required it. - Some old API functions have been removed. Ports t
net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.
www/hydra: Mark BROKEN. This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.
PR: 207768
Exp-run by: antoine
Approved by: portmgr (antoine)
By default libtool replaces -export-symbols <file> with -retain-symbols-file <file> on ELF systems, but this doesn't really do what -export-symbols is meant to do. On GNU ELF systems it converts <file> to a simple version script first and then uses -version-script instead of -retain-symbols-file. Let USES=libtool patch libtool scripts to do this on all systems with GNU ld(1).
Bump PORTREVISION on all ports where the build log contains -export-symbols.
audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions. Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to. Fix a number of other issues in the same
Makefile.am and clean up the port Makefile.
japanese/scim-honoka: Tries to hide all symbols that start with an
underscore, but because this library is written in C++ all symbols start
with _Z so it ends up hiding everything. Just don't hide anything at all
like the textproc/scim configure script does.
multimedia/schroedinger: Apply an upstream patch.
textproc/scim-input-pad: Same as japanese/scim-honoka.
PR: 201922
Approved by: portmgr (antoine)
Exp-run by: antoine
Split devel/gettext in devel/gettext-runtime and devel/gettext-tools. The first contains runtime libraries such as libintl and the latter contains developer tools such as msgfmt. Ports that use gettext will usually need a LIB_DEPENDS on gettext-runtime and a BUILD_DEPENDS on gettext-tools.
USES=gettext-runtime can be used to set a LIB/BUILD/RUN_DEPENDS on
devel/gettext-runtime and USES=gettext-tools can be used to set a
BUILD/RUN_DEPENDS on devel/gettext-tools. USES=gettext is now the same
as "USES=gettext-runtime gettext-tools" meaning a LIB_DEPENDS on
devel/gettext-runtime and a BUILD_DEPENDS on devel/gettext-tools.
Update gettext to 0.19.3.
Remove :oldver from converters/libiconv and devel/gettext-runtime. Leave
symlinks with the old library versions to avoid the need to bump
PORTREVISION on a large number of dependent ports. When most of the
dependent ports have had normal version updates, PORTREVISION can be
bumped on the remaining ones (low number) and the links can be removed.
Fix some ports that installed files in lib/locale instead of share/locale.
PR: 194038
Reviewed by: bapt
Exp-run: antoine
Approved by: portmgr (antoine)
Change the way Perl modules are installed, update the default Perl to 5.18.
Before, we had:
site_perl : lib/perl5/site_perl/5.18
site_perl/perl_arch : lib/perl5/site_perl/5.18/mach
perl_man3 : lib/perl5/5.18/man/man3
Now we have:
site_perl : lib/perl5/site_perl
site_arch : lib/perl5/site_perl/mach/5.18
perl_man3 : lib/perl5/site_perl/man/man3
Modules without any .so will be installed at the same place regardless of the
Perl version, minimizing the upgrade when the major Perl version is changed.
It uses a version dependent directory for modules with compiled bits.
As PERL_ARCH is no longer needed in plists, it has been removed from
PLIST_SUB.
The USE_PERL5=fixpacklist keyword is removed, the .packlist file is now
always removed, as is perllocal.pod.
The old site_perl and site_perl/arch directories have been kept in the
default Perl @INC for all Perl ports, and will be phased out as these old
Perl versions expire.
PR: 194969
Differential Revision: https://reviews.freebsd.org/D1019
Exp-run by: antoine
Reviewed by: perl@
Approved by: portmgr
Bump more ports that depend on libsqlite3.so: - ports that set USE_SQLITE with the *_USE option helper - ports that depend on libsqlite3 indirectly as reported by pkg rquery
Approved by: portmgr (implicit)
Remove all the bootstrap files (.bs) from the plists.
Starting with perl 5.20, they're not installed any more if empty,
and on FreeBSD, they're (always ?) empty.
PR: 190681
Submitted by: mat
Exp-Run by: antoine
Sponsored by: Absolight
Introduce ICONV_CONFIGURE_ARG variable defined at Uses/iconv.mk. It's value is "--with-libiconv-prefix=/usr/local" for systems before 100043 with ports libiconv and to use at systems post 100043 with base iconv it's value is "" (NULL).
Co-authors: bapt, madpilot and bsam (me)