CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

graphics/digikam8.8.0_8

KDE digital photo management application

Maintainer
kde@FreeBSD.org
Packages
digikam 8.8.0_8
Upstream
Higher version available: 9.1.0
CPE
none, CVEs only via VuXML
WWW
https://www.digikam.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (178)

Stefan Eßer (se) · 7.8.0_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 7.8.0_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 7.8.0_1
graphics/opencv: bump consumers after e21578d954550998435c5d6d532e2d5a67398bfe

This was missed in the upgrade of graphics/opencv.

Reported by:	VVD
a49cb0f435
Dima Panov (fluffy) · 7.8.0
graphics/digikam: update to 7.8.0 release (+)

Changelog:	https://invent.kde.org/graphics/digikam/-/blob/v7.8.0/NEWS
b2ce73d22b
Dima Panov (fluffy) · 7.7.0_1
*/*: bump all consumers after recent boost upgrade
4cf39decb3
Dima Panov (fluffy) · 7.7.0
graphics/digikam: update to 7.7.0 release (+)

Add libheif dependency

Note: deprecated vkontakte and yandexfotki plugins will be completely removed with next release

Reported by:	portscout
7b75e29e8f
Dima Panov (fluffy) · 7.6.0_5
devel/boost-all: bump all library consumers after boost upgrade

PR:	246106
b082b3d13e
Tobias C. Berner (tcberner) · 7.6.0_4
graphics/digikam: fix build against current KDE Gear components

In the recent update [1] of KDE Gear a header file in net/akonadi-contacts
was moved from Akonadi/Contact/ContactSearchJob to
AkonadiContact/Akonadi/ContactSearchJob.

[1] e250aeb4a1399664907d0df0605a3577ba671609

Reported by:	fluffy
7db96fb2da
Po-Chuan Hsieh (sunpoet) · 7.6.0_4
graphics/jasper: Bump PORTREVISION of dependent ports for shlib change after cdcedd316da6d7c8509c394474160c683489a3ae
735ea04b67
Charlie Li (vishwin) · 7.6.0_3
textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
d63665f7cd
Adriaan de Groot (adridg) · 7.6.0_2
graphics/digikam: doesn't actually need a MySQL server to build

None of the code actually includes anything from the server;
it goes through QtSQL, and the config-option is enough
to convince Digikam to include support.

PR:		261995
8fe8f93edb
Matthias Fechner (mfechner) · 7.6.0_1
textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
247c7db751
Dima Panov (fluffy) · 7.6.0
graphics/digikam: update to 7.6.0 release (+)

Release notes:	https://www.digikam.org/news/2022-03-05-7.6.0_release_announcement/
With hat:	kde
Sponsored by:	Netzkommune GmbH
0ed5fe2cf1
Rene Ladan (rene) · 7.5.0
cleanup: remove transitive py27 deprecation (www/qt5-webengine)
48d98ef918
Adriaan de Groot (adridg) · 7.5.0
graphics/digikam: update to 7.5.0, latest upstream

Release announcement is at
    https://www.digikam.org/news/2022-01-16-7.5.0_release_announcement/
1a7cb85fda
Adriaan de Groot (adridg) · 7.4.0_1
graphics/digikam: relax ImageMagick requirements

digiKam builds with both magick:6 and magick:7, so leave it
unspecified (with the new USES=magick) so that the default
gets picked up.
fcbc0a47c7
Adriaan de Groot (adridg) · 7.4.0
graphics/digikam: update to 7.4.0, latest upstream

Release notes are at
	https://www.digikam.org/news/2021-12-17-7.4.0_release_announcement/

DigiKam releases come with dozens of new features, too many
to recount in a commit message. I'll comment that the release
is an extra-annoying one because **this** time, the source
tarball has an upper-case-K which it didn't have previously.
fa254b85af
Tobias C. Berner (tcberner) · 7.3.0
framework: Add new USES 'magick' for graphics/ImageMagick*

A new USES has been added to depend on ImageMagick.

	USES=magick

adds a LIB_DEPENDS on graphics/ImageMagick${IMAGEMAGICK_DEFAULT}.

If a specific version is required, use for example

	USES=magick:6        resp.     USES=magick:7

If only a build, run or test is required, use for example

	USES=magick:build    resp.     USES=magick:6,build,test

If a dependency on the nox11 flavor is required, use for example

	USES=magick:nox11    resp.     USES=magick:7,nox11,run,test

See magick.mk for more details on the available flags.

The tree has been completely converted to make use of this.

Approved by:	bapt
Differential Revision: https://reviews.freebsd.org/D32754
45526ecbee
Tobias C. Berner (tcberner) · 7.3.0
graphics/digikam: add upstreams akonadi-21.12 compability patch

- the update of KDE Gear to 21.12 shuffled header files around
- upstream already fixed this in the added patch

Reported by:    fluffy, krop
15ac6f2cbc
Tobias C. Berner (tcberner) · 7.3.0
graphics/digikam: update to 7.3.0

Full announcement:
	https://www.digikam.org/news/2021-07-12-7.3.0_release_announcement/
e0d4d22e97
Kevin Bowling (kbowling) · 7.1.0_5
graphics/mesa-libs: Bump reverse deps for libglvnd

Per discussion with bapt on helping pkg handle the changing of these
deps and avoiding impossible upgrade senarios.

PR:		246767
Reviewed by:	manu, bapt
Approved by:	x11
Differential Revision:	https://reviews.freebsd.org/D30824
da3162c7c9
Mathieu Arnold (mat) · 7.1.0_4
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 7.1.0_4
Remove # $FreeBSD$ from Makefiles.
305f148f48
Rene Ladan (rene) · 7.1.0_4
Mark ports recursively depending on Python 2.7 for expiration on June 23.

For ports optionally dependending on Python 2.7, just mark those options
as expired. Remove konquerer from the x11/kde-baseapps metaport and bump
its PORTREVISION.

Submitted by:	rene
Reviewed by:	portmgr, adridg, ehaupt, lme, madpilot, pizzamig, se, sunpoet, yuri
Approved by:	portmgr
Differential Revision:	https://reviews.freebsd.org/D28665
b217c7fc9c
Tobias C. Berner (tcberner) · 7.1.0_4
graphics/digikam: fix MEDIAPLAYER option

PR:		253719
Submitted by:	Gregor Kopf <freebsd@gregorkopf.de>
6dd03553fd
Tobias C. Berner (tcberner) · 7.1.0_3
graphics/opencv: update to 4.5.1 -- and make port more easily maintainable

This is a major upgrade from 3.x to 4.x.

Changelog from versions 3.4.1--4.5.1 can be found here:
    https://github.com/opencv/opencv/wiki/ChangeLog

Note: this has explicitely not been added as a new graphics/opencv4 port, but replaces the
      previous graphics/opencv[3] port. Again, to improve maintainability by not giving ports
      the option to pick the "wrong one" - this leads however to some abandoned ports being
      broken.

The port has been greatly simplified:
    * graphics/opencv-core which existed to enable ffmpeg to depend on opencv, and vice versa
      has been removed. ffmpeg no longer can depend on opencv.
    * graphics/py-opencv has been integrated into graphics/opencv, the default versions python
      bindings will be built unless the PYTHON option is explicitely turned off.
    * graphics/opencv-java has been integrated into graphics/opencv -- it is off by default,
      but can be enabled by toggling the JAVA option -- there are no consumers in the tree,
      so that option might go away in the future.
    * All the previous options have been removed and replaced by a (hopefully) sane set of
      dependencies that make the port and package most usable for the majority of consumers.
      - Please let me know if you think there are better defaults (i.e. anything that is missing,
        or something that should not be dependet on).
      - If you think something should be added or removed, please open a bug report.
      - If you think something should be added as an optional dependency, please open a
        bug report (with a good reason [tm]).

The depending ports have been updated to work against opencv4, or marked broken.
    * Ports broken:
      - graphics/rubygem-objectdetect: OpenCV4 no longer ships opencv-1.0 API
      - graphics/p5-Image-ObjectDetect: OpenCV4 no longer ships opencv-1.0 API
      - graphics/gimp-gmic-plugin: OpenCV4 no longer ships opencv-1.0 API
    * Backports:
      - misc/visp: https://github.com/lagadic/visp/commit/dfa7e4bd47c24cd2e631477e6afb18806733ff8a
      - multimedia/zart: https://github.com/c-koi/zart/commit/6ca1964690afbbc78627d7c868a692401043a584,
                         https://github.com/c-koi/zart/commit/d3a2931b1a07ec0322211f253468000363c4b6cb
    * Others:
      - misc/actiona: switch to pkgconfig 'opencv4'
      - multimedia/libav: drop opencv support
      - misc/darknet: already failed to build prior to the upgrade
      - math/saga: remove patching added to work against opencv3
7a09f7fbc2
Thierry Thomas (thierry) · 7.1.0_2
- Upgrade math/eigen3 to 3.3.8;

- Add some dependencies which might be detected by Find_Package but not registered;

- Bump PORTREVISION of consumers.

PR:		250833
Submitted by:	/me
Approved by:	tcberner@ (KDE / maintainer) + exp-run
0b5864f66c
Mikhail Teterin (mi) · 7.1.0_1
For well over 10 years portmgr@ have been promising to remove the ridiculous need to bump PORTREVISION of depending ports, whenever a dependency is updated, but here we still are...

Bump PORTREVISION for the 9 users of x265 now that it has been
upgraded from 3.2 to 3.4.
d723ebaa17
Tobias C. Berner (tcberner) · 7.1.0
graphics/digikam: update to 7.1.0

- remove obsolete dependency on astro/libkgeomap
ab0932c00c
Dima Panov (fluffy) · 7.0.0
graphics/digikam: update to 7.0.0 release

Relnotes:	https://www.digikam.org/news/
515e79eeb1
Tobias C. Berner (tcberner) · 6.4.0_3
graphics/digikam: prepare for Qt5-5.15
493d203da3
Alexey Dokuchaev (danfe) · 6.4.0_3
Chase shlib version bump of `graphics/lensfun' (r524150).
dd4f21631c
Baptiste Daroussin (bapt) · 6.4.0_2
Update jasper to 2.0.16

This is needed to be able to update gegl to latest version.
Bump revision of all consumer as the ABI is not 100% backward compatible.
Provide a patch for graphics/devil to properly build with latest jasper.
While here add a missing USES=xorg to graphics/devil
c5fe34636c
Jan Beich (jbeich) · 6.4.0_1
devel/boost-*: update to 1.72.0

Changes:	http://www.boost.org/users/history/version_1_72_0.html
PR:		241449
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D22136
701aa3bcf8
Dima Panov (fluffy) · 6.4.0
On behalf of the KDE team proudly to announce Digikam 6.4.0 release!

NEW FEATURES:
General    : new RawImport plugin interface to delegate Raw decoding function to extra engine with ImageEditor.
General    : new DImg plugin interface to externalize image loaders from core implementation.
General    : new HEIC image loader compatible with media generated by Apple devices.
Import     : add new option to convert on the fly to HEIC lossless format while downloading.
ImageEditor: add new setting from setup dialog to select right Raw Import plugin.
ImageEditor: add new clone tool to fix artifacts on image.
ImageEditor: add new tool to import RAW image using UFRaw.
ImageEditor: add new tool to import RAW image using RawTherapee.
ImageEditor: add new tool to import RAW image using DarkTable.
BQM        : add new tool to convert to HEIC format.
0a70b012db
Tobias Kortkamp (tobik) · 6.3.0_2
Move remaining USE_MYSQL, WANT_MYSQL_VER to USES=mysql
581cac9416
Niclas Zeising (zeising) · 6.3.0_2
Add USES=xorg USES=gl, ports categories g

Add USES=xorg and USES=gl to ports in categories starting with 'g'.
While here, try to sprinkle other USES (mostly gnome and sdl) as needed.
be6c15b5c6
Tobias C. Berner (tcberner) · 6.3.0_2
Follow-up to r514669: bump consumers of moved ports

In r514669 the two ports were moved in the following way:
- net/kcontacts -> net/kf5-kcontacts
- net/kcalcore -> net/kf5-kcalendarcore

Force rebuild of their consumers.
a17d48c4c0
Adriaan de Groot (adridg) · 6.3.0_1
Try to fix runtime graphics/digikam.

With this patch applied to git master, digikam starts and seems
to work. It still crashes on exit, though. That's an improvement
on crashes-before-startup.

The problem is described in the patch and in the PR: digikam
bundles all kinds of stuff (which packagers have been complaining
about for years) which breaks -- in this case, bundling internals
of Exiv2.

If this works (leaving the PR open) it will need an MFH.

PR:		240466
a4b0e50847
Tobias C. Berner (tcberner) · 6.3.0
graphics/digikam: update to 6.3.0
fd6a515b4b
Adriaan de Groot (adridg) · 6.2.0
Update graphics/digikam to latest upstream release, 6.2.0

This version (a) builds with current KDE Frameworks (b) doesn't
need kipiplugins, because upstream moved away from them and
we just moved/renamed them anyway.

PR:		239950
Reported by:	pkg-fallout. Robert Cina
dfd409f182
Jan Beich (jbeich) · 6.0.0_6
devel/boost-*: update to 1.71.0

Changes:	http://www.boost.org/users/history/version_1_71_0.html
PR:		238827
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D20774
befa71e0f3
Jan Beich (jbeich) · 6.0.0_5
multimedia/ffmpeg: update to 4.2

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.2:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/
325aed58cb
Gerald Pfeifer (gerald) · 6.0.0_4
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Kai Knoblich (kai) · 6.0.0_3
graphics/libgphoto2: Update to 2.5.22, graphics/gphoto2: Update to 2.5.20

* Bump PORTREVISION of ports depending on them.

Also while I'm here:
* Add "gnome" to USES if the XML option is enabled to avoid warnings about
  using USE_GNOME alone.
* Pet portlint

Notable changes since 2.5.16 (graphics/libgphoto2) [1]:

* Added new USB Ids for various camera types
* Updated translations
* Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS
  currently)

Changes since 2.5.15 (graphics/gphoto2) [2]:

* Maximum number in file ranges bumped from 16384 to 65536
* Add shell commands to match commandline: summary, storage-info,
  trigger-capture
* Fixed a fd leak
* Updated translations
* Handle GP_EVENT_FILE_CHANGED event

https://github.com/gphoto/libgphoto2/blob/libgphoto2-2_5_22-release/NEWS
https://github.com/gphoto/gphoto2/blob/gphoto2-2_5_20-release/NEWS

PR:		235817 [1], 235818 [2]
Submitted by:	Darren Mulligan <fixer@bsdmail.com>
Approved by:	woodsb02 (maintainer timeout)
46d6333b29
Jan Beich (jbeich) · 6.0.0_2
devel/boost-*: update to 1.70.0

Changes:	http://www.boost.org/users/history/version_1_70_0.html
PR:		235956
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19303
9b21a3a084
Tobias C. Berner (tcberner) · 6.0.0_1
graphics/exiv2: update to 0.27

Changelog:
	http://www.exiv2.org/changelog.html

- All depending ports have been bumped.
- graphics/py-exiv2 has been marked broken; use graphics/gexiv2 for python bindings

Exp-run by:	antoine
PR:		235943
PR:		234830
fda98ed059
Tobias C. Berner (tcberner) · 6.0.0
graphics/digikam: update to 6.0.0

Announcement: https://www.digikam.org/news/2019-02-10-6.0.0_release_announcement/
20042ce290
Tijl Coosemans (tijl) · 5.9.0_8
Fix Qt5 symbol version scripts to put the catch-all clause first.  When a symbol matches multiple clauses the last one takes precedence.  If the catch-all is last it captures everything.  In the case of Qt5 libraries this caused all symbols to have a Qt_5 label while some should have Qt_5_PRIVATE_API.  This only affects lld because GNU ld always gives the catch-all lowest priority.

Older versions of Qt5Webengine exported some memory allocation symbols from
the bundled Chromium.  Version 5.9 stopped exporting these [1] but the
symbols were kept as weak wrappers for the standard allocation functions to
maintain binary compatibility. [2][3]  The problem is that the call to the
standard function in these weak wrappers is only resolved to the standard
function if there's a call to this standard function in other parts of
Qt5Webengine, because only then is there a non-weak symbol that takes
precedence over the weak one.  If there's no such non-weak symbol the call
in the weak wrapper resolves to the weak wrapper itself creating an infinite
call loop that overflows the stack and causes a crash.  Some of the
allocation functions are variants of C++ new and delete and it probably
depends on the compiler whether these variants are used in other parts of
Qt5Webengine.

Remove the weak wrappers (make them Linux specific).  This isn't binary
compatible but we are already breaking that with the changes to the symbol
versions.

[1] https://github.com/qt/qtwebengine/commit/5c2cbfccf9aafb547b0b30914c4056abd25942a4
[2] https://github.com/qt/qtwebengine/commit/2ed5054e3a800fa97c2c9e920ba1e6ea4b6ef2a5
[3] https://github.com/qt/qtwebengine/commit/009f5ebb4bd6e50188671e0815a5dae6afe39db5

Bump all ports that depend on Qt5.

PR:		234070
Exp-run by:	antoine
Approved by:	kde (adridg)
1bf487d3e7
Tobias C. Berner (tcberner) · 5.9.0_7
Update math/eigen3 to 3.3.7

- http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.3.6
- http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.3.7
8a4ab05d84