graphics/jasper 4.2.9

- drop maintainership

- make option UUID default

- fix double-free in in jas_iccattrval_destroy()
Obtained from:	RedHat
Security: CVE-2014-8137
Security: https://bugzilla.redhat.com/show_bug.cgi?id=1173157

- fix heap overflow in jp2_decode()
Obtained from:	RedHat
Security: CVE-2014-8138
Security: https://bugzilla.redhat.com/show_bug.cgi?id=1173162

- dec->numtiles off-by-one check in jpc_dec_process_sot()
Obtained from:	RedHat, Fedora
Security: CVE-2014-8157
Security: https://bugzilla.redhat.com/show_bug.cgi?id=1179282

- multiple stack-based buffer overflows
Obtained from:	RedHat, Fedora
Security: CVE-2014-8158
Security: https://bugzilla.redhat.com/show_bug.cgi?id=1179282

- fix Heap overflows in libjasper
Obtained from:	RedHat
Security: CVE-2014-9029
Security: https://bugzilla.redhat.com/show_bug.cgi?id=1167537

- fix Use-after-free (and double-free)
Security: CVE-2015-5221
Security: http://www.openwall.com/lists/oss-security/2015/08/20/4
PR:		203504

- patch (rows_ NULL check)
Obtained from:	RedHat
Security: CVE-2016-2089
Security: https://bugzilla.redhat.com/show_bug.cgi?id=1302636

- cleanup

- Security patch for CVE-2015-5203 PR:		202697 Submitted by:	wxl@bikefriday.com Reviewed y: Security:	CVE-2015-5203

Convert to USES=jpeg

MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight

Remove dead RINGSERVER

Cleanup plist

- fix order in USES

Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS.

Convert to USES=libtool.

The FreeBSD x11@ and graphics team proudly presents a zeising, kwm production, with help from dumbbell, bdrewery:

NEW XORG ON FREEBSD 9-STABLE AND 10-STABLE

This update switches over to use the new xorg stack by default on FreeBSD 9
and 10 stable, on osversions where vt(9) is available.
It is still possible to use the old stack by specifying WITHOUT_NEW_XORG in
/etc/make.conf .
FreeBSD 8-STABLE and released versions of FreeBSD still use
the old version.
A package repository with binary packages for new xorg will
be available soon.

This patch also contains updates of libxcb and related ports, pixman, as well
as some drivers and utilities.

Bump portrevisions for xf86-* ports, as well as virtualbox-ose-additions due
to xserver version change.

Apart from these updates, the way shared libraries are handled has been
changed for all xorg ports, as well as libxml2 and freetype, which means
ltverhack is gone and as a consequence shared libraries have been bumped.
The plan is that this change will make library bumps less likely in the
future.
All affected ports have had their portrevisions bumped as a consequence of
this.

Fix some issues where WITH_NEW_XORG weren't detected properly on CURRENT.

Update instructions, hardware support, and more notes can be found on
https://wiki.freebsd.org/Graphics

Thanks to:	all testers, bdrewery and the FreeBSD x11@ team
exp-run by:	bdrewery [1]
PR:		ports/187602 [1]
Approved by:	portmgr (bdrewery), core (jhb)

Convert g* to USES=zip

- update LIB_DEPENDS

- cleanup manpage handling

- use STAGEDIR - drop NO_INSTALL_MANPAGES

- fix misplaced NO_STAGE in slaveports and ifdefs

Add NO_STAGE all over the place in preparation for the staging support (cat: graphics)

- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)

- Security fix Security: CVE-2011-4517 execute arbitrary code on decodes images Submitted by:   naddy (Christian Weisgerber) Obtained from:  Fedora Feature safe: yes

graphics/jasper - Security fixes   Multiple integer overflows   Buffer overflow in the jas_stream_printf   execute arbitrary code on decodes images Security: CVE-2008-3520 Security: CVE-2008-3522 Security: CVE-2011-4516 Security: CVE-2011-4517 PR:             163718 Obtained from:  Fedora Feature safe: yes

- Fix all cases of 'No newline at end of file' in ports tree

Approved by: portmgr (bapt)

- cleanup header

Switch from libglut to freeglut and retire libglut. Libglut hasn't been developed in years and has been dropped from the MESA 8.0 distribution. Freeglut is a rewrite of glut and is actively developed and is used by many linux distributions instead of libglut.

Bump all ports that directly depend on libglut because of the shlib version
change.

There are some extra items in this patch.

*) Because freeglut doesn't have the same dependancies as libglut, some ports
	need extra dependencies added to USE_XORG to make them build.
*) Mark graphics/f90gl broken, f90gl depends on a header that is only shipped
	with libglut.
*) Remove option for libglut/freeglut selection in games/cake, only freeglut
	remains now.
*) While here fix a png related build issue games/vegastrike.

Thanks to miwi for running the exp-run.

Approved by:	portmgr (miwi)

Collaboration with:	zeising@
Obtained from:	xorg-dev staging area.

- remove OPTIONS_DEFAULT Submitted by:	sunpoet

- use OPTIONS_DEFINE

- fix assertion on some JPEG2000 pictures encoded in (RGBA) PR:		162812 Sumbitted by:	Sebastian Klemke Obtained from:	Debian, Mathew Eis Feature safe:	yes

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav

Remove USE_GNOME=gnometarget from ports. It has been a empty keyword since mid 2008.

PR:		ports/159624
Submitted by:	Ruslan Mahmatkhanov <cvs-src@yandex.ru>

-remove MD5

Sync to new bsd.autotools.mk

LICENSE MIT

- new option WITH_UUID PR:		146290 Submitted by:	Sunpoet Po-Chuan Hsieh

- update to jpeg-8

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22. -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:	marcus and kwm
Pointyhat-exp:	a few times by pav
Tested by:	pgollucci, "Romain Tartière" <romain@blogreen.org>, and
		a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:	marcus
Approved by:	portmgr

- update to jpeg7 Tested by:	pav on pointyhat

- take maintainership - cleanup

- Mark MAKE_JOBS_SAFE for SMP compilation

- Update X.org ports to 7.4+ (few ports are more recent than the katamari). - Bump PORTREVISION for all ports depending on libglut since the shlib version number went from 4 to 3. - Bump PORTREVISION for all ports depending on libXaw as libXaw.so.8 isn't installed anymore. - Couple of ports fixes (mostly missing xorg components added to USE_XORG).

- Disable parallel build which broke jasper on two of my boxes   (7/i386/UP and 7/amd64/SMP) - Note that parallel builds still require much testing (and   research)

Add a patch, which disables a call to atexit() to register libjasper's own clean-up routine (jas_cleanup). The call would be of limited use anyway, as freeing memory at exit is useful only for tracking down memory leaks. Removing the atexit call eliminates crashes in ImageMagick and GraphicsMagick, when they are compiled with modules support -- when a library is dlclosed, calling its cleanup routi

When compiling with gcc, declare the routine with ``__attribute__
(destructor)'' as per kan's otherwise obnoxious and inflammatory
e-mails. This will make sure, the routine is invoked, when libjasper
is dlclosed(). The only known apps that do that are ImageMagick and
GraphicsMagick (when built with modules support). They both call
the routine explicitly anyway...

While here enable parallel build of jasper itself, and eliminate the
most threatening warnings.

Bump PORTREVISION.

- Fix OPTIONS handling. When reviewing miwi@'s patch yesterday, I did not   notice this is wrong :(

PR:		ports/114430
Submitted by:	Shane Bell <decept0 at gmail.com>

- Add OPTIONS knobs for opengl

Submitted by:	ports@ ml
Reviewed by:	rafan (thanks)

- Fix pkg-plist

- Add missing file to pkg-plist

PR:		114226
Submitted by:	Stefan Sperling <stsp@stsp.name>

Replace a tmpnam/open combo with mkstemp. A more aggressive change, which uses tmpfile is being evaluated.

- Update to 1.9001

PR:		108869
Submitted by:	Martin Matuska <martin@matuska.org>

Use libtool port instead of included version to avoid objformat a.out botch

- s,INSTALLS_SHLIB,USE_LDCONFIG,g - these include dns/ editors/ emulators/ finance/   games/ graphics/ maintained by ports@

PR:		ports/101916
Submitted by:	Gea-Suan Lin <gslin_AT_gslin dot org>

Conversion to a single libtool environment.

Approved by:	portmgr (kris)