CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

net-im/mastodon4.6.4

GNU Social-compatible microblogging server

Maintainer
saken@codered.rmta.org
Packages
mastodon 4.6.4
Upstream
Higher version available: 4.7.3
CPE
none, CVEs only via VuXML
WWW
https://github.com/mastodon/mastodon/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (91)

Piotr Smyrak (smyru) · 4.6.4
net-im/mastodon: update to 4.6.4 security release

Changelog:
https://github.com/mastodon/mastodon/releases/tag/v4.6.4

Notably, security fixes to address the following issues:

- Denial of Service through insufficient authentication of
  statistics endpoints.
- Personally-identifying information disclosure due to incorrect
  access control validation.
- SSRF Protection Bypass via IPv4-compatible IPv6 Addresses.

PR:		297125
Approved by:	Scott Kenney <sak@codered.rmta.org> (maintainer)
Security:	GHSA-hx34-2pfw-2qfj
Security:	GHSA-7jvv-fhmg-wpfw
Security:	GHSA-vwhj-3g83-v276
0372940c1b
Vladimir Druzenko (vvd) · 4.6.3
net-im/mastodon: Update 4.3.6 => 4.6.3, take maintainership

Changelog:
https://github.com/mastodon/mastodon/blob/v4.6.3/CHANGELOG.md

Improve port:
- Update WWW - old url redirects to new.
- Replace RM in post-extract with EXTRACT_AFTER_ARGS.

PR:		296573
Sponsored by:	UNIS Labs
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
0d08dd9c80
Xavier Beaudouin (kiwi) · 4.3.6_1
*/*: Introduction USES=sudo

A new uses 'sudo' has been added to transperently depends of the
proper flavor of sudo 'default' or 'sssd' depending on the default
version set by the user.

If you prefere to use 'sssd' flavor of sudo, add the following
to your make.conf:

        DEFAULT_VERSIONS+=sudo=sssd

All sudo consummer ports has benn updated to USES=sudo

Reviewed by:    0mp
Approved by:    mat
Sponsored by:   Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D52160
ee5c766cba
Loïc Bartoletti (lbartoletti) · 4.3.6_1
graphics/ImageMagicks*: bump dependent ports
9a9c1ba205
Kurt Jaeger (pi) · 4.3.6
net-im/mastodon: update 4.3.2 -> 4.3.6

Changes:	https://github.com/mastodon/mastodon/releases
Security:	security fixes for everyone using SAML single-sign-on
ceab966334
Muhammad Moinur Rahman (bofh) · 4.3.2
net-im/mastodon: Update version 4.3.1=>4.3.2

- Drop maintainership

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.3.2
b4acea70c9
Muhammad Moinur Rahman (bofh) · 4.3.1
net-im/mastodon: Update version 4.3.0=>4.3.1

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.3.1
f44f84a4e6
Muhammad Moinur Rahman (bofh) · 4.3.0
net-im/mastodon: Update version 4.2.13=>4.3.0

THERE ARE BREAKING CHANGES FOR PGSQL 14.X USERS. PLEASE CHECK THE
CHANGELOG.

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.3.0
904b462421
Muhammad Moinur Rahman (bofh) · 4.2.13
net-im/mastodon: Update version 4.2.12=>4.2.13

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.13
9132d44d25
Muhammad Moinur Rahman (bofh) · 4.2.12
net-im/mastodon: Update version 4.2.11=>4.2.12

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.12
a8c8e680fe
Muhammad Moinur Rahman (bofh) · 4.2.11
net-im/mastodon: Update version 4.2.10=>4.2.11

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.11
b8fcc929cb
Muhammad Moinur Rahman (bofh) · 4.2.10
net-im/mastodon: Update version 4.2.9=>4.2.10

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.10
89069e23cc
Muhammad Moinur Rahman (bofh) · 4.2.9
net-im/mastodon: Update version 4.2.8=>4.2.9

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.9
face1b75b2
Nuno Teixeira (eduardo) · 4.2.8_1
*/*: Bump consumers of dns/libidn

Reported by:	vvd
bae03bdd17
Muhammad Moinur Rahman (bofh) · 4.2.8
net-im/mastodon: Update version 4.2.7=>4.2.8

Changlog: https://github.com/mastodon/mastodon/releases/tag/v4.2.8
bebd9236a1
Muhammad Moinur Rahman (bofh) · 4.2.7
net-im/mastodon: Update version 4.2.6=>4.2.7

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.7
847529972b
Muhammad Moinur Rahman (bofh) · 4.2.6
net-im/mastodon: Update version 4.2.5=>4.2.6

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.6
0c9aa5c01b
Muhammad Moinur Rahman (bofh) · 4.2.5
net-im/mastodon: Update version 4.2.4=>4.2.5

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.5

MFH:		2024Q1
49c7305572
Muhammad Moinur Rahman (bofh) · 4.2.4
net-im/mastodon: Update version 4.2.3=>4.2.4

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.4
c540565ffd
Muhammad Moinur Rahman (bofh) · 4.2.3
net-im/mastodon: Update version 4.2.2=>4.2.3

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.3
37163e3ba9
Muhammad Moinur Rahman (bofh) · 4.2.2
net-im/mastodon: Update version 4.2.1=>4.2.2

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.2
255e1c885d
Muhammad Moinur Rahman (bofh) · 4.2.1
net-im/mastodon: Update version 4.2.0=>4.2.1

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.1
e7e45ac82f
Muhammad Moinur Rahman (bofh) · 4.2.0
net-im/mastodon: Update version 4.1.9=>4.2.0

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.0
15c3128e94
Muhammad Moinur Rahman (bofh) · 4.1.9
net-im/mastodon: Update version 4.1.8=>4.1.9

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.9
665d0a4379
Muhammad Moinur Rahman (bofh) · 4.1.8
net-im/mastodon: Update version 4.1.7=>4.1.8

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.8
00b6b938e8
Muhammad Moinur Rahman (bofh) · 4.1.7
net-im/mastodon: Update version 4.1.6=>4.1.7

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.7
e7901f3cca
Muhammad Moinur Rahman (bofh) · 4.1.6
net-im/mastodon: Update version 4.1.5=>4.1.6

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.6
57ec237762
Muhammad Moinur Rahman (bofh) · 4.1.5
net-im/mastodon: Update version 4.1.4=>4.1.5

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.5
d82fe8665f
Muhammad Moinur Rahman (bofh) · 4.1.4
net-im/mastodon: Update version 4.1.2=>4.1.4

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.4
db550f5f52
Felix Palmen (zirias) · 4.1.2_2
Mk/Uses/magick.mk: Bump all consumers

Bump all consumers of ImageMagick ports after flavorizing them.

Approved by:	tcberner (mentor, implicit)
a6bb2f8c5e
Christian Weisgerber (naddy) · 4.1.2_1
audio/opus: bump consumers after update to 1.4
feb1fa34f5
Muhammad Moinur Rahman (bofh) · 4.1.2
net-im/mastodon: Update version 4.1.1=>4.1.2

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.2

Sponsored by:	BlinkinBlox
344948bef9
Muhammad Moinur Rahman (bofh) · 4.1.1
net-im/mastodon: Update version 4.1.0=>4.1.1

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.1
bfdc3c6843
Muhammad Moinur Rahman (bofh) · 4.1.0
net-im/mastodon: Update version 4.0.2=>4.1.0

Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.0
c0e344f719
Muhammad Moinur Rahman (bofh) · 4.0.2
Mk/**ruby.mk: Switch from USE_RUBY=yes to USES=ruby

Switch from Mk/bsd.ruby.mk to Mk/Uses/ruby.mk

Notable changes are.

- Mk/bsd.ruby.mk is moved to Mk/Uses/ruby.mk.
- USE_RUBY=yes is replaced with USES=ruby.
- USE_RUBY_EXTCONF is replaced with USES=ruby:extconf.
- USE_RUBY_RDOC is replaced with USES=ruby:rdoc.
- USE_RUBY_SETUP is replaces with USES=ruby:setup.
- RUBY_NO_BUILD_DEPENDS and RUBY_NO_RUN_DEPENDS are replaced with
  USES=ruby:{build,none,run}.
- RUBY_REQUIRE isn't used anywhere, so removed.
- USES=gem now implies USES=ruby.

This is mainly the work of yasu@ at https://reviews.freebsd.org/D27863

I have just made some cosmetic changes and ran exp-run to test that the
tree is not in a BROKEN state.

Approved by:	portmgr
Differential Revision:	https://reviews.freebsd.org/D37925
18c6e18276
Muhammad Moinur Rahman (bofh) · 4.0.2
net-im/mastodon: Resurrect

Mastodon is an alternative implementation of GNU social, a free,
open-source social network.  It is a decentralized alternative to
commercial platforms based on ActivityStreams, Webfinger, PubsubHubbub
and Salmon.  The project focuses on creating a clean REST API and a good
user interface.  Ruby on Rails is used for the back-end, while React.js
and Redux are used for the dynamic front-end.

For easier maintenance of the port some part of the installation
procedure remains to be completed by the end user. The main howto is
available at https://wiki.freebsd.org/Ports/net-im/mastodon.

A great thanks to Stefano Marinelli for the fabulous post on running
Mastodon on a FreeBSD instance which helped a lot in porting this. The
link to the original post is also available on the above mentioned wiki
page.

Sponsored by:	Nepustil
079641ccb7
Rene Ladan (rene)
Remove expired ports: 2018-07-15 net/p5-ZConf-Bookmarks: Unmaintained 2018-07-15 net/p5-ZConf: Unmaintained 2018-07-15 textproc/p5-Text-SpellChecker-GUI: Unmaintained 2018-07-15 deskutils/p5-ZConf-Runner-GUI-GTK: Unmaintained 2018-07-15 deskutils/p5-ZConf-BGSet: Unmaintained 2018-07-15 deskutils/p5-ZConf-Runner: Unmaintained 2018-07-15 graphics/p5-Image-Size-FillFullSelect: Unmaintained 2018-07-15
0f9f51655f
Joseph Mingrone (jrm) · 2.3.3_2
net-im/mastodon: Extend the expiration date by two weeks

Marcin Cieślak <saper@saper.info> plans to submit a fix, but needs more
time.
ab7c609622
Jan Beich (jbeich) · 2.3.3_2
devel/icu: update to 62.1

Changes:	http://site.icu-project.org/download/62
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		229359
Exp-run by:	antoine (only 10.4)
3beb732dad
Joseph Mingrone (jrm) · 2.3.3_1
net-im/mastodon: Mark broken and deprecated and set expiration date

File bankruptcy with net-im/mastodon.  After the www/node upgrade to 10, it
broke again.  In general, the return to effort ratio trying to contort
these node modules and ruby gems in to a port is too low (for me).  I will
leave the port here for about a month in case anyone else would like to
give it a go.

For those who want to run a FreeBSD-based instance on the "fediverse", it
is probably easier to simply follow Mastodon's installation guide.
Alternatively, I have heard good things about Pleroma [1], so you may want
to give it a try.

[1] https://git.pleroma.social/pleroma/pleroma
f22530a0a6
Jan Beich (jbeich) · 2.3.3_1
devel/icu: update to 61.1

Changes:	http://site.icu-project.org/download/61
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		227042
Exp-run by:	antoine
MFH:		2018Q2 (required by Firefox 61)
ae60358af5
Joseph Mingrone (jrm) · 2.3.3
net-im/mastodon: Upgrade to version 2.3.3

Upstream changes: https://github.com/tootsuite/mastodon/releases/tag/v2.3.3
96be6a880a
Joseph Mingrone (jrm) · 2.3.2
net-im/mastodon: Remove v2.3.0 information from pkg-message
c40b72527d
Joseph Mingrone (jrm) · 2.3.2
net-im/mastodon: Update to version 2.3.2

Upstream changes: https://github.com/tootsuite/mastodon/releases/tag/v2.3.2
de64d57734
Joseph Mingrone (jrm) · 2.3.1_1
net-im/mastodon: Fix build after r464421

Pointy hat:      sunpoet

Reported by:    Gary Carter <kithop@gmail.com>
39250a4215
Joseph Mingrone (jrm) · 2.3.1
net-im/mastodon: Update to 2.3.1 and set maintainer to ports@

Upstream changes: https://github.com/tootsuite/mastodon/releases/tag/v2.3.1
cb7f7cada9
Sunpoet Po-Chuan Hsieh (sunpoet) · 2.2.0_5
Fix Gemfile for rubygem-paperclip-rails5 6.0.0 update

- Bump PORTREVISION for package change
7d345dc93e
Joseph Mingrone (jrm) · 2.2.0_4
net-im/mastodon: Fix build after r463576
f221881b3a
Antoine Brodin (antoine) · 2.2.0_3
Remove dependency on the python metaports

PR:		225752
Submitted by:	Yasuhiro KIMURA
d36ae62058
Sunpoet Po-Chuan Hsieh (sunpoet) · 2.2.0_3
Fix Gemfile for rubygem-pg 1.0.0 update

- Bump PORTREVISION for package change
50206c0b3a