net-im/mastodon: update to 4.6.4 security release Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.6.4 Notably, security fixes to address the following issues: - Denial of Service through insufficient authentication of statistics endpoints. - Personally-identifying information disclosure due to incorrect access control validation. - SSRF Protection Bypass via IPv4-compatible IPv6 Addresses. PR: 297125 Approved by: Scott Kenney <sak@codered.rmta.org> (maintainer) Security: GHSA-hx34-2pfw-2qfj Security: GHSA-7jvv-fhmg-wpfw Security: GHSA-vwhj-3g83-v2760372940c1b
Port details
net-im/mastodon4.6.4
GNU Social-compatible microblogging server
- Maintainer
- saken@codered.rmta.org
- Packages
- mastodon 4.6.4
- Upstream
- Higher version available: 4.7.3
- CPE
- none, CVEs only via VuXML
- WWW
- https://github.com/mastodon/mastodon/
- Links
- cgit · VuXML
Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE
None. There is no CVE without a VuXML entry for this version.
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (0)
No VuXML entries for this package.
Commits (91)
net-im/mastodon: Update 4.3.6 => 4.6.3, take maintainership Changelog: https://github.com/mastodon/mastodon/blob/v4.6.3/CHANGELOG.md Improve port: - Update WWW - old url redirects to new. - Replace RM in post-extract with EXTRACT_AFTER_ARGS. PR: 296573 Sponsored by: UNIS Labs Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>0d08dd9c80
*/*: Introduction USES=sudo
A new uses 'sudo' has been added to transperently depends of the
proper flavor of sudo 'default' or 'sssd' depending on the default
version set by the user.
If you prefere to use 'sssd' flavor of sudo, add the following
to your make.conf:
DEFAULT_VERSIONS+=sudo=sssd
All sudo consummer ports has benn updated to USES=sudo
Reviewed by: 0mp
Approved by: mat
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D52160ee5c766cbagraphics/ImageMagicks*: bump dependent ports9a9c1ba205
net-im/mastodon: update 4.3.2 -> 4.3.6 Changes: https://github.com/mastodon/mastodon/releases Security: security fixes for everyone using SAML single-sign-onceab966334
net-im/mastodon: Update version 4.3.1=>4.3.2 - Drop maintainership Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.3.2b4acea70c9
net-im/mastodon: Update version 4.3.0=>4.3.1 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.3.1f44f84a4e6
net-im/mastodon: Update version 4.2.13=>4.3.0 THERE ARE BREAKING CHANGES FOR PGSQL 14.X USERS. PLEASE CHECK THE CHANGELOG. Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.3.0904b462421
net-im/mastodon: Update version 4.2.12=>4.2.13 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.139132d44d25
net-im/mastodon: Update version 4.2.11=>4.2.12 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.12a8c8e680fe
net-im/mastodon: Update version 4.2.10=>4.2.11 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.11b8fcc929cb
net-im/mastodon: Update version 4.2.9=>4.2.10 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.1089069e23cc
net-im/mastodon: Update version 4.2.8=>4.2.9 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.9face1b75b2
*/*: Bump consumers of dns/libidn Reported by: vvdbae03bdd17
net-im/mastodon: Update version 4.2.7=>4.2.8 Changlog: https://github.com/mastodon/mastodon/releases/tag/v4.2.8bebd9236a1
net-im/mastodon: Update version 4.2.6=>4.2.7 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.7847529972b
net-im/mastodon: Update version 4.2.5=>4.2.6 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.60c9aa5c01b
net-im/mastodon: Update version 4.2.4=>4.2.5 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.5 MFH: 2024Q149c7305572
net-im/mastodon: Update version 4.2.3=>4.2.4 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.4c540565ffd
net-im/mastodon: Update version 4.2.2=>4.2.3 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.337163e3ba9
net-im/mastodon: Update version 4.2.1=>4.2.2 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.2255e1c885d
net-im/mastodon: Update version 4.2.0=>4.2.1 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.1e7e45ac82f
net-im/mastodon: Update version 4.1.9=>4.2.0 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.2.015c3128e94
net-im/mastodon: Update version 4.1.8=>4.1.9 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.9665d0a4379
net-im/mastodon: Update version 4.1.7=>4.1.8 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.800b6b938e8
net-im/mastodon: Update version 4.1.6=>4.1.7 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.7e7901f3cca
net-im/mastodon: Update version 4.1.5=>4.1.6 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.657ec237762
net-im/mastodon: Update version 4.1.4=>4.1.5 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.5d82fe8665f
net-im/mastodon: Update version 4.1.2=>4.1.4 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.4db550f5f52
Mk/Uses/magick.mk: Bump all consumers Bump all consumers of ImageMagick ports after flavorizing them. Approved by: tcberner (mentor, implicit)a6bb2f8c5e
audio/opus: bump consumers after update to 1.4feb1fa34f5
net-im/mastodon: Update version 4.1.1=>4.1.2 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.2 Sponsored by: BlinkinBlox344948bef9
net-im/mastodon: Update version 4.1.0=>4.1.1 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.1bfdc3c6843
net-im/mastodon: Update version 4.0.2=>4.1.0 Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.1.0c0e344f719
Mk/**ruby.mk: Switch from USE_RUBY=yes to USES=ruby
Switch from Mk/bsd.ruby.mk to Mk/Uses/ruby.mk
Notable changes are.
- Mk/bsd.ruby.mk is moved to Mk/Uses/ruby.mk.
- USE_RUBY=yes is replaced with USES=ruby.
- USE_RUBY_EXTCONF is replaced with USES=ruby:extconf.
- USE_RUBY_RDOC is replaced with USES=ruby:rdoc.
- USE_RUBY_SETUP is replaces with USES=ruby:setup.
- RUBY_NO_BUILD_DEPENDS and RUBY_NO_RUN_DEPENDS are replaced with
USES=ruby:{build,none,run}.
- RUBY_REQUIRE isn't used anywhere, so removed.
- USES=gem now implies USES=ruby.
This is mainly the work of yasu@ at https://reviews.freebsd.org/D27863
I have just made some cosmetic changes and ran exp-run to test that the
tree is not in a BROKEN state.
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D3792518c6e18276net-im/mastodon: Resurrect Mastodon is an alternative implementation of GNU social, a free, open-source social network. It is a decentralized alternative to commercial platforms based on ActivityStreams, Webfinger, PubsubHubbub and Salmon. The project focuses on creating a clean REST API and a good user interface. Ruby on Rails is used for the back-end, while React.js and Redux are used for the dynamic front-end. For easier maintenance of the port some part of the installation procedure remains to be completed by the end user. The main howto is available at https://wiki.freebsd.org/Ports/net-im/mastodon. A great thanks to Stefano Marinelli for the fabulous post on running Mastodon on a FreeBSD instance which helped a lot in porting this. The link to the original post is also available on the above mentioned wiki page. Sponsored by: Nepustil079641ccb7
Remove expired ports: 2018-07-15 net/p5-ZConf-Bookmarks: Unmaintained 2018-07-15 net/p5-ZConf: Unmaintained 2018-07-15 textproc/p5-Text-SpellChecker-GUI: Unmaintained 2018-07-15 deskutils/p5-ZConf-Runner-GUI-GTK: Unmaintained 2018-07-15 deskutils/p5-ZConf-BGSet: Unmaintained 2018-07-15 deskutils/p5-ZConf-Runner: Unmaintained 2018-07-15 graphics/p5-Image-Size-FillFullSelect: Unmaintained 2018-07-150f9f51655f
net-im/mastodon: Extend the expiration date by two weeks Marcin Cieślak <saper@saper.info> plans to submit a fix, but needs more time.ab7c609622
devel/icu: update to 62.1 Changes: http://site.icu-project.org/download/62 ABI: https://abi-laboratory.pro/tracker/timeline/icu4c/ PR: 229359 Exp-run by: antoine (only 10.4)3beb732dad
net-im/mastodon: Mark broken and deprecated and set expiration date File bankruptcy with net-im/mastodon. After the www/node upgrade to 10, it broke again. In general, the return to effort ratio trying to contort these node modules and ruby gems in to a port is too low (for me). I will leave the port here for about a month in case anyone else would like to give it a go. For those who want to run a FreeBSD-based instance on the "fediverse", it is probably easier to simply follow Mastodon's installation guide. Alternatively, I have heard good things about Pleroma [1], so you may want to give it a try. [1] https://git.pleroma.social/pleroma/pleromaf22530a0a6
devel/icu: update to 61.1 Changes: http://site.icu-project.org/download/61 ABI: https://abi-laboratory.pro/tracker/timeline/icu4c/ PR: 227042 Exp-run by: antoine MFH: 2018Q2 (required by Firefox 61)ae60358af5
net-im/mastodon: Upgrade to version 2.3.3 Upstream changes: https://github.com/tootsuite/mastodon/releases/tag/v2.3.396be6a880a
net-im/mastodon: Remove v2.3.0 information from pkg-messagec40b72527d
net-im/mastodon: Update to version 2.3.2 Upstream changes: https://github.com/tootsuite/mastodon/releases/tag/v2.3.2de64d57734
net-im/mastodon: Fix build after r464421 Pointy hat: sunpoet Reported by: Gary Carter <kithop@gmail.com>39250a4215
net-im/mastodon: Update to 2.3.1 and set maintainer to ports@ Upstream changes: https://github.com/tootsuite/mastodon/releases/tag/v2.3.1cb7f7cada9
Fix Gemfile for rubygem-paperclip-rails5 6.0.0 update - Bump PORTREVISION for package change7d345dc93e
net-im/mastodon: Fix build after r463576f221881b3a
Remove dependency on the python metaports PR: 225752 Submitted by: Yasuhiro KIMURAd36ae62058
Fix Gemfile for rubygem-pg 1.0.0 update - Bump PORTREVISION for package change50206c0b3a