CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

net-im/profanity0.18.2

Console based XMPP client

Maintainer
ashish@FreeBSD.org
Packages
profanity 0.18.2
Upstream
Higher version available: 0.19.0
CPE
profanity_project:profanity from the port
WWW
http://www.profanity.im/
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2022-407697.5published 2022-09-18

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (56)

Ashish SHUKLA (ashish) · 0.18.2
net-im/profanity: Update to 0.18.2

PR:		296188
0f192a0f04
Ashish SHUKLA (ashish) · 0.18.1
net-im/profanity: Update to 0.18.1
95c494f36c
Ashish SHUKLA (ashish) · 0.18.0
net-im/profanity: Update to 0.18.0

- Migrated from gmake to meson
- Added OPTIONS for optional features
- Added DEFAULT_OPTIONS reflect commonly used features

PR:		295126

Co-authored-by:	Ashish SHUKLA <ashish@FreeBSD.org>
8ae39a5566
Ashish SHUKLA (ashish) · 0.15.1
net-im/profanity: Update to 0.15.1

- Depend on gmake
- Update CONFIGURE_ARGS
- Remove unapplicable patch
3cf7b58226
Matthias Andree (mandree) · 0.14.0_5
*/*: Bump PORTREVISION after libuuid/libblkid switch

from e2fsprogs to util-linux, to complete the bump of all users
of either library that started with Alexander's commit titled
'*/*: Switch to misc/libuuid and misc/libblkid'

PR:		251489
9eb3fb8e5b
Matthias Andree (mandree) · 0.14.0_4
*/*: Switch to misc/libuuid and misc/libblkid

PR:		221293
PR:		251489
PR:		257070
e81eda36a8
Jason E. Hale (jhale) · 0.14.0_4
*/*: Bump security/gpgme consumers
dbab074be0
Jason E. Hale (jhale) · 0.14.0_3
security/gpgme: Update to 2.0.0

Upstream has split most of the bindings out into separate projects with
this release, so the child ports that were previously providing various
bindings are now autonomous and have new origins. The python bindings
should have been called py-gpg for many years now, since 'gpg' is the
actual module name, so this also corrects that issue.

security/gpgme-cpp -> security/gpgmepp
security/gpgme-qt -> security/qgpgme
security/py-gpgme -> security/py-gpg

gpgmepp and qgpgme have been converted to CMake. py-gpg is now a "fun"
autotools and FreeBSD ports system hybrid. Gpgme, itself, still uses
autotools, but with much less parenting (patching) to do for its
emancipated children.

Adjust several ports to fix API incompatibility with upstream patches
and with some of my own. Adjust all consumers to use the new port
origins of the former child ports.

https://dev.gnupg.org/T7673
217815b0af
Jason E. Hale (jhale) · 0.14.0_3
*/*: Chase security/libassuan shlib bump
c1dda71dec
Ashish SHUKLA (ashish) · 0.14.0_2
net-im/profanity: Chase net-im/libstrophe update

PR:		278007
MFH:		2024Q2
47a4704774
Nuno Teixeira (eduardo) · 0.14.0_1
net-im/profanity: Move man pages to share/man

Approved by:	portmgr (blanket)
9771789304
Ashish SHUKLA (ashish) · 0.14.0
net-im/profanity: Update to 0.14.0
b79a15958e
Rene Ladan (rene) · 0.13.1
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Daniel Engberg (diizzy) · 0.13.1
net-im/profanity: Remove autoreconf dependency

No need to run autoreconf and pull in autoconf-archive anymore

PR:		267267
Reviewed by:	ashish (maintainer)
a47577c55f
Ashish SHUKLA (ashish) · 0.13.1
net-im/profanity: Update to 0.13.1

- Remove patch as it is now upstream
c285b8cd2c
Daniel Engberg (diizzy) · 0.13.0
net-im/profanity: Use upstream release archive and some other fixes

- Use upstream release archive as recommended in USE_GITHUB section
  in Porters Handbook
- Remove OpenSSL dependency
- Add USE_LDCONFIG
- Rearrange Makefile to follow Porters Handbook more closely
- Fix Python detection (patch provided by maintainer)

PR:		266430
Reviewed by:	ashish (maintainer)
15b2c42e96
Ashish SHUKLA (ashish) · 0.13.0
net-im/profanity: Update to 0.13.0

- Remove dependency on libmesode (deprecated)
- Add dependency on qrencode
- Add patch to fix bug in configure, and is reported upstream

Reported by:	portscout
aea7859773
Stefan Eßer (se) · 0.12.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.12.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Ashish SHUKLA (ashish) · 0.12.1
net-im/profanity: Update to 0.12.1

MFH:		2022Q2 (fixes a segmentation fault)
77801d198f
Ashish SHUKLA (ashish) · 0.12.0
net-im/profanity: Update to 0.12.0
38c6eab258
Ashish SHUKLA (ashish) · 0.11.1
net-im/profanity: Adopt the port
3079c5be0b
Tilman Keskinoz (arved) · 0.11.1
net-im/profanity: Update to 0.11.1

Drop maintainership
41de21dd2b
Stefan Eßer (se) · 0.11.0
net-im/profanity: Add CPE information

Approved by:	portmgr (blanket)
a2c10dc3d1
Tilman Keskinoz (arved) · 0.11.0
net-im/profanity: Update to 0.11.0
332c5d993b
Alexey Dokuchaev (danfe) · 0.10.0_1
Cleanup: for ports under n* categories, drop redundant GH_* knobs.
0a22085145
Mathieu Arnold (mat) · 0.10.0_1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.10.0_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.10.0_1
Update LIB_DEPENDS

- Bump PORTREVISION for dependency change
928cdfca67
Tilman Keskinoz (arved) · 0.10.0
Update to 0.10.0
b4daa2b9b9
Ashish SHUKLA (ashish) · 0.9.5
- Update to 0.9.5

PR:		247872
Approved by:	arved (maintainer)
7572ae9245
Tilman Keskinoz (arved) · 0.9.2
Update to 0.9.2
eedc95fb86
Tilman Keskinoz (arved) · 0.9.0
Update to 0.9.0
407fcf359d
Tilman Keskinoz (arved) · 0.8.1
Update profanity to 0.8.1
5665410fad
Tilman Keskinoz (arved) · 0.7.1_1
Enable OMEMO support Bump PORTREVISION

PR:		241381
Reported by:	pvoigt@uos.de
112c2a4363
Tilman Keskinoz (arved) · 0.7.1
Update to 0.7.1
c0b81fbae7
Tilman Keskinoz (arved) · 0.7.0
Update to 0.7.0
d7b0235e80
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.0_1
Update devel/readline to 8.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://tiswww.case.edu/php/chet/readline/CHANGES
PR:		236156
Exp-run by:	antoine
40c9c7f7eb
Tilman Keskinoz (arved) · 0.6.0
Add a copy of the distfile to my local distfiles.

It seems the MASTER_SITE randomly resets connections

Reported by:	pkgbuild
009c9e2261
Tilman Keskinoz (arved) · 0.6.0
Update to 0.6.0

Changelog:	https://github.com/boothj5/profanity/releases/tag/0.6.0
587d95cb5f
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.5.1_2
Update devel/readline to 7.0 patch 3

- Bump PORTREVISION for shlib change

Changes:	https://cnswww.cns.cwru.edu/php/chet/readline/CHANGES
		https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00107.html
		https://lists.gnu.org/archive/html/bug-readline/2017-01/msg00002.html
Differential Revision:	https://reviews.freebsd.org/D11172
PR:		219947
Exp-run by:	antoine
cb037d3c98
Tilman Keskinoz (arved) · 0.5.1_1
Attempt to fix build on packagebuild.

Reported by:	pkg-fallout
6ff96ca1c3
Tilman Keskinoz (arved) · 0.5.1_1
Enable pluginsupport.

PR:		218401
Submitted by:	freebsd@get-experience.com

While here, add configure flags to prevent linking against X11
c5be38450c
Tilman Keskinoz (arved) · 0.5.1
Update to 0.5.1
75be12431f
Adam Weinberger (adamw) · 0.5.0_1
LIB_DEPENDS=libglib-2.0.so should be USE_GNOME=glib20.

Also, while here, sort the LIB_DEPENDS in desktutils/gnome-contacts,
because wow.
c3142025cd
Jason E. Hale (jhale) · 0.5.0_1
Update security/gpgme-* to 1.8.0

In this version, libgpgme-pthread.so has been removed in favor of just
using libgpgme.so as the thread-safe library. PORTREVISION has been
bumped on all ports depending on security/gpgme so that any that may have
linked to -lgpgme-pthread will link to -lgpgme instead.

The Python module provided by security/py-gpgme has been renamed upstream
from pyme3 to gpg. This removes the conflict with security/py-pyme,
although security/py-gpgme is still the direct replacement of that
module.
d32b8fe316
Tilman Keskinoz (arved) · 0.5.0
Update to 0.5.0
027f26a876
Dmitry Marakasov (amdmi3) · 0.4.7_1
- Fix trailing whitespace in pkg-descrs, categories [g-n]*

Approved by:	portmgr blanket
4e942b6419
Mathieu Arnold (mat) · 0.4.7_1
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Tilman Keskinoz (arved) · 0.4.7_1
Switch to libotr instead of libotr3

PR:		207880
Submitted by:	Sascha Holzleiter
3fdc839ad0