CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

security/yubikey-personalization-gui3.1.25_5

Graphical YubiKey personalization tool

Maintainer
romain@FreeBSD.org
Packages
yubikey-personalization-gui 3.1.25_5
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/Yubico/yubikey-personalization-gui
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (21)

Muhammad Moinur Rahman (bofh) · 3.1.25_5
security/yubikey-personalization-gui: Sanitize MANPREFIX

Approved by:    portmgr (blanket)
f51c25a77d
Felix Palmen (zirias) · 3.1.25_4
Mk/Uses: always use colon for build/run suffix

Most USES use a colon for build/run(/test) suffixes. Change kde.mk,
qt.mk and pyqt.mk to do the same, and update all ports using that.

Document in CHANGES.

PR:			266034
Exp-run by:		antoine
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36349
ddae4e92d8
Stefan Eßer (se) · 3.1.25_4
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.1.25_4
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mathieu Arnold (mat) · 3.1.25_4
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 3.1.25_4
Remove # $FreeBSD$ from Makefiles.
305f148f48
Gerald Pfeifer (gerald) · 3.1.25_4
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Tobias C. Berner (tcberner) · 3.1.25_3
security/yubikey-personalization-gui: remove QT4/QT5 options (Qt4 deprecation)

Approved by:	portmgr (implicit)
e407f05205
Tijl Coosemans (tijl) · 3.1.25_2
Fix Qt5 symbol version scripts to put the catch-all clause first.  When a symbol matches multiple clauses the last one takes precedence.  If the catch-all is last it captures everything.  In the case of Qt5 libraries this caused all symbols to have a Qt_5 label while some should have Qt_5_PRIVATE_API.  This only affects lld because GNU ld always gives the catch-all lowest priority.

Older versions of Qt5Webengine exported some memory allocation symbols from
the bundled Chromium.  Version 5.9 stopped exporting these [1] but the
symbols were kept as weak wrappers for the standard allocation functions to
maintain binary compatibility. [2][3]  The problem is that the call to the
standard function in these weak wrappers is only resolved to the standard
function if there's a call to this standard function in other parts of
Qt5Webengine, because only then is there a non-weak symbol that takes
precedence over the weak one.  If there's no such non-weak symbol the call
in the weak wrapper resolves to the weak wrapper itself creating an infinite
call loop that overflows the stack and causes a crash.  Some of the
allocation functions are variants of C++ new and delete and it probably
depends on the compiler whether these variants are used in other parts of
Qt5Webengine.

Remove the weak wrappers (make them Linux specific).  This isn't binary
compatible but we are already breaking that with the changes to the symbol
versions.

[1] https://github.com/qt/qtwebengine/commit/5c2cbfccf9aafb547b0b30914c4056abd25942a4
[2] https://github.com/qt/qtwebengine/commit/2ed5054e3a800fa97c2c9e920ba1e6ea4b6ef2a5
[3] https://github.com/qt/qtwebengine/commit/009f5ebb4bd6e50188671e0815a5dae6afe39db5

Bump all ports that depend on Qt5.

PR:		234070
Exp-run by:	antoine
Approved by:	kde (adridg)
1bf487d3e7
Mark Linimon (linimon) · 3.1.25_1
This port requires USES=compiler:c++11-lang to build on GCC-based architectures.

PR:		234332
Submitted by:	Piotr Kubaj
Approved by:	portmgr (tier-2 blanket)
b1630d1863
Rene Ladan (rene) · 3.1.25_1
Mark QT4 ports/functionality for removal on 2019-03-15

While here, chase some KDE4 ports and functionality, these are scheduled for
removal on 2018-12-31. Change the default option/flavor to QT5 where applicable
or use alternative toolkits like GTK.

Submitted by:	tcberner
Reviewed by:	adridg, jhale, rene, tcberner
Approved by:	portmgr (implicit, flavor hook)
Differential Revision:	https://reviews.freebsd.org/D17741
99d6d12a38
Romain Tartière (romain) · 3.1.25_1
Build against QT5 by default

QT4 is still supported and options where introduced to allow users to choose
which version of QT they want yubikey-personalization-gui to be built against.

While here, pet portlint.

Since the version of QT change, bump PORTREVISION.

PR:		231808
Reported by:	cmt
8f3d972d73
Tobias C. Berner (tcberner) · 3.1.25
Replace bsd.qt.mk by Uses/qt.mk and Uses/qt-dist.mk

From now on, ports that depend on Qt4 will have to set
	USES=		qt:4
	USE_QT=		foo bar
ports depending on Qt5 will use
	USES=		qt:5
	USE_QT=		foo bar

PR:		229225
Exp-run by:	antoine
Reviewed by:	mat
Approved by:	portmgr (antoine)
Differential Revision:	→https://reviews.freebsd.org/D15540
b1a1d38bf9
Romain Tartière (romain) · 3.1.25
Update to 3.1.25

Release notes:
https://developers.yubico.com/yubikey-personalization-gui/Release_Notes.html
e3d3e8bdce
Romain Tartière (romain) · 3.1.24_1
Various improvements

- Install man pages
- Install .desktop file
- Install icons
- Properly register dependencies reported by stage-qa
- Define LICENSE_FILE
- Bump PORTREVISION

PR:		223124
Submitted by:	ehaupt
4acbc3037f
Mathieu Arnold (mat) · 3.1.24
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Antoine Brodin (antoine) · 3.1.24
Fix distinfo
89ca09525c
Romain Tartière (romain) · 3.1.24
Update to 3.1.24.
1ea4943d3a
Mathieu Arnold (mat) · 3.1.23
Don't use GH_TAGNAME when DISTVERSION* variables can be used.

With hat:	portmgr
Sponsored by:	Absolight
faaac0db42
Romain Tartière (romain) · 3.1.23
Remove security/yubikey-personalization (duplicate of security/ykpers)

PR:		203835
Submitted by:	cmt@burggraben.net
d4119bd942
Romain Tartière (romain) · 3.1.23
The YubiKey Personalization Tool is a Qt based Cross-Platform utility designed to facilitate re-configuration of YubiKeys on Windows, Linux and Mac platforms. The tool provides a same simple step-by-step approach to make configuration of YubiKeys easy to follow and understand, while still being powerful enough to exploit all functionality both of the YubiKey 1 and YubiKey 2 generation of keys. The

The Cross-Platform YubiKey Personalization Tool provides the following main
functions:
  - Programming the YubiKey in "Yubico OTP" mode;
  - Programming the YubiKey in "OATH-HOTP" mode;
  - Programming the YubiKey in "Static Password" mode;
  - Programming the YubiKey in "Challenge-Response" mode;
  - Programming the NDEF feature of the YubiKey NEO;
  - Testing the challenge-response functionality of a YubiKey;
  - Deleting the configuration of a YubiKey;
  - Checking type and firmware version of the YubiKey.

WWW: https://github.com/Yubico/yubikey-personalization-gui
f35d4877c1