CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

sysutils/cfengine3.28.0_1

Systems administration tool for networks

Maintainer
cy@FreeBSD.org
Packages
cfengine 3.28.0_1
Upstream
up to date
CPE
gnu:cfengine from the port
WWW
https://cfengine.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (103)

Cy Schubert (cy) · 3.28.0_1
sysutils/cfengine328: Add new port

Add the latest cfengine to the ports collection.

Update the sysutils/cfengine metaport to point to the new port. It
becomes default.
8410646fbf
Cy Schubert (cy)
sysutils/cfengine: Update default cfengine to 3.27
051413f2e5
Cy Schubert (cy)
sysutils/cfengine{,-masterfiles}: Point metaport to 3.26.0 ports

cfengine326 and cfengine-masterfiles326 are now default.
fe81c1eb60
Cy Schubert (cy)
sysutils/cfengine*: Introduce crengine325 and cfengine-masterfiles325

Add ports for the new cfengine and cfengine-masterfiles 3.25.0.

Make cfengine325 and cfengine-masterfiles325 the default cfengine
ports/packages.
678317bb7a
Cy Schubert (cy)
sysutils/cfengine*: Introduce crengine324 and cfengine-masterfiles324

Add ports for the new cfengine and cfengine-masterfiles 3.24.0.

Make cfengine324 and cfengine-masterfiles324 the default cfengine
ports/packages.
35ee737900
Cy Schubert (cy)
sysutils/cfengine322: Introduce cfengine323 and cfengine-masterfiles323

Add ports for the new cfengine and cfengine-masterfiles 3.23.0.

Make cfengine323 and cfengine-masterfiles323 the default cfengine
ports/packages.
f32ce82153
Cy Schubert (cy)
sysutils/cfengine322: Introduce cfengine322 and cfengine-masterfiles322

Add ports for the new cfengine and cfengine-masterfiles 3.22.0.

Make cfengine322 and cfengine-masterfiles322 the default cfengine
ports/packages.
e6267c489a
Cy Schubert (cy)
sysutils/cfengine321: Introduce cfengine321 and cfengine-masterfiles321

Add ports for the new cfengine and cfengine-masterfiles 3.21.0.

Make cfengine321 and cfengine-masterfiles321 the default cfengine
ports/packages.
bee414d2c8
Cy Schubert (cy)
sysutils/cfengine*: Add cfengine320 and cfengine-masterfiles320

cfengine 3.20 and cfengine-masterfiles 3.20 are the newest to be
released by the cfengine folks.
4c12b5af14
Cy Schubert (cy)
sysutils/cfengine: Make cfengine319 default

cfengine319 is now the default cfengine port/package.

Drop cfengine316 from the selection list.
cd0568b602
Cy Schubert (cy)
sysutils/cfengine: Make cfengine318 default

cfengine318 is now the default cfengine port/package.

Drop cfengine315 from the selection list.
e1b886ebf1
Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Cy Schubert (cy)
Welcome the new cfengine317 and cfengine-masterfiles317. They become the default cfengine and cfengine-materfiles.

cfengine315 and cfengine-masterfiles are deprected, expriring one
year from today.
15e76a7e87
Cy Schubert (cy)
Only list the offered cfengine ports/packages. Others will be expired soon or exist solely to support FreeBSD 11's old OpenSSL.
5a54cb8c39
Cy Schubert (cy)
Welcome the new cfengine 3.16.0 and cfengine-masterfiles 3.16.0. Both become the default cfengine ports/packages.
406567833d
Cy Schubert (cy)
cfengine315 and cfengine-masterfiles315 are now default.
5ed6bf5f91
Cy Schubert (cy)
Welcome the new cfengine 3.15 and cfengine-masterfiles 3.15.

Adjust cfengine and cfengine-masterfiles meta-ports to recognize
the new ports.
0240004191
Cy Schubert (cy)
Bump the default cfengine to current.
83d1e96d73
Cy Schubert (cy)
Welcome the new cfengine 3.14 and cfengine-masterfiles 3.14. They are not the default until after a settling in period.
cdede28669
Cy Schubert (cy)
accelerate the expiry and removal of old cfengine ports that are no longer supported upstream.

Remove the same ports from the metaports as well.
3501085411
Cy Schubert (cy)
Now that cfengine22 is gone, let's remove the option too.
a31baf78d5
Cy Schubert (cy)
Set the default cfengine and masterfiles to 3.13.
67b66992ca
Cy Schubert (cy)
Welcome the new cfengine313. While here use the cfengine-devel pkg-plist as it sorts entries in the correct order. Update the cfengine meta-port to include 313.
09c4d156c2
Cy Schubert (cy)
Set the default cfengine and masterfiles to 3.12. cfengine releases 3.11 and older do not support OpenSSL 1.1.X which is now in HEAD.
822c43800a
Cy Schubert (cy)
Welcome the new cfengine312 and cfengine-masterfiles312.
3ffe95f407
Cy Schubert (cy)
cfengine311 and cfengine-masterfiles311 are now the default cfengine and cfengine-masterfiles ports.
c2cf9546dc
Cy Schubert (cy)
Welcome the new cfengine311 and cfengine-masterfiles311.
17398d76ec
Cy Schubert (cy)
Update cfengine310 and cfengine-masterfiles310 3.10.0 --> 3.10.1.

cfengine310 and cfengine-masterfiles310 are now the default
cfengine and cfengine-masterfiles ports.
be999441b8
Cy Schubert (cy)
Welcome the new cfengine and cfengine-masterfiles 3.10.

Adjust the other cfengine and cfengine-masterfiles ports CONFLICTS to
recognize the new cfengine sister ports.

Add cfengine and cfengine-masterfiles 310 to their respective metaports.
5adedb838a
Cy Schubert (cy)
Update cfengine39 and cfengine-masterfiles39 to 3.9.1.

cfengine and cfengine-masterfiles now defaults to cfengine39 and
cfengine-masterfiles39
89f3109dd2
Cy Schubert (cy)
Introduce new ports:

- cfengine39 (3.9.0), copied from cfengine38
- cfengine-masterfiles39 (3.9.0), copied from cfengine-masterfiles38
- add cfengine39 to cfengine metaport (non-default for now)
- add cfengine-masterfiles39 to cfengine-metafiles metaport (not default for now)

Sort documentation files in cfengine39.
8f597c05bc
Cy Schubert (cy)
Update cfengine38 3.8.0 --> 3.8.1.

Update cfengine-masterfiles38 3.8.0 --> 3.8.1.

Change default cfengine and cfengine-masterfiles to 38.
a5b14ddca0
Cy Schubert (cy)
Introduce cfengine38 and cfengine-masterfiles38.
895f95be7e
Steven Kreuzer (skreuzer)
Update to version 3.7.1 change CFENGINE_VERSION to 37 in the master port

Approved by:	cy@ (maintainer)
Differential Revision:	D4278
6795afec25
Cy Schubert (cy)
Add new cfengine37 port.
fc86aa5704
Cy Schubert (cy)
cfengine36 has been around for a while. It has proven itself. It is now the default.
7f23e47989
Cy Schubert (cy)
Stagify.
7ea116081b
Glen Barber (gjb)
Add cfengine36 to VERSIONS list.

Approved by:	cy (maintainer, implicit)
Sponsored by:	The FreeBSD Foundation
0c9e9ae61d
Cy Schubert (cy)
Remove -devel.

PR:		188134
Submitted by:	skreuzer
b9a8f319b3
Baptiste Daroussin (bapt)
Add NO_STAGE all over the place in preparation for the staging support (cat: sysutils)
83f65384c9
Glen Barber (gjb)
cfengine/Makefile:  - Add CFENGINE_VERSION 35

cfengine-devel/Makefile:
 - Mark IGNORE since development has not branched yet

Add cfengine 3.5.0:

New features:
  - classes promises now take an optional scope constraint.
  - new built-in functions: every, none, some, nth, sublist, uniq, filter
  - cf-promises flag --parse-tree is replaced by --policy-output-format=,
    requiring the
    user to specify the output format (none, cf, json)
  - cf-promises allows partial check of policy (without body common
    control) without integrity check; --full-check enforces integrity check
  - agent binaries support JSON input format (.json file as generated
    by cf-promises)
  - cf-key: new options --trust-key/-t and --print-digest/-p
  - Class "failsafe_fallback" is defined in failsafe.cf when main
    policy contains errors and
    failsafe is run because of this
  - add scope attribute for body classes (Redmine #2013)
  - Better diagnostics of parsing errors
  - Error messages from parser now show the context of error
  - new cf-agent option: --self-diagnostics
  - new output format, and --legacy-output
  - warnings for cf-promises.
  - Enable zeroconf-discovery of policy hubs for automatic bootstrapping
    if Avahi is present
  - Support for sys.cpus on more platforms than Linux & HPUX

Changes:
  - parser no longer allows ',' after promiser or promisee. must be
    either ';' or lval
  - Make parser output in GCC compatible format the only supported format
    (remove --gcc-brief-format flag)
  - Silence license warnings in Enterprise Free25 installations
  - action_policy => "warn" causes not_kept classes to be set on
    promise needing repair.
  - command line option version (-V) now prints a shorter parsable
    version without graphic
  - implicit execution of server and common bundles taking arguments
    is skipped in cf-serverd.
  - WARNING: option --policy-server removed, require option to --bootstrap
    instead
  - process promises don't log if processes are out of range unless you
    run in verbose mode
  - reports promises are now allowed in any context (Redmine #2005)
  - cf-report has been removed
  - cf-execd: --once implies --no-fork
  - Version info removed from mail subject in the emails sent by cf-execd.
    The subject will only contain "[fqname/ipaddress]" instead of
    "communnity/nova [fqname/ipaddress]".
    Please change your email filters accordingly if necessary.
  - "outputs" promise type is retired. Their semantics was not clear,
    and the functionality
    is better suited for control body setting, not a promise.
  - Tokyo Cabinet databases are now automatically checked for
    correctness during opening. It should prevent a number of issues
    with corrupted TC databases causing binaries to hang.
  - Improved ACL handling on Windows, which led to some syntax changes.
    We now consistently use the term "default" to describe ACLs that
    can be inherited by child objects. These keywords have received new names:
      acl_directory_inherit -> acl_default
      specify_inherit_aces -> specify_default_aces
      The old keywords are deprecated, but still valid. In addition, a new
      keyword "acl_inherit" controls inheritance behavior on Windows. This
      feature does not exist on Unix platforms. (Redmine #1832)
  - Networking code is moved from libpromises to its own library,
    libcfnet. Work has begun on making the API more sane and thread-safe.
    Lots of legacy code was removed.
  - Add getaddrinfo() replacement in libcompat (borrowed from PostgreSQL).
  - Replace old deprecated and non thread-safe resolver calls with
    getaddrinfo() and getnameinfo().
  - Hostname2IPString(), IPString2Hostname() are now thread-safe, and are
    returning error when resolution fails.
  - Running cf-execd --once now implies --no-fork, and also does not wait
    for splaytime to pass.
  - execresult(), returnszero() and commands promises no longer requires
    the first word
    word to be an absolute path when using the shell. (Part of Redmine #2143)
  - commands promises useshell attribute now accepts "noshell" and
    "useshell" values. Boolean values are accepted but deprecated. (Part of
    Redmine #2143)
  - returnszero() now correctly sets the class name in this scenario  (Part of
    Redmine #2143):
      classes:
        "commandfailed" not => returnszero("/bin/nosuchcommand", "noshell");

Bugfixes:
  - bundles are allowed to be empty (Redmine #2411)
  - Fixed '.' and '-' not being accepted by a commands module. (Redmine #2384)
  - Correct parsing of list variables by a command module. (Redmine #2239)
  - Fixed issue with package management and warn. (Redmine #1831)
  - Fixed JSON crash. (Redmine #2151)
  - Improved error checking when using fgets(). (Redmine #2451)
  - Fixed error message when deleting nonexistent files. (Redmine #2448)
  - Honor warn-only when purging from local directory. (Redmine #2162)
  - Make sure "restart" and "reload" are recognized keywords in
    packages. (Redmine #2468)
  - Allocate memory dynamically to avoid out-of-buffer or out-of-hash
    situations
  - fix edit_xml update of existing attributes  (Redmine #2034)
  - use failsafe policy from compile-time specified workdir (Redmine #1991)
  - ifvarclass checked from classes promises in common bundles
  - do not wait for splaytime when executing only once
  - disable xml editing functionality when libxml2 doesn't provide
    necessary APIs (Redmine #1937)
  - Out-of-tree builds should work again, fixed a bunch of related bugs.
  - Fixed race condition in file editing. (Redmine #2545)
  - Fixed memory leak in cf-serverd and others (Redmine #1758)

Approved by:	cy (maintainer, implicit)
ef33475c14
Glen Barber (gjb)
Implement the concept of a "master" port for the set of sysutils/cfengine* ports.

The idea here is two-fold:

 1.)  Users should not need to ever change port origins
      for a default software version bump;
 2.)  Users should expect to exist an unversioned port
      directory to reflect the latest major version (and
      they should be correct in this expectation).

With this change, users can install the sysutils/cfengine
port, and by default track the latest major version of the
software.  Subsequent version releases, for example the 3.5
branch, will not require any interaction from user side.

Additionally, users can stay on a certain branch release by
adding, in this case, CFENGINE_VERSION version to make.conf
or specifying the branch during build time with:

	# make CFENGINE_VERSION=NN

The list of available CFENGINE_VERSION values are listed
with:

	# make -V VERSIONS

Discussed with:		cy
0fda4454c6
Cy Schubert (cy)
Move cfengine ports to standardize namaing.

Submitted by:	gjb
8402c86ad4
Cy Schubert (cy) · 2.2.10
gjb@ and I will commit to the cfengine* ports. Both of us can be blamed for the goings on in this place.
59b496fc28
Cy Schubert (cy) · 2.2.10
Record conflict with cfengine 3.3.0.
ca935c286c
Doug Barton (dougb) · 2.2.10
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
83eb2c3700
Martin Wilke (miwi) · 2.2.10
- Get Rid MD5 support
a9481afc8a
Doug Barton (dougb) · 2.2.10
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#
1d6b4b3f91
Cy Schubert (cy) · 2.2.10
Update 2.2.9 --> 2.2.10

Take on maintainership of the port as the maintainer, Jo Rhett
<jrhett@netconsonance.com>, can no longer maintain this port.
e0ea97caa2