CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

x11-fm/caja1.28.0_5

File manager for the MATE desktop

Maintainer
gnome@FreeBSD.org
Packages
caja 1.28.0_5
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://mate-desktop.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (52)

Eric Turgeon (ericbsd) · 1.28.0_5
x11-fm/caja: remove unneeded USE_GITHUB and GH_ACCOUNT

Remove USE_GITHUB=nodefault and GH_ACCOUNT as they are not needed
with an explicit MASTER_SITES. Add back DIST_SUBDIR=mate.
52a6b1cc10
Eric Turgeon (ericbsd) · 1.28.0_5
x11-fm/caja: switch to GitHub release asset

Minor versions of 1.28.x are no longer published to the MATE mirror
and are only available on GitHub. Use USE_GITHUB=nodefault with a
release tarball instead of the auto-generated one, as recommended
by the porter's handbook.
82be656904
Baptiste Daroussin (bapt) · 1.28.0_4
multimedia/ffmpeg: bump revision to chase lib version change
18ea9c7108
Baptiste Daroussin (bapt) · 1.28.0_3
x11-fm/caja: remove unwanted files from the package

Since 6dd8c17a36d4e75a4fb0efae9874f2aa24693555 mime files have been
added to the plist, they are not supposed to be bundled in any package,
they are files which are generated by, and which life cycle is deal with
by the trigger provided by the shared-mime-info package.

As a result pkg check -s, keeps reporting those files have been altered.

PR:	277769
6b0dfac421
Baptiste Daroussin (bapt) · 1.28.0_2
libxml2: chase libxml soversion bump
3068854dd0
Eric Turgeon (ericbsd) · 1.28.0_1
x11-fm/caja: adding gvfs dependency
fadd76d554
Eric Turgeon (ericbsd) · 1.28.0
x11-fm/caja: updated to 1.28.0
6dd8c17a36
Muhammad Moinur Rahman (bofh) · 1.26.1_5
x11-fm/caja: Moved man to share/man

Approved by:    portmgr (blanket)
8a33de9ad8
Nuno Teixeira (eduardo) · 1.26.1_4
*/*: Bump consumers of x11-toolkits/gtk30

New version of gtk3 in tree
3572ca3e01
Daniel Engberg (diizzy) · 1.26.1_3
*/*: Bump all users of multimedia/ffmpeg*

...to make sure all picks up new version(s)
f7accb23bf
Christian Weisgerber (naddy) · 1.26.1_2
audio/opus: bump consumers after update to 1.4
feb1fa34f5
Tobias C. Berner (tcberner) · 1.26.1_1
accessibility/at-spi2-core: update to 2.46.0

What's new in at-spi2-core 2.46.0:
* Fix GetInterfaces documentation on org.a11y.atspi.Accessible
  interface.

What's new in at-spi2-core 2.45.91:
* Send device event controller events using the same signature as other
  events.
* Document the Accessible, Action, and Cache dbus interfaces.
* Fix license of atspi-gmain.c (#87).

What's new in at-spi2-core 2.45.90:
* xml: Add some documentation.
* xml: Fix event arguments.
* xml: Add some missing DeviceEventController methods.
* Bind the AT-SPI bus to the graphical session.
* Mark bus service as belonging to the session slice.
* Add ATSPI_ROLE_PUSH_BUTTON_MENU.
* Add an "announcement" event/signal to allow objects to send
  notifications (!63).
* Various code clean-ups and test improvements.

What's new in at-spi2-core 2.45.1:
* Atk and at-spi2-atk are now merged into this project.
* Now requires meson 0.56.2 and glib 2.67.4.
* at-spi2-atk: Expose the accessible hierarchy via dbus introspection.
* Properly escape the AT-SPI bus address; fixes warnings about the address
  not containing a colon (!55).
* Add a text value to AtspiValue, so that a value can expose a textual
  description, as in the new Atk value API.
* Add atspi_event_listener_register_with_app, to allow an event listener
  to be registered only for a given application (!52).

- accessibility/atk and accessibility/at-spi2-atk have been merged into
  accessibility/at-spi2-core

- accessibility/at-spi2-core: bump consumers of removed ports atk and at-spi2-atk

PR:		269704
Exp-run by:	antoine
---
fa81a4f5f8
Stefan Eßer (se) · 1.26.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.26.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.26.1
x11-fm: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Alejandro Pulver <alejandro@varnet.biz>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Anders Nordby <anders@fix.no>
  *  Beñat Gonzalez Etxepare <bbtruk@users.sourceforge.net>
  *  Geyer Klaus
  *  Gustau Perez i Querol <gustau.perez@gmail.com>
  *  Heiner <h.eichmann@gmx.de>
  *  Jens K. Loewe <bsd@tuxproject.de>
  *  Lars Engels <lars.engels@0x20.net>
  *  Martin Tournoij <carpetsmoker@xs4all.nl>
  *  Oliver Lehmann <oliver@FreeBSD.org>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Olivier Duchateau
  *  Rodrigo Osorio <rodrigo@freebsd.org>
  *  Simon Dick <simond@irrelevant.org>
  *  Zhihao Yuan <lichray@gmail.com>
  *  ade, archie
  *  lukin
  *  minoura@netbsd.org
  *  ptiJo
  *  trevor

With hat:	portmgr
ae1b9e306e
Eric Turgeon (ericbsd) · 1.26.1
x11-fm/caja: Updated to 1.26.1
f11bb9b69e
Eric Turgeon (ericbsd) · 1.26.0_5
x11-fm/caja: Adding ffmpegthumbnailer lib depends

related to ghostbsd/ghostbsd-src#202 issue
20bed4db92
Charlie Li (vishwin) · 1.26.0_4
textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
d63665f7cd
Matthias Fechner (mfechner) · 1.26.0_3
textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
247c7db751
Eric Turgeon (ericbsd) · 1.26.0_2
x11-fm/caja: fixed plist

PR: 258026
Reported by: Ting-Wei Lan
edb7e46dff
Eric Turgeon (ericbsd) · 1.26.0_1
x11-fm/caja: Fix pkg check checksum mismatch

PR:          258026
Reported by: Ting-Wei Lan
4dfd9ec0c5
Baptiste Daroussin (bapt) · 1.26.0
INSTALLS_ICONS: retire the macro and rework the related dependencies

While here, make sure gtk-update-icon-cache is only on run dependency
where added as a dependency
Enforce gtk3 to depend on gtk-update-icon-cache (previously it was
inheriting the dependency)
2c672a4de9
Neel Chauhan (nc) · 1.26.0
x11-fm/caja: Update to 1.26.0
71da3b59d1
Neel Chauhan (nc) · 1.26.0
x11-themes/mate-icon-theme: Update to 1.26.0
734788eb91
Tobias C. Berner (tcberner) · 1.24.1_1
textproc/exempi: update to 2.5.2

2.5.0

- Upgrade XMPCore to Adobe XMP SDK CC 2016.07
  - Support for iOS in XMPFiles
  - New DOM based API’s are added in XMP Core to access metadata tree
    hierarchy. (not exposed yet in Exempi)
  - Added support XMP/metadata in utf-8 encoded uncompressed SVG files in XMPFiles.
  - Added support of GIF handler in XMPFiles.
  - Added support for reconciliation of iXML’s TRACK_LIST and its components to get
    microphone data.
  - Added support for IFDs of type 13 in TIFF.
  - Added support for MPEG4 videos shot from Google Nexus 5 camera.
  - Restructured the implementation of XDCAM Handler to support File Access Mode (FAM)
    and Simple Access Mode (SAM)
  - Added inbuilt support for iXML namespace in XMPCore.
  - Modified the alias tiff:ImageDescription for dc:description as language alternative
    array instead of simple property.
  - Lot of bug fixes in XMPFiles and XMPCore.
- Removed Exempi provided support for GIF in favour of Adobe's.
- New: API NS_XML constant

Internal:

- Added tests for Adobe SDK.
- Fixed warnings and other issues and Adobe SDK.
- Compile with much more warnings enabled.

2.4.5 - 2018/03/07

- Bug #105204: [CVE-2018-7730] fix a buffer overflow in the PSD parser.
- Bug #105205: [CVE-2018-7728] fix a buffer overflow in the TIFF parser.
- Bug #105206: [CVE-2018-7729] fix a buffer overflow in PostScript parser.
- Bug #105247: [CVE-2018-7731] fix a null dereference in WEBP parser.

2.4.4 - 2018/02/04

- Bug #102197: Properly initialize pointers in WEBP.
- Bug #102151: Fix an infinite loop in RIFF parser.
- Bug #102483: Fix an infinite loop in QuickTime parser.
- Bug #102484: Fix an infinite loop in ASF parser.
- Bug #104885: Adjust minimum version for gcc in documentation.

2.4.3 - 2017/08/03

- Bug #100397: Fix a buffer overrun, memcpy() on overlapping
  regions, use after free in the exception handling.
- Bug #101913: Fix a fatal assert with corrupt WEBP.
- Bug #101914: Fix a crash on a corrupt file.

2.4.2 - 2017/01/29

- Properly define BanAllEntityUsage.
  See https://bugzilla.redhat.com/show_bug.cgi?id=888765

2.4.1 - 2017/01/23

- Bug #99494: Restore error reporting.

Internal:

- Added test for xmp_parse()
- Renamed test3 to testiterator and more comprehensive test for
  iterator to detect thing like bug 99480

Release notes:

- In 2.4.0 the XMP iterator corrected behaviour when used for
  XMP_ITER_JUSTLEAFNAME: The returned values are now set to they
  actual schema NS instead of the top level one.
  This required fixed in third party packages:
  https://github.com/python-xmp-toolkit/python-xmp-toolkit/issues/67
  This changes is the result of a bug fix in Adobe SDK.
  See bug #99480

2.4.0 - 2017/01/07

- Bug #89449: Upgrade XMPCore to Adobe XMP CC 2014.12.
  - New flag to optimize layout on MPEG4 files.
  - GoPro MPEG4 video files support.
  - Improved JPEG support.
  - iXML support in WAVE files.
  - Several bugs and memory leaks fixes.
  - Changes from Adobe XMP CC 2013.06.
    - Pluggable file handlers (not exposed yet in Exempi)
    - Support for Exif 2.3 properties
    - New RIFF file handler
    - Better Postscript support.
    - Lot of bug fixes.
- New API: added XMP_OPEN_OPTIMIZEFILELAYOUT for new SDK.
- Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
- New: WebP format handler (contributed: Frankie Dintino, The Atlantic)

Internal:

- Exempi is now automatically build and the test run by Travis CI.

2.3.0 - 2016/03/15

- New: API xmp_datetime_compare().
- New: API xmp_string_len() to get the length of the XmpString.
- Bug #94065:
  - New: API xmp_files_can_put_xmp_xmpstring() and xmp_files_can_put_xmp_cstr()
    variants.
  - New: API xmp_files_put_xmp_xmpstring() and xmp_files_put_xmp_cstr()
    variants.
  - New: API xmp_files_get_xmp_xmpstring() variant.
  - Test: check the status of the PDF handler.
- Bug #90380: Fix potential crash with corrupt TIFF file.
- Bug #14612: Better Solaris compilation fix.
- Fix header to pass -Wstrict-prototypes
7d8693d67b
Eric Turgeon (ericbsd) · 1.24.1
x11-fm/caja: updated to 1.24.1
ef44da3449
Mathieu Arnold (mat) · 1.24.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Baptiste Daroussin (bapt) · 1.24.0
Update caja 1.24.0 and its extensions to 1.24.1
8a4127f62f
Tobias C. Berner (tcberner) · 1.22.3_1
x11-fm/caja: fix build on recent current

Obtained from:	https://github.com/mate-desktop/caja/commit/6bf49f348d8ce6debc8f645b667422bb9a261a2b
6825ce59e3
Jan Beich (jbeich) · 1.22.3_1
x11-fm/caja: rebuild after r538621
8cec4d0244
Jan Beich (jbeich) · 1.22.3
x11-fm/caja: unbreak after r538621

ld: error: undefined symbol: mate_desktop_thumbnail_scale_down_pixbuf
>>> referenced by fm-properties-window.c
>>>               fm-properties-window.o:(update_preview_callback) in archive ../src/file-manager/.libs/libcaja-file-manager.a

Reported by:	pkg-fallout
Obtained from:	upstream
afdf5f3064
Eric Turgeon (ericbsd) · 1.22.3
update x11-fm/caja to 1.22.3
0cb8551cdd
Eric Turgeon (ericbsd) · 1.22.2
update x11-fm/caja to 1.22.2
b424138ba1
Niclas Zeising (zeising) · 1.22.1_1
Add USES=xorg USES=gl, ports categories x

Add USES=xorg and USES=gl to ports in categories starting with 'x'
While here, try to sprinkle other USES (mostly gnome and sdl) as needed.
4c46ca73d8
Gerald Pfeifer (gerald) · 1.22.1_1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Eric Turgeon (ericbsd) · 1.22.1
update mate desktop to 1.22.1

Approved by:	mentors (implicit)
999738615f
Dmitry Marakasov (amdmi3) · 1.20.2_1
- Fix LICENSE - Fix LICENSE_FILE_* - Update WWW

Approved by:	portmgr blanket
95d56bc092
Gerald Pfeifer (gerald) · 1.20.2_1
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Mark Linimon (linimon) · 1.20.2
Previous patch did not include adding gmake mate to USES.

PR:		232622
Reported by:	Piotr Kubaj
Approved by:	portmgr (tier-2 blanket)
3868b7426c
Mark Linimon (linimon) · 1.20.2
Add compiler:c11 to fix build with GCC-based architectures.

PR:		232622
Submitted by:	Piotr Kubaj
Approved by:	portmgr (tier-2 blanket)
e90bd0a194
Eric Turgeon (ericbsd) · 1.20.2
Updating MATE ports to and patch for MATE 1.20

Reviewed by:	kwm
Approved by:	bapt (mentor)
7d2d36aed6
Koop Mast (kwm) · 1.18.4_1
* Add post-release patch that reverts the columns autosizing. It makes   file-list view not very usefull, when dealing with long file names and   not fullscreen. * While here drop, obsolete patch.

Submitted by:	Barbara Guida <barbara.freebsd@gmail.com>
Obtained from:	caja upstream
d49ac08021
Koop Mast (kwm) · 1.18.4
Minor MATE 1.18 update.

Apart from version updates, the highlights are:
 * fix orphaned file issues in atril/atril-lite.
 * Add licenses where required.
 * make sure the mime xml gets installed in mate-control-center.
 * regen the m-c-c patch, with make makepatch.
2ab1cc5285
Koop Mast (kwm) · 1.18.3
Update the mate desktop to 1.18.

* The MATE DE is now GTK+3 based
* mate-calc has come back.
* New USE_MATE=mixer macro

* Add license
* Review dependancies
* Swich to USES=localbase
* atril/eom options reworked into option helper

Thanks to Eric Turgeon for submitting the bulk of this MATE update.

Obtained from:	gnome devel repo
0a7668c133
Mathieu Arnold (mat) · 1.12.4
Remove ${PORTSDIR}/ from dependencies, categories v, w, x, y, and z.

With hat:	portmgr
Sponsored by:	Absolight
72ea7e696b
Koop Mast (kwm) · 1.12.4
Update caja to 1.12.4.
7de8520bdb
Koop Mast (kwm) · 1.12.3
Update caja to 1.12.3.
c8c4aa69b3
Koop Mast (kwm) · 1.12.2
Update the MATE DE to 1.12.

* Still build MATE against gtk+ 2 due to gtk+ 3 support not ready
  for prime time.
* Fix loading of a number of applets. We rename a number of applets
  but didn't change the "config" files the "add applet to panel" dialog
  uses. [1]
* Unbreak the creation of new notes with the stickynotes applet [2]

PR:		205391 [1], 200349 [2]
Obtained from:	GNOME devel repo
310fc7eeb7
Koop Mast (kwm) · 1.10.3
Update caja to 1.10.3.
7592a6742a
Koop Mast (kwm) · 1.10.2
Update MATE DE to 1.10.0.

This MATE is still build agains GTK+2.
Sort USES here and there.
Replace mate-dialogs with zenity and mate-calc with galculator.

This update fixes the following PR's:
PR:		193942, 191885
Submitted by:	Gustau Perez <gustau.perez@gmail.com> via Gnome devel repo
Obtained from:	gnome devel repo.
b18513c396