CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

x11-fm/nemo6.4.5_5

File manager for the Cinnamon desktop

Maintainer
gnome@FreeBSD.org
Packages
nemo 6.4.5_5
Upstream
Higher version available: 6.6.4
CPE
none, CVEs only via VuXML
WWW
https://github.com/linuxmint/nemo
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (47)

Gleb Popov (arrowd) · 6.4.5_5
*: Bump PORTREVISION on Poppler's consumers
7ddc6804bf
Charlie Li (vishwin) · 6.4.5_4
graphics/py-pycairo: bump RUN_DEPENDS consumers after rename
a20e21b55c
Charlie Li (vishwin) · 6.4.5_3
graphics/py-pycairo: rename and update to 1.29.0

Changelog: https://pycairo.readthedocs.io/en/latest/changelog.html#v1-29-0

Notably, experimental support for free-threaded Python (3.13t, soon 3.14t)

Port and PKGNAME renamed to match Python package metadata, and to
properly build with USE_PYTHON=pep517. Test suite also now exposed.
Remove PORTSCOUT since this does not follow the even-odd version
split.
b01ea745e9
Loïc Bartoletti (lbartoletti) · 6.4.5_3
graphics/poppler: bump consumers of graphics/poppler

PR:		291277
Exp-run by:	antoine
3076d31cda
Charlie Li (vishwin) · 6.4.5_2
x11-fm/nemo: rearrange, add TRACKER option
be4f690a22
Rene Ladan (rene) · 6.4.5_1
all: bump PORTREVISION after updating graphics/libyuv

Using the Tools/scripts/bump_revision.pl script
b304d8ab18
Gleb Popov (arrowd) · 6.4.5
x11-fm/nemo: Update to 6.4.5

PR:		288177
ee7bef2436
Baptiste Daroussin (bapt) · 5.4.2_7
libxml2: chase libxml soversion bump
3068854dd0
Charlie Li (vishwin) · 5.4.2_6
gnome.mk: rename gdkpixbuf2 to gdkpixbuf to prepare for port move

The GTK 1-based gdk-pixbuf has not existed for some time.

No functional or package changes.
e87d8134a3
Baptiste Daroussin (bapt) · 5.4.2_6
gnome: remove tracker2

Tracker2 has long ago been replaced by tracker3 which is also gone now
and replaced by tinysparql.

Tracker2 is creating some complication for many ports (including
grilo-plugins) when installed, considering it not supported anymore,
just remove it instead of fighting it in each related port
493e48d247
Charlie Li (vishwin) · 5.4.2_5
devel/py-pygobject: bump consumer PORTREVISIONs after port rename

With hat: gnome
PR: 273722
32a55d206d
Robert Clausecker (fuz) · 5.4.2_4
filesystems: add new category for file systems and related utilities

The filesystems category houses file systems and file system utilities.
It is added mainly to turn the sysutils/fusefs-* pseudo-category into
a proper one, but is also useful for the sundry of other file systems
related ports found in the tree.

Ports that seem like they belong there are moved to the new category.
Two ports, sysutils/fusefs-funionfs and sysutils/fusefs-fusepak are
not moved as they currently don't fetch and don't have TIMESTAMP set
in their distinfo, but that is required to be able to push a rename
of the port by the pre-receive hook.

Approved by:	portmgr (rene)
Reviewed by:	mat
Pull Request:	https://github.com/freebsd/freebsd-ports/pull/302
PR:		281988
6e2da9672f
Muhammad Moinur Rahman (bofh) · 5.4.2_4
*/*: Sanitize MANPREFIX for meson ports

Approved by:	portmgr
9f8f710b3e
Nuno Teixeira (eduardo) · 5.4.2_3
*/*: Bump consumers of x11-toolkits/gtk30

New version of gtk3 in tree
3572ca3e01
Christian Weisgerber (naddy) · 5.4.2_2
audio/opus: bump consumers after update to 1.4
feb1fa34f5
Tobias C. Berner (tcberner) · 5.4.2_1
accessibility/at-spi2-core: update to 2.46.0

What's new in at-spi2-core 2.46.0:
* Fix GetInterfaces documentation on org.a11y.atspi.Accessible
  interface.

What's new in at-spi2-core 2.45.91:
* Send device event controller events using the same signature as other
  events.
* Document the Accessible, Action, and Cache dbus interfaces.
* Fix license of atspi-gmain.c (#87).

What's new in at-spi2-core 2.45.90:
* xml: Add some documentation.
* xml: Fix event arguments.
* xml: Add some missing DeviceEventController methods.
* Bind the AT-SPI bus to the graphical session.
* Mark bus service as belonging to the session slice.
* Add ATSPI_ROLE_PUSH_BUTTON_MENU.
* Add an "announcement" event/signal to allow objects to send
  notifications (!63).
* Various code clean-ups and test improvements.

What's new in at-spi2-core 2.45.1:
* Atk and at-spi2-atk are now merged into this project.
* Now requires meson 0.56.2 and glib 2.67.4.
* at-spi2-atk: Expose the accessible hierarchy via dbus introspection.
* Properly escape the AT-SPI bus address; fixes warnings about the address
  not containing a colon (!55).
* Add a text value to AtspiValue, so that a value can expose a textual
  description, as in the new Atk value API.
* Add atspi_event_listener_register_with_app, to allow an event listener
  to be registered only for a given application (!52).

- accessibility/atk and accessibility/at-spi2-atk have been merged into
  accessibility/at-spi2-core

- accessibility/at-spi2-core: bump consumers of removed ports atk and at-spi2-atk

PR:		269704
Exp-run by:	antoine
---
fa81a4f5f8
Charlie Li (vishwin) · 5.4.2
x11/cinnamon: update to 5.4

Components:
- lang/cjs to 5.4.1
- misc/cinnamon-translations to 5.4.2
- sysutils/cinnamon-control-center to 5.4.6
- sysutils/cinnamon-settings-daemon to 5.4.4
- x11-fm/nemo to 5.4.2
- x11-wm/muffin to 5.4.5
- x11/cinnamon-desktop to 5.4.2
- x11/cinnamon-menus to 5.4.0
- x11/cinnamon-screensaver to 5.4.2
- x11/cinnamon-session to 5.4.0
- x11/cinnamon to 5.4.9
- x11/py-python-xapp to 2.2.2
- x11/xapp to 2.2.14

5.6 is the latest upstream release; this is a stopgap to reduce
delta.

Reviewed by: tcberner (desktop)
Differential Revision: https://reviews.freebsd.org/D37917
2d87115f8c
Stefan Eßer (se) · 4.8.3_3
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 4.8.3_3
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 4.8.3_3
x11-fm: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Alejandro Pulver <alejandro@varnet.biz>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Anders Nordby <anders@fix.no>
  *  Beñat Gonzalez Etxepare <bbtruk@users.sourceforge.net>
  *  Geyer Klaus
  *  Gustau Perez i Querol <gustau.perez@gmail.com>
  *  Heiner <h.eichmann@gmx.de>
  *  Jens K. Loewe <bsd@tuxproject.de>
  *  Lars Engels <lars.engels@0x20.net>
  *  Martin Tournoij <carpetsmoker@xs4all.nl>
  *  Oliver Lehmann <oliver@FreeBSD.org>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Olivier Duchateau
  *  Rodrigo Osorio <rodrigo@freebsd.org>
  *  Simon Dick <simond@irrelevant.org>
  *  Zhihao Yuan <lichray@gmail.com>
  *  ade, archie
  *  lukin
  *  minoura@netbsd.org
  *  ptiJo
  *  trevor

With hat:	portmgr
ae1b9e306e
Charlie Li (vishwin) · 4.8.3_3
textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
d63665f7cd
Matthias Fechner (mfechner) · 4.8.3_2
textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
247c7db751
Tobias Kortkamp (tobik) · 4.8.3_1
*: apply refactor.remove-consecutive-empty-lines

Submitted by:	portedit
ce1af7fdc2
Baptiste Daroussin (bapt) · 4.8.3_1
INSTALLS_ICONS: retire the macro and rework the related dependencies

While here, make sure gtk-update-icon-cache is only on run dependency
where added as a dependency
Enforce gtk3 to depend on gtk-update-icon-cache (previously it was
inheriting the dependency)
2c672a4de9
Tobias C. Berner (tcberner) · 4.8.3_1
textproc/exempi: update to 2.5.2

2.5.0

- Upgrade XMPCore to Adobe XMP SDK CC 2016.07
  - Support for iOS in XMPFiles
  - New DOM based API’s are added in XMP Core to access metadata tree
    hierarchy. (not exposed yet in Exempi)
  - Added support XMP/metadata in utf-8 encoded uncompressed SVG files in XMPFiles.
  - Added support of GIF handler in XMPFiles.
  - Added support for reconciliation of iXML’s TRACK_LIST and its components to get
    microphone data.
  - Added support for IFDs of type 13 in TIFF.
  - Added support for MPEG4 videos shot from Google Nexus 5 camera.
  - Restructured the implementation of XDCAM Handler to support File Access Mode (FAM)
    and Simple Access Mode (SAM)
  - Added inbuilt support for iXML namespace in XMPCore.
  - Modified the alias tiff:ImageDescription for dc:description as language alternative
    array instead of simple property.
  - Lot of bug fixes in XMPFiles and XMPCore.
- Removed Exempi provided support for GIF in favour of Adobe's.
- New: API NS_XML constant

Internal:

- Added tests for Adobe SDK.
- Fixed warnings and other issues and Adobe SDK.
- Compile with much more warnings enabled.

2.4.5 - 2018/03/07

- Bug #105204: [CVE-2018-7730] fix a buffer overflow in the PSD parser.
- Bug #105205: [CVE-2018-7728] fix a buffer overflow in the TIFF parser.
- Bug #105206: [CVE-2018-7729] fix a buffer overflow in PostScript parser.
- Bug #105247: [CVE-2018-7731] fix a null dereference in WEBP parser.

2.4.4 - 2018/02/04

- Bug #102197: Properly initialize pointers in WEBP.
- Bug #102151: Fix an infinite loop in RIFF parser.
- Bug #102483: Fix an infinite loop in QuickTime parser.
- Bug #102484: Fix an infinite loop in ASF parser.
- Bug #104885: Adjust minimum version for gcc in documentation.

2.4.3 - 2017/08/03

- Bug #100397: Fix a buffer overrun, memcpy() on overlapping
  regions, use after free in the exception handling.
- Bug #101913: Fix a fatal assert with corrupt WEBP.
- Bug #101914: Fix a crash on a corrupt file.

2.4.2 - 2017/01/29

- Properly define BanAllEntityUsage.
  See https://bugzilla.redhat.com/show_bug.cgi?id=888765

2.4.1 - 2017/01/23

- Bug #99494: Restore error reporting.

Internal:

- Added test for xmp_parse()
- Renamed test3 to testiterator and more comprehensive test for
  iterator to detect thing like bug 99480

Release notes:

- In 2.4.0 the XMP iterator corrected behaviour when used for
  XMP_ITER_JUSTLEAFNAME: The returned values are now set to they
  actual schema NS instead of the top level one.
  This required fixed in third party packages:
  https://github.com/python-xmp-toolkit/python-xmp-toolkit/issues/67
  This changes is the result of a bug fix in Adobe SDK.
  See bug #99480

2.4.0 - 2017/01/07

- Bug #89449: Upgrade XMPCore to Adobe XMP CC 2014.12.
  - New flag to optimize layout on MPEG4 files.
  - GoPro MPEG4 video files support.
  - Improved JPEG support.
  - iXML support in WAVE files.
  - Several bugs and memory leaks fixes.
  - Changes from Adobe XMP CC 2013.06.
    - Pluggable file handlers (not exposed yet in Exempi)
    - Support for Exif 2.3 properties
    - New RIFF file handler
    - Better Postscript support.
    - Lot of bug fixes.
- New API: added XMP_OPEN_OPTIMIZEFILELAYOUT for new SDK.
- Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
- New: WebP format handler (contributed: Frankie Dintino, The Atlantic)

Internal:

- Exempi is now automatically build and the test run by Travis CI.

2.3.0 - 2016/03/15

- New: API xmp_datetime_compare().
- New: API xmp_string_len() to get the length of the XmpString.
- Bug #94065:
  - New: API xmp_files_can_put_xmp_xmpstring() and xmp_files_can_put_xmp_cstr()
    variants.
  - New: API xmp_files_put_xmp_xmpstring() and xmp_files_put_xmp_cstr()
    variants.
  - New: API xmp_files_get_xmp_xmpstring() variant.
  - Test: check the status of the PDF handler.
- Bug #90380: Fix potential crash with corrupt TIFF file.
- Bug #14612: Better Solaris compilation fix.
- Fix header to pass -Wstrict-prototypes
7d8693d67b
Mathieu Arnold (mat) · 4.8.3
Remove # $FreeBSD$ from Makefiles.
305f148f48
Tobias C. Berner (tcberner) · 4.8.3
x11-fm/nemo: update to 4.8.3
46fe03c42d
Piotr Kubaj (pkubaj) · 4.8.2
x11-fm/nemo: fix build on GCC architectures
d95dbada95
Rene Ladan (rene) · 4.8.2
Upgrade the Cinnamon desktop environment to version 4.8

This version uses Python 3 instead of the expired Python 2.7

From the main PR (249856):

" There are a couple known issues:
  * x11-fm/nemo crashes upon closing a window or tab.
  * x11/cinnamon-screensaver unlocking doesn't work, most likely due to a missing PAM (Linux-PAM?) integration.
  Both of these issues are being worked on.

  I've been dogfooding since Cinnamon 4.0, and apart from those issues, everything works."

PR:		249771
PR:		249851
PR:		249855
PR:		249856
PR:		249857
PR:		249858
Submitted by:	Charlie Li
474895cdb6
Baptiste Daroussin (bapt) · 2.4.5_5
First batch at upgrading gnome to 3.36/3.38

Update evolution-dataserver to 3.38.0 and because of ABI breakage update ports
depending on it
Update bijiben to 3.38.0
Update gnome-calendar to 3.38.0
Update gnome-contacts to 3.38
Update gnome-maps to 3.38.0
Patch gnome-todo to work with newer evolution-dataserver (patched obtained from
    OpenBSD/Archlinux)
Update evolution to 3.38.0
Update evolution-ews to 3.38.0 (among changes it brings support for office365)
Update folks to 0.14.0

Update cheese to 3.38.0
Update aisleriot to 3.22.9
Update five-or-more to 3.22.2
Update fastream to 0.2.9
Update gnome-control-center to 3.36.4
Update gnmoe-settings-daemon to 3.38.0
Update meld to 3.21.0

Update gnome-desktop to 3.38.0 and because of ABI breakage bump portrevision of
all dependant ports not touched by this update
Update gnome-session to 3.38.0
Update gnome-shell to 3.36.6, now run depends on gdm
Update gnome-shell-extensions to 3.36.3
Update mutter to 3.36.6
8a016444ba
Tobias C. Berner (tcberner) · 2.4.5_4
x11-fm/nemo: fix build on current

based on the patch added to x11-fm/nautilus
afe72edb94
Tobias Kortkamp (tobik) · 2.4.5_4
x11*: Add missing USES={gl,gnome,mate}
b132573e49
Gerald Pfeifer (gerald) · 2.4.5_4
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Gerald Pfeifer (gerald) · 2.4.5_3
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Koop Mast (kwm) · 2.4.5_2
The FreeBSD GNOME team proudly presents GNOME 3.28 for FreeBSD.

The offical GNOME 3.28 release notes can be found at
https://help.gnome.org/misc/release-notes/3.28/

Thanks to Antoine Brodin for running the exp-runs.

PR:		229761
951c1f5d1c
Mark Linimon (linimon) · 2.4.5_1
Fix build on gcc-based archs.

Tested on powerpc64 and amd64.

Approved by:	portmgr (tier-2 blanket)
022ec88b2e
Antoine Brodin (antoine) · 2.4.5_1
Reduce dependency on the python2 metaport

PR:		225752
Submitted by:	Yasuhiro KIMURA
f7455240e3
Antoine Brodin (antoine) · 2.4.5
- Those ports fail to build with python3 - Add some explicit FLAVOR to dependencies where needed
a021c1b8c0
Mathieu Arnold (mat) · 2.4.5
Use USES=pathfix where applicable.

PR:		213195
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D8093
a0bcd2cf68
Mathieu Arnold (mat) · 2.4.5
Remove ${PORTSDIR}/ from dependencies, categories v, w, x, y, and z.

With hat:	portmgr
Sponsored by:	Absolight
72ea7e696b
Jimmy Olgeni (olgeni) · 2.4.5
Remove trailing whitespace from Makefiles, M-X.
eb8748beda
Mathieu Arnold (mat) · 2.4.5
Replace most occurences of github.com in MASTER_SITES with USE_GITHUB usage.

With hat:	portmgr
Sponsored by:	Absolight
f29a218fcd
Koop Mast (kwm) · 2.4.5
Update the cinnamon stack to the latest in the 2.4 series.

sysutils/cinnamon-settings-daemon to 2.4.3.
x11/cinnamon to 2.4.6.
x11/cinnamon-screensaver to 2.4.1.
x11/cinnamon-session to 2.4.3.
x11-fm/nemo to 2.4.5.
x11-wm/muffin to 2.4.4.

Switch cinnamon to py-pillow instead of py-imaging which seems to be
  discontinued upstream.

Thanks to Gustau Pérez <gustau.perez@gmail.com> for helping to kee
  these ports updated.

Obtained from:	GNOME dev repo
baab8cbbbb
John Marino (marino) · 2.4.4
6 ports categories: Remove $PTHREAD_LIBS

Categories: cad, devel, java, x11-fm, biology, deskutils

approved by:	PTHREAD blanket
64ee7e63bf
Koop Mast (kwm) · 2.4.4
Update cinnamon to 2.4, this should fix [1] and [2]. Update totem to 3.14 now that we have gstreamer 1.4 and minor gnome updates. Update evolution suite to 3.12.9. Make sure gtk30 pulls in adwait-icon-theme, since it now the default theme [3].

PR:		195290 [1], 195289 [2], 195455 [3]
Obtained from:	gnome devel repo
b28f497285
Koop Mast (kwm) · 2.2.4_1
Fix package list by including symlink too, so nemo can run.

Submitted by:	Charles Cowart <ucsdboy@gmail.com>
3eecbedd9f
Koop Mast (kwm) · 2.2.4
The FreeBSD GNOME team proudly presents GNOME 3.14 and Cinnamon 2.2. Gnome 3.14.1 and Cinnamon 2.2.16 are supported on FreeBSD 9.3-RELEASE and up.

This commit removes the old GNOME 2 desktop, bindings and some ports that
can't be compiled. A few ports where updated to more recent versions to
allow them to compile with this update.

Apart from updating ports to newer versions

GDM is more integrated with gnome-shell now, and handles several things for
the GNOME desktop such as screen locking. If you want to use GNOME 3 via
startx, you will have to add your own lock screen/screensaver. For example xscreensaver
can be used for sessions started without GDM.

Shell Extensions can be installed via https://extensions.gnome.org/ , we have
ported a few that can't be installed via this way.
The old gnome-utils and gnome-games ports where split up into single ports
and where converted to meta-ports.
gnome-terminal requires a UTF-8 locale to run, gdm handles this already, but
if you use startx you need to do this yourself.

Upgrade instructions:

Delete the old and conflicting packages:
# pkg delete clutter gnome-utils gnome-panel gnome-keyring vala-vapigen \
    guile gcalctool gnome-media libgnomekbd
# pkg delete gnome-screensaver gnome-applets bug-buddy evolution-exchange \
    evolution-webcal gnome-system-tools seahorse-plugins gnome-control-center

For package users the following lines will be enough:
# pkg upgrade
# pkg install gnome3

For ports users should do the following:
# portmaster -a
# portmaster x11/gnome3

We are currently aware of two issues. The first issue is a bug in the
file monitoring code in the glib20 port. This bug causes glib programs
to crash when files in a monitored directory are added or removed.
Upstream is aware of the problem, but since the problem is quite complex
there is no solution yet. This problem isn't restricted to BSD.

The second issue is that on certain video cards totem will display a
purple/pink overlay on the video. It not clear yet where the issues
comes from.

Major thanks goes to Gustau Perez for being a driving force behind getting
GNOME 3 up to speed again. Also thanks to Antoine Brodin for running the exp-runs.

This update was also made possible by:
	Joe Maloney
	Kris Moore
	Beeblebrox
	Ryan Lortie
	Antoine Jacoutot
	and everyone I missed
af3811313c