CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

x11-toolkits/pango1.57.1

Open-source framework for the layout and rendering of i18n text

Maintainer
desktop@FreeBSD.org
Packages
pango 1.57.1
Upstream
Higher version available: 1.58.2
CPE
gnome:pango from the port
WWW
https://www.gtk.org/docs/architecture/pango
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (3)

Show 3 fixed
VuXML entries whose affected range this version has left.

Commits (210)

Gleb Popov (arrowd) · 1.57.1
x11-toolkits/pango: Update to 1.57.1
dd14f79362
Charlie Li (vishwin) · 1.56.4_1
x11-toolkits/pango: decouple MANPAGES from DOCS

MANPAGES_IMPLIES was set to not duplicate BUILD_DEPENDS lines, but
textproc/py-gi-docgen is not used for man page generation. Additionally,
note that DOCS generation with the current textproc/py-gi-docgen
may not be deterministic in certain conditions.

While here, use DISTVERSION.
5041038244
Gleb Popov (arrowd) · 1.56.4
x11-toolkits/pango: update to 1.56.4

Mark as TESTING_UNSAFE because one tests fails in Poudriere, but is reported
to pass outside of it.

PR:		289188
4d97d77196
Gleb Popov (arrowd) · 1.56.1
*: Adapt plists after gi-docgen update

PR:		285137
b87a776bb9
Jason E. Hale (jhale) · 1.56.1
x11-toolkits/pango: Update to 1.56.1

Avoid manual intervention for PLIST_SUB variables for the forseeable
future to ease maintenance. Upstream has been following a predictable
pattern in shared object naming for many years. Drop the VERSION sub; it
hasn't been used for 10+ years now.

Rename the custom THAI option to the standard LANG_TH option.

Whitespace-align blocks and fix tests.

https://gitlab.gnome.org/GNOME/pango/-/blob/1.56.1/NEWS
4efd0565e8
Charlie Li (vishwin) · 1.56.0
x11-toolkits/pango: update to 1.56.0

Changelog: https://gitlab.gnome.org/GNOME/pango/-/blob/1.56.0/NEWS

Account for overhauled man page generation as in under the rest of
documentation. Only test-fonts continues to fail.
0ecf1d8775
Tijl Coosemans (tijl) · 1.55.5
x11-toolkits/pango: Update to 1.55.5

PR:		283533
Reviewed by:	arrowd
6e803442dc
Po-Chuan Hsieh (sunpoet) · 1.52.2_1
x11-toolkits/pango: Fix PLIST

- While I'm here, sort PLIST
- Bump PORTREVISION for package change

PR:		279522,	279548
Approved by:	arrowd (desktop)
d3c709b70f
Tijl Coosemans (tijl) · 1.52.2
x11-toolkits/pango: Update to 1.52.2

PR:		279522
Reviewed by:	arrowd
af2c0a4d9b
Gleb Popov (arrowd) · 1.50.14
x11-toolkits/pango: Mark TESTING_UNSAFE
3746dd8ed7
Jan Beich (jbeich) · 1.50.14
x11-toolkits/pango: update to 1.50.14

Changes:	https://gitlab.gnome.org/GNOME/pango/-/blob/1.50.14/NEWS
Reported by:	Repology
3d3d8295af
Jan Beich (jbeich) · 1.50.9_1
x11-toolkits/pango: add another patch note for 10b57e848816

gtk_doc is boolean unlike other options with dependencies,
so "required" keyword behavior may be surprising.
e95730c67f
Jan Beich (jbeich) · 1.50.9_1
x11-toolkits/pango: respect PY_FLAVOR after 10b57e848816

Upstream uses gi-docgen via CLI instead of Python API.
cdbea1f394
Jan Beich (jbeich) · 1.50.9_1
x11-toolkits/pango: track libthai dependency

Error: /usr/local/lib/libpango-1.0.so.0.5000.9 is linked to /usr/local/lib/libthai.so.0 from devel/libthai but it is not declared as a dependency
Warning: you need LIB_DEPENDS+=libthai.so:devel/libthai

PR:		270361
732dd71418
Stefan Eßer (se) · 1.50.9
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.50.9
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.50.9
x11-toolkits/pango: update to 1.50.9

Changelog:
- Apply show flags to line separators
- Fix a thread-safety problem
184b6a8d72
Dima Panov (fluffy) · 1.50.8
x11-toolkits/pango: update to 1.50.8 release (+)

- Add some properties to fontmap and family
- Fix handling of ligature carets in mixed directions

Changelog:	https://gitlab.gnome.org/GNOME/pango/-/blob/1.50.8/NEWS

With hat:	desktop
58cb3c8e9e
Tobias C. Berner (tcberner) · 1.50.7
x11-toolkits: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  1wardd@airmail.net
  *  Alexander Kabaev <ak03@gte.com>
  *  Alexander Novitsky <alecn2002@yandex.ru>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Andreas Kohn <andreas@syndrom23.de>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Brian Buchanan <brian@CSUA.Berkeley.EDU>
  *  Cezary Morga <cm@therek.net>
  *  Cheng-Lung Sung <clsung@FreeBSD.org>
  *  Danilo Egea Gondolfo <danilo@FreeBSD.org>
  *  Dima Sivachenko <dima@Chg.RU>
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Eric Anholt <anholt@FreeBSD.org>
  *  Igor Pokrovsky <ip@doom.homeunix.org>
  *  James FitzGibbon <jfitz@FreeBSD.org>
  *  Jean-Sébastien Pédron <dumbbell@FreeBSD.org>
  *  Joe Marcus Clarke <marcus@FreeBSD.org>
  *  Juli Mallett
  *  Kenjiro Cho <kjc@csl.sony.co.jp>
  *  Kimura Fuyuki <fuyuki@hadaly.org>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Lars Koeller <Lars.Koeller@Uni-Bielefeld.de>
  *  Lubomir Marinov <lubomir_m@abv.bg>
  *  Marc Recht <marc@informatik.uni-bremen.de>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Martin Klaffenboeck <martin.klaffenboeck@gmx.at>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Michael Grünewald <michipili@gmail.com>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Mike Krutov <neko@takino.org>
  *  Mike Meyer <mwm@mired.org>
  *  Olivier Duchateau
  *  Paul Schmehl <pauls@utdallas.edu>
  *  Peter Hawkins <thepish@FreeBSD.org>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Radim Kolar
  *  Rene Ladan <rene@FreeBSD.org>
  *  Robert C. Noland III <rnoland@FreeBSD.org>
  *  Simon Barner <barner@gmx.de>
  *  Stephane Legrand <stephane@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Tom McLaughlin <tmclaugh@sdf.lonestar.org>
  *  Vanilla I. Shu <vanilla@MinJe.com.TW>
  *  Will Andrews <andrews@technologist.com>
  *  Yukihiro Nakai <nakai@FreeBSD.org>
  *  Zane C, Bowers <vvelox@vvelox.net>
  *  asami
  *  chinsan
  *  chuckr
  *  clsung@dragon2.net
  *  dmitry@karasik.eu.org
  *  fjoe@FreeBSD.org
  *  gahr
  *  gena
  *  ijliao
  *  mi
  *  minter@lunenburg.org
  *  nivit@users.sourceforge.net
  *  ports@c0decafe.net
  *  roland.jesse@gmx.net
  *  thierry@pompo.net
  *  vanilla

With hat:	portmgr
71b6a9f9c7
Tobias C. Berner (tcberner) · 1.50.7
x11-toolkits/pango: update to 1.50.7

Changelog: https://gitlab.gnome.org/GNOME/pango/-/blob/1.50.7/NEWS
	- coretext: Fix the build
	- editing: Fix moving across paragraph boundaries in rtl
	- layout: Try harder to survive without fonts
	- Windows: Register a sans-serif font
	- Windows: Try harder to load a font
04268f78bf
Adriaan de Groot (adridg) · 1.50.6_1
x11-toolkits/pango: fix plist issues

plist changes that were landed for the update in documentation-
generation were missing options flags; some X11-stuff was listed
unconditionally.

(driesm@ already fixed this in the meantime, now I'm just sorting
the files in the %%X11%% option part)

PR:		263199
Reported by:	driesm
ea21453f2f
Dries Michiels (driesm) · 1.50.6_1
x11-toolkits/pango: Fix build with X11=off

Approved by:	portmgr (blanket)
6bbce33d11
Adriaan de Groot (adridg) · 1.50.6_1
textproc/py-gi-docgen: update to 2022.1

Bump gi-docgen; the patch to docgen is entirely from Olivier,
the dependent ports that get a bump and a plist-fix is from me.

Consumers have PORTREVISION bumped to reflect changes in plist:
- pygment.css is no longer installed
- more fonts .woff files are installed

Obtained from:	Olivier Duchateau
PR:		263199
6955217997
Jan Beich (jbeich) · 1.50.6
x11-toolkits/pango: update to 1.50.6

Changes:	https://gitlab.gnome.org/GNOME/pango/-/blob/1.50.6/NEWS
Reported by:	Repology
739c834768
Tobias C. Berner (tcberner) · 1.50.5
x11-toolkits/pango: update to 1.50.5

Changelog:
	* Fix compiler warnings
	* Enable cairo by default
	* pango-view: Show more baselines
	* layout: Handle baselines
	* Windows: build cleanups

Noteable changes:
	- documentation is no longer installed into the subdirectory
	  reference/

Exp-run by:	antoine
PR:		262382
26e2d945da
Tobias C. Berner (tcberner) · 1.50.4
x11-toolkits/pango: update to 1.50.4

Changelog:
	* Tweak synthetic space sizes
	* itemize: Try harder to avoid NULL fonts
	* docs: Some additions
	* Pass synthetic slant to harfbuzz
	* Make sloped carets work with uneven scales
	* Fix serialiation on arm
	* Avoid an uninitialized variable warning
	* Reinstate previous behavior of pango_attr_list_splice
	* Deprecated pango_coverage_ref/unref
	* Fix serialization on non-glibc systems
	* Fix allow-breaks handling

PR:		261857
Exp-run by:	antoine
ef7c9a20ac
Jan Beich (jbeich) · 1.50.3
x11-toolkits/pango: update to 1.50.3

Changes:	https://gitlab.gnome.org/GNOME/pango/-/blob/1.50.3/NEWS
PR:		260916
Exp-run by:	antoine
Approved by:	tcberner
47d5c85115
Jan Beich (jbeich) · 1.48.10
x11-toolkits/pango: update to 1.48.10

Changes:	https://gitlab.gnome.org/GNOME/pango/-/blob/1.48.10/NEWS
MFH:		2022Q1
5f834260a9
Emmanuel Vadot (manu) · 1.48.7
x11-toolkits/pango: Add MANPAGES option

And only install manpages if it's selected.

Reviewed by:	 desktop (tcberner@)
Differential Revision:	  https://reviews.freebsd.org/D32904
Sponsored by:   Beckhoff Automation GmbH & Co. KG
c9c0217427
Bernhard Froehlich (decke) · 1.48.7
x11-toolkits/pango: Add CPE information

Approved by:	portmgr (blanket)
4174602fd1
Baptiste Daroussin (bapt) · 1.48.7
x11-toolkits/pango: update to 1.48.7
32fd89dd6a
Tobias C. Berner (tcberner) · 1.48.4_1
textproc/gi-docgen: rename to textproc/py-gi-docgen

- x11-toolkits/libadwaita: update dependency on moved textproc/py-gi-docgen port
- x11-toolkits/pango: update dependency on moved textproc/py-gi-docgen port

PR:		256161
5a86d2123f
Tobias C. Berner (tcberner) · 1.48.4
x11-toolkits/pango: fix DOCS option

- Disable the bundled gi-docgen, when gi-docgen is not installed,
  a fallback bundled version of it could be built when python3 is found.

PR:		256161
Reported by:	tech-lists@zyxst.net
Pointy hat:	nc
10b57e8488
Neel Chauhan (nc) · 1.48.4
x11-toolkits/pango: Update to 1.48.4

Differential Revision: https://reviews.freebsd.org/D29794
57d1c31a5e
Mathieu Arnold (mat) · 1.42.4_5
Remove # $FreeBSD$ from Makefiles.
305f148f48
Niclas Zeising (zeising) · 1.42.4_5
x11/toolcits-pango: Actually apply security patch

Rename the patch that fixes CVE-2010-1010238 so that it is actually applied
when  building pango.
Regenerate it using make makepatch
bump portrevision

Reported by:	tobik
MFH:		2020Q3 (implicit, security fix)
Security:	456375e1-cd09-11ea-9172-4c72b94353b5
1826799e9e
Tobias C. Berner (tcberner) · 1.42.4_4
Move some gnome@ ports to desktop@

As gnome@ is lacking active committers at the moment, transfer some of its
ports [1] up the stack to the desktop@ group, in hope that this way we get some
updates in as the set of people that "should feel responsible" grows.

As soon as gnome@ grows some committers again, this can (and should) of course
be reverted again.

[1] The list of ports chosen in this move consits of all the ports that are
required to build x11/kde5.

Approved by:	portmgr (bapt)
Differential Revision:	https://reviews.freebsd.org/D26362
28bac6ebdd
Jochen Neumeister (joneum) · 1.42.4_4
SECURITY UPDATE: Buffer overflow

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.

PR:		239563
Reported by:	Miyashita Touka <imagin8r@protonmail.com>
Approved by:	gnome (maintainer timeout)
MFH:		2020Q3
Security:	456375e1-cd09-11ea-9172-4c72b94353b5
Sponsored by:	Netzkommune GmbH
1c23198fba
Steve Wills (swills) · 1.42.4_3
x11-toolkits/pango: improve docs/meson.build

No change to package, so no PORTREVISION bump

PR:		237822
Submitted by:	John Hein <jcfyecrayz@liamekaens.com>
Approved by:	gnome@ (maintainer timeout, > 3 weeks)
7b3b572b00
Steve Wills (swills) · 1.42.4_3
x11-toolkits/pango: fix build with DOCS=ON X11=OFF

PR:		237822
Submitted by:	Walter Schwarzenfeld <w.schwarzenfeld@utanet.at>
Approved by:	gnome@ (kwm, via IRC)
25ad830fdb
Niclas Zeising (zeising) · 1.42.4_3
Sprinkle some more USES=xorg
6329fb0053
Gerald Pfeifer (gerald) · 1.42.4_3
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Mathieu Arnold (mat) · 1.42.4_2
Rename the GTKDOC option to DOCS.

First, all those ports should also have had a DOCS option that would
have guarded the GTKDOC option, and then textproc/gtk-doc is pretty
light and does not warrant a separate option.

Discussed with:	portmgr
Approved by:	portmgr
e1ce905577
Gerald Pfeifer (gerald) · 1.42.4_1
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Mark Linimon (linimon) · 1.42.4
To fix undefined reference to `__cxa_throw_bad_array_new_length@CXXABI_1.3.8', add compiler:c11 to USES.

PR:		218131
Submitted by:	Hiroo Ono <hiroo.ono plus freebsd at gmail dot com>
Approved by:	portmgr (tier-2 blanket)
6eb9ede3fa
Koop Mast (kwm) · 1.42.4
The FreeBSD GNOME team proudly presents GNOME 3.28 for FreeBSD.

The offical GNOME 3.28 release notes can be found at
https://help.gnome.org/misc/release-notes/3.28/

Thanks to Antoine Brodin for running the exp-runs.

PR:		229761
951c1f5d1c
Baptiste Daroussin (bapt) · 1.42.0
Update to 1.42.0
032fea6057
Koop Mast (kwm) · 1.40.6
Update pango to 1.40.6.

* Convert X11 option to option helpers
* Drop BUILD_DEPENDS version checks on fontconfig and cairo. These
  versions been in ports for long enough.
f5f3a852c0
Baptiste Daroussin (bapt) · 1.40.4
update to 1.40.4
2cfb4389ec
Jan Beich (jbeich) · 1.38.0_1
Apply r402343 to other gnome@ ports restoring r297047 behavior

- Invoke pkg-config(1) instead of checking manually
- Convert to ECHO_MSG which can be silenced

PR:		166279
Approved by:	portmgr blanket
MFH:		2016Q3
9057d20bd5