CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

x11/cde2.5.3_3

Common Desktop Environment

Maintainer
cy@FreeBSD.org
Packages
cde 2.5.3_3
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://sourceforge.net/p/cdesktopenv/wiki/Home/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (41)

Baptiste Daroussin (bapt) · 2.5.3_3
databases/lmdb: allow to install both 0.x and 1.x together

LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.

Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
  liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc

A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.

Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.

Approved by:	mat (portmgr)
Reviewed by:	mat
Differential Revision:	https://reviews.freebsd.org/D60741
85ba298b7e
Xin LI (delphij) · 2.5.3_2
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530
5f9d389f29
Cy Schubert (cy) · 2.5.3_1
x11/cde*: Work around bus errors and looping CDE apps

-O2 optimization is too aggressive for CDE. Scaling it back to -O
eliminates bus errors on some systems and dtcalc looping with the
error, *** M .LE. T IN CALL TO MPCHK.

Reported by:	Jeremy Doolin <jrdoolin@pm.me>
MFH:		2026Q2
fa43a93555
Cy Schubert (cy) · 2.5.3
x11/cde: Update to 2.5.3
190b450717
Cy Schubert (cy) · 2.5.2_7
x11/cde*: Remove unused iconv dependencies

CDE only uses iconv.h. It does not need libiconv nor does it need binconv.
Remove the redundant dependencies.

Reported by:		arrowd
Initial patcy by:	arrowd
PR:			290743
MFH:			2025Q4
5df36de6d3
Cy Schubert (cy) · 2.5.2_6
x11/cde*: Enable locale support

Requested by:	Marco Moock <mm@dorfdsl.de>
3b3dc4bf42
Cy Schubert (cy) · 2.5.2_5
x11/cde*: Expand %%DATADIR%%

Replace %%DATADIR%% with actual pathname.
5042d48e10
Cy Schubert (cy) · 2.5.2_5
x11/cde*: Remove testing artifacts

At one point we supported installing multipe versions of CDE
simultaneously. Remove these artifacts.
dd9bec4424
Cy Schubert (cy) · 2.5.2_5
x11/cde: Replace x11/cde with x11/cde-25

Remove x11/cde and rename x11/cde-25 to x11/cde.
6c4fb8f7fb
Rene Ladan (rene)
x11/cde: Remove cde-24 from the version list after its removal.
9a8e0635d7
Cy Schubert (cy)
x11/cde: Make cde-25 default

Upstream commit 9af0993de added font aliases, specifically gb2312.1980,
which may be incompatible with some legacy Xm and Xaw apps however there
is a circumvention recommended by the cdesktopenv-code upstream. That is
to add -xrm '*international: true' to the affected app's arguments. A more
elegant approach is to create a ~/.Xdefaults file containing the following
example:

XPostit.*international: false
*international: true
815db75cae
Cy Schubert (cy)
x11/cde-25: Introduce the new x11/cde-25

CDE 2.5.0 has many improvements however some users may discover that
fonts used by legacy Xm and Xaw apps are unreadable due to legacy apps
using the gb2312.1980 font registry. For now cde-24 will remain the
default cde however users can install cde-25 for new features and
bugfixes.
c8e0c7d609
Cy Schubert (cy)
x11/cde*: Rename cde to cde-24 and create cde meta port

In preparation of the introduction of CDE 2.5.0 to the ports tree,
rename the existing cde port to cde-24 and add a new cde meta port.
The reason for this is that CDE 2.5.0 appears to address some font
issues which negatively affects legacy Xm and Xaw apps.
9ce4140c0c
Cy Schubert (cy) · 2.4.0
Revert "x11/cde: Mark unbroken on i386"

x11/cde on i386 is broken on the package build infrastructure because
it cannot bind to a temporary of type va_list. Some users have reported
that they can build it by hand using ports however there is no solution
for the problem on the FreeBSD poudriere.

This reverts commit 25db2173606446697bb4b5b376420c492e1f549c.

MFH:	2022Q3
c56da4a4b0
Cy Schubert (cy) · 2.4.0
x11/cde: Mark unbroken on i386

A user reports that CDE does build correctly on i386.

Reported by:	William Macintosh <bill.macintosh@icloud.com>
MFH:		2022Q3
25db217360
Piotr Kubaj (pkubaj) · 2.4.0
x11/cde: actually fix build on powerpc64le

This port doesn't respect setting FLAGS via Makefile, so -DPOWERPC64LE goes unnoticed.

Switch to ifdef __powerpc64__.
98b88b839d
Cy Schubert (cy) · 2.4.0
x11/cde: Fix build under 14-CURRENT

Under 14-CURRENT MALLOC_PRODUCTION is not set which puts malloc() into
debug mode. In debug mode malloc() enables opt.junk to write junk to
newly malloc()ed heap in order to help developers discover memory
allocation bugs. Unfortunately CDE's dtinfogen assumes newly malloc()ed
memory is zero filled (i.e. not filled with junk), resulting in
"flex scanner jammed". This likely causes parsing of the junk past the
end of any legitimate statements. This affects stock 14-CURRENT without
MALLOC_PRODUCTION enabled. This is accomplished by setting the
make environment variable MALLOC_CONF=junk:false. See malloc(3) for
a complete description of MALLOC_CONF=junk:false.

MFH:		2022Q1
50324bba31
Cy Schubert (cy) · 2.4.0
x11/cde: Fix a typo

Reported by:	adridg
235153c84f
Cy Schubert (cy) · 2.4.0
x11/cde: Handle undstrippable outputs

Stripping unstrippable files results in ecp.* files. Deal with the
fallout.

PR:		261359, 261359
ba5de232fe
Cy Schubert (cy) · 2.4.0
x11/cde: Mark BROKEN on armv7

STAGEDIR contains numerous intermediate files likely used during the
install process which are not in the final STAGEDIR on other platforms.
An example of one of the 5830 orphaned files is:
dt/app-defaults/C/ecp.2AeDmfIk.

PR:		261359
03c319e5e9
Cy Schubert (cy) · 2.4.0
x11/cde: Fix armv7 build

In attempting to fix powerpc64le, c66a851d13783558a8fa17ffcf64759a0c1b5bab
broke armv7. Fix it.

PR:		261359
Reported by:	Robert Clausecker <fuz@fuz.su>
Fixes:		c66a851d13783558a8fa17ffcf64759a0c1b5bab
47d8fb3af3
Piotr Kubaj (pkubaj) · 2.4.0
x11/cde: fix build on powerpc64le

1. Merge patches from shells/ast-ksh fixing ksh93 build.
2. Change endianness detection to what __BYTE_ORDER__ points to.
The way CDE detects endianness is not correct and I got errors about running
neither BE or LE.

This still fails to build on powerpc64, so BROKEN_powerpc64 is not removed.
c66a851d13
Cy Schubert (cy) · 2.4.0
x11/cde: Update to 2.4.0

This commit updates x11/cde from 2.3.2 to 2.4.0. 2.4.0 fixes a local
privilege escalation in dteseesion, DtSvc.

Other changes include:

- 2.4.0 builds under FreeBSD 14-CURRENT using both poudriere (as before)
  and now directly on the command line using make.

- i386 is now broken because it cannot bind to a temporary of type va_list.

- This commit also changes maintainership to myself (cy) as requested
  by crees (maintainer) in PR/257148.

PR:		257148
Submitted by:	cy
Reported by:	cy
Approved by:	crees
MFH:		2021-Q3
Security:	CVE-2020-2696/VU#308289
Security:	VuXML: 848bdd06-f93a-11eb-9f7d-206a8a720317
49a90dc82f
Mathieu Arnold (mat) · 2.3.2
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.3.2
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 2.3.2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Chris Rees (crees) · 2.3.2
x11/cde: Sadly, broken on all archs for head
8abc4e2698
Chris Rees (crees) · 2.3.2
x11/cde: Still broken on head for i386
3937a9acea
Chris Rees (crees) · 2.3.2
x11/cde: Update to 2.3.2

Make a few fixes for head, and add appropriate messages for dtlogin
6f7b90d884
Baptiste Daroussin (bapt) · 2.3.1_2
Bump portrevision after the fix on the startup script
363f7075f5
Baptiste Daroussin (bapt) · 2.3.1_1
hald is not required anymore

Note that this is not needed since X does not depend anymore on hald
3ba0424a63
Chris Rees (crees) · 2.3.1_1
Mark BROKEN on head, and make a couple of rc script fixes

PR:		ports/243549
Submitted by:	Mohamed Akram
1a7e444704
Chris Rees (crees) · 2.3.1
x11/cde: update to 2.3.1 and unbreak

PR:		ports/242663
Submitted by:	mikael.urankar@gmail.com
5dc621587f
Niclas Zeising (zeising) · 2.3.0_3
x11/cde: Remove dependency on libXp

Remove the dependency on libXp, which is not needed.  libXp is deprecated
and slated for removal.
a819ff1db7
Antoine Brodin (antoine) · 2.3.0_2
Mark BROKEN with lld

Reported by:	pkg-fallout
MFH:		2019Q3
b5015bd23d
Mathieu Arnold (mat) · 2.3.0_2
Convert to UCL & cleanup pkg-message (categories x)
467ad301e8
Chris Rees (crees) · 2.3.0_2
x11/cde: Add dtlogin rc script

Remove double ksh dependency

Pet portlint

Mark BROKEN on head:

cc -o dthelpview -O2 -fno-strict-aliasing -Wno-write-strings -Wno-unused-result -Wno-deprecated-register -pipe    -L../../../exports/lib -L/usr/local/lib -L/usr/local/lib Main.o ManPage.o Util.o version.o -lDtHelp -lDtSvc -ltt -lXm -lXt -lSM -lICE -lXext -lX11 -L/usr/local/dt/lib -L/usr/local/lib -L/usr/local/lib   -liconv  -lm -lstdc++
ld: error: ../../../exports/lib/libDtHelp.so: undefined reference to jpeg_CreateDecompress

[...]
81b5f58607
Chris Rees (crees) · 2.3.0_1
x11/cde: Fix building on FreeBSD 12

Add some missing dependencies and a couple more shebang fixes

PR:		ports/237518
Submitted by:	Thomas Merkel
MFH:		2019Q2 (build fix)
88a9eed5e9
Niclas Zeising (zeising) · 2.3.0_1
x11-fonts/mkfontscale: Update to 1.2.0

Update x11-fonts/mkfontscale to 1.2.0
Remove x11-fonts/mkfontdir, which has been merged into mkfontscale.
Update dependencies and bump portrevisions.
Add an entry to UPDATING and MOVES

Changelog:
https://lists.x.org/archives/xorg/2019-March/059633.html

Thanks to Antoine for the exp-run!

PR:		236336 (exp-run)
Obtained from:	FreeBSD Graphics Team dev repo
		https://github.com/FreeBSDDesktop/freebsd-ports/tree/feature/mkfontscale
Sponsored by:	B3 Init
7a325e6491
Dmitry Marakasov (amdmi3) · 2.3.0
- Remove obsolete OSVERSION condition

Approved by:	portmgr blanket
cee73ffeeb
Chris Rees (crees) · 2.3.0
Update to 2.3.0

Move to more correct x11 category

Unbreak

Incorporate changes and improvements made by Mikael Urankar

PR:		ports/221102
Submitted by:	mikael.urankar@gmail.com

Various other cleanups; correct pkg-message and add ksh dependency

PR:		ports/220572
Submitted by:	pfg
0c257ca309