OpenBSD ports changes summary for 2017-11-09 ============================================
archivers/libmspack archivers/snappy astro/wcslib comms/xlog databases/evolution-data-server databases/py-psycopg2 databases/sqlite3 devel/bzr devel/flawfinder devel/hs-constraints devel/hs-sandi devel/hs-split devel/hs-test-framework devel/libgdata devel/mercurial devel/quirks devel/radare2 editors/libreoffice games/megaglest games/openmw games/yquake2 graphics/blender graphics/openscenegraph graphics/py-cairo graphics/shotwell lang/python lang/vala mail/claws-mail mail/evolution-ews mail/evolution-rss mail/greyscanner mail/postfix mail/roundcubemail mail/rspamd net/mosquitto net/pidgin-sipe net/py-botocore net/stem net/telepathy net/unifi net/zeromq productivity/glabels security/gnupg2 security/john-jumbo security/libassuan security/libfprint security/nss security/py-artifacts sysutils/awscli sysutils/py-tsk sysutils/riemann-c-client sysutils/sshfs-fuse sysutils/terraform textproc/hs-HaXml textproc/nfoview textproc/uncrustify www/dillo www/phantomjs x11/freerdp x11/gnome x11/kde4 x11/mate x11/xmonad == archivers ========================================================= 01/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/archivers libmspack ~ Makefile ~ distinfo ~ patches/patch-Makefile_in ~ pkg/PLIST > update to libmspack-0.6alpha (jasper@) snappy ~ Makefile ~ distinfo ~ pkg/PLIST > update to snappy-1.1.7 (jasper@) - patches/patch-Makefile_am > be gone (jasper@) == astro ============================================================= 02/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/astro wcslib ~ Makefile ~ distinfo ~ patches/patch-configure_ac ~ pkg/PLIST > update to wcslib-5.17 (jasper@) == comms ============================================================= 03/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/comms xlog ~ Makefile ~ distinfo ~ patches/patch-configure > update to xlog-2.0.15 (jasper@) ~ Makefile > mirror distfile for one of the pool members doesn't carry it (yet?) > spotted by aja@ (jasper@) == databases ========================================================= 04/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/databases evolution-data-server ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) py-psycopg2 ~ Makefile ~ distinfo > update to psycopg2-2.7.3.2 > ok shadchin@ (MAINTAINER) (jasper@) sqlite3 ~ Makefile ~ distinfo > Update to sqlite 3.21.0. > See http://sqlite.org/releaselog/3_21_0.html for changes. > Tested in a bulk build without fallout. > ok jca@ (landry@) == devel ============================================================= 05/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/devel bzr ~ Makefile > Update homepage, use https master_sites. (bentley@) flawfinder ~ Makefile ~ distinfo ~ patches/patch-setup_py > update to flawfinder-2.0.4 (jasper@) hs-constraints ~ Makefile > Missing dependency devel/hs-mtl. > Found by aja@ when building devel/hs-lifted-async. > While here, drop dependencies on devel/hs-newtype > and devel/hs-tagged, which aren't necessary for > newer versions of ghc. (kili@) hs-sandi ~ Makefile > Mark as broken for now -- dependency textproc/hs-stringsearch is > still missing. Pointed out by ajacoutot@. (kili@) hs-split - patches/patch-split_cabal > remove empty patch files (jasper@) hs-test-framework ~ Makefile > Miss bump after RUN_DEPENDS change. (ajacoutot@) libgdata ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) mercurial ~ Makefile ~ distinfo + patches/patch-mercurial_configitems_py + patches/patch-mercurial_help_config_txt + patches/patch-mercurial_subrepo_py + patches/patch-tests_test-audit-subrepo_t + patches/patch-tests_test-convert-git_t + patches/patch-tests_test-mq-subrepo-svn_t + patches/patch-tests_test-subrepo-git_t + patches/patch-tests_test-subrepo-svn_t + patches/patch-tests_test-subrepo_t TAGGED OPENBSD_6_2 > SECURITY update. No CVE. Update to 4.3.3 + changes backported from 4.4.1. > "It is possible that a specially malformed repository can cause Git > subrepositories to run arbitrary code in the form of a > .git/hooks/post-update > script checked in to the repository in Mercurial 4.4 and earlier. Typical > use > of Mercurial prevents construction of such repositories, but they can be > created programmatically." (juanfra@) ~ Makefile + patches/patch-mercurial_configitems_py + patches/patch-mercurial_help_config_txt + patches/patch-mercurial_subrepo_py + patches/patch-tests_test-audit-subrepo_t + patches/patch-tests_test-clonebundles_t.orig + patches/patch-tests_test-convert-git_t + patches/patch-tests_test-mq-subrepo-svn_t + patches/patch-tests_test-subrepo-git_t + patches/patch-tests_test-subrepo-svn_t + patches/patch-tests_test-subrepo_t TAGGED OPENBSD_6_2 > SECURITY update. No CVE. Changes backported from 4.4.1. > "It is possible that a specially malformed repository can cause Git > subrepositories to run arbitrary code in the form of a > .git/hooks/post-update > script checked in to the repository in Mercurial 4.4 and earlier. Typical > use > of Mercurial prevents construction of such repositories, but they can be > created programmatically." (juanfra@) quirks ~ Makefile ~ files/Quirks.pm > a pkgpath is not enough, allow pkg_add to find qdirstat as a replacement > for kdirstat (espie@) radare2 ~ main/Makefile > correct capstone path. > ok edd@. (rpointel@) == editors =========================================================== 06/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/editors libreoffice ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) == games ============================================================= 07/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/games megaglest ~ Makefile.inc ~ base/Makefile ~ data/Makefile > Use HTTPS homepage. (bentley@) openmw ~ Makefile > Switch to Qt5 following OSG update. (pascal@) yquake2 - patches/patch-Makefile - patches/patch-src_backends_generic_vid_c ~ Makefile ~ distinfo ~ pkg/PLIST ~ pkg/q2ded.rc + files/quake2.sh > games/yquake2 7.01 => 7.02 > OK abieber@ > Port changes: > - bump version > - everything now lives under /usr/local/share/yquake2 > this has been asked by upstream and outlined in > their porting guide that was created after > I started complaining that they want relative > paths between the binaries: > https://github.com/yquake2/yquake2/blob/master/stuff/packaging.md#where-you > -should-put-the-executables > - adding a new wrapper for the quake2 binary > to cd into the port directory before executing it > as we provide no way for a binary to get its executable > directory > - drop the patch that hardcoded the executable directory > upstream accounted for us not supporting that feature > and defaults to returning cwd (./) instead of bailing > out with an error > - modified the q2ded rc.d script to account for the need > of changing the working directory before starting the > server > - note I am not providing a separate wrapper for q2ded > in /usr/bin on purpose - I don't see a need for running > it outside of the rc.d scripts for any reasons other > than debugging and that's rare enough that people can > just cd to the game folder themselves > - we can drop the Makefile compilation flag diff as > upstream took our patch > Upstream changelog: > Quake II 7.01 to 7.02: > - Fix several corner cases regarding render library loading. The game > should now always fall back to the OpenGL 1.4 renderer if the new > OpenGL 3.2 renderer can't be initialized. Also the game aborts if no > useable OpenGL implementation exists. > - Refactor the search path code. This should fix several bugs with > Quake II writing to the wrong directories or being unable to find > some / all assets. > - Reimplement portable binaries. If called with the -portable command > line option Quake II saves all data (configs, savegames, screenshorts > etc.) into it's systemwide installation directory and not users home > directory. In contrast to the old implementation on Windows stdout.txt > contains all output, the first lines are no longer missing. > - vid_fullscreen set to 1 now keeps the desktops resolution. Set it to 2 > to change the resolution. > - Instead of a list with precalculated FOV values the video menu now > shows a slider with possible values from 60 to 120. Horplus is now > always enabled, set the horplus cvar to 0 to disable it. > - The game is now able to hold the requested framerate (either by the > vsync or the gl_maxfps cvar) with an accuracy of about +/- 1% as long > as the hardware is fast enough. The framecounter was reimplemented > to be much more precise. > - Fix misspredictions if an original client running on Win32 connects > to a Yamagi Quake II server running on Linux/i386. (awolk@) == graphics ========================================================== 08/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/graphics blender ~ Makefile ~ distinfo ~ patches/patch-intern_ffmpeg_ffmpeg_compat_h ~ patches/patch-intern_guardedalloc_intern_mallocn_intern_h ~ patches/patch-intern_libmv_libmv_numeric_numeric_h ~ pkg/PLIST > Update to blender 2.79. (pascal@) openscenegraph ~ Makefile ~ distinfo ~ patches/patch-CMakeLists_txt ~ patches/patch-applications_present3D_Cluster_cpp ~ patches/patch-src_osgPlugins_CMakeLists_txt ~ pkg/PLIST > Update to 3.4.1; switch to Qt5 and enable GDAL module. > requested by/ok landry@ (pascal@) py-cairo ~ Makefile ~ distinfo > Update to py-cairo-1.15.4. (ajacoutot@) shotwell ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) == lang ============================================================== 09/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/lang python ~ 2.7/patches/patch-Makefile_pre_in > Add missing make dep, to allow builds with MAKE_JOBS >= 2 > iirc ok naddy@, no objection from rpointel@ (maintainer) (jca@) vala ~ Makefile ~ distinfo > update to vala-0.38.3 (jasper@) == mail ============================================================== 10/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/mail claws-mail ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) evolution-ews ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) evolution-rss ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) greyscanner ~ Makefile > Update moved homepage/master_sites. > Broken links reported by Jan Stary. (bentley@) postfix ~ stable/Makefile ~ stable/distinfo ~ stable/patches/patch-src_tls_tls_dane_c ~ stable/patches/patch-src_util_sys_defs_h > update to postfix-3.2.4, from Brad (sthen@) roundcubemail ~ Makefile ~ distinfo > security update to roundcubemail-1.3.3: > "Apparently this zero-day exploit is already being used by hackers to > read Roundcubeâs configuration files. It requires a valid > username/password as the exploit only works with a valid session. More > details will be published soon under CVE-2017-16651. > In order to check whether your Roundcube installation has been > compromised check the access logs for requests like > ?_task=settings&_action=upload-display&_from=timezone > As mentioned above, the file disclosure only works for authenticated > users and by finding such requests in the logs you should also be able > to identify the account used for this unauthorized access. For > mitigation we recommend to change the all credentials to external > services like database or LDAP address books and preferably also the > 'des_key' option in your config." (sthen@) ~ Makefile ~ distinfo ~ pkg/PLIST TAGGED OPENBSD_6_2 > security update to roundcubemail-1.3.3: > "Apparently this zero-day exploit is already being used by hackers to > read Roundcubeâs configuration files. It requires a valid > username/password as the exploit only works with a valid session. More > details will be published soon under CVE-2017-16651. > In order to check whether your Roundcube installation has been > compromised check the access logs for requests like > ?_task=settings&_action=upload-display&_from=timezone > As mentioned above, the file disclosure only works for authenticated > users and by finding such requests in the logs you should also be able > to identify the account used for this unauthorized access. For > mitigation we recommend to change the all credentials to external > services like database or LDAP address books and preferably also the > 'des_key' option in your config." (sthen@) rspamd ~ Makefile ~ distinfo ~ patches/patch-CMakeLists_txt ~ patches/patch-contrib_zstd_CMakeLists_txt ~ patches/patch-src_CMakeLists_txt > update to rspamd-1.6.5, from Brad (sthen@) == net =============================================================== 11/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/net mosquitto - patches/patch-config_h - patches/patch-test_lib_c_08-ssl-fake-cacert_c ~ Makefile > Drop uneeded patches, CFLAGS, chunks now that we have proper definitions > for EPROTO and EBADMSG. (ajacoutot@) pidgin-sipe ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) py-botocore ~ Makefile ~ distinfo > Update to py-botocore-1.7.42. (ajacoutot@) stem ~ Makefile ~ distinfo ~ pkg/PLIST > Update to stem 1.6.0. (pascal@) telepathy ~ folks/Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) unifi ~ Makefile ~ distinfo ~ patches/patch-unifi_sh_api ~ pkg/PLIST > update to UniFi 5.6.23 stable candidate (sthen@) zeromq - patches/patch-src_ipc_listener_cpp - patches/patch-src_tcp_listener_cpp ~ Makefile > Drop uneeded patches, CFLAGS, chunks now that we have proper definitions > for EPROTO and EBADMSG. (ajacoutot@) == productivity ====================================================== 12/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/productivity glabels ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) == security ========================================================== 13/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/security gnupg2 ~ Makefile ~ distinfo + patches/patch-agent_protect_c > Update security/gnupg2 to 2.2.1. > Includes a fix to stop gpg-agent from hanging when run under vmm. > OK awolk@, thanks. (edd@) john-jumbo ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) libassuan ~ Makefile > Drop uneeded patches, CFLAGS, chunks now that we have proper definitions > for EPROTO and EBADMSG. (ajacoutot@) libfprint ~ Makefile ~ patches/patch-libfprint_fp_internal_h > Drop uneeded patches, CFLAGS, chunks now that we have proper definitions > for EPROTO and EBADMSG. (ajacoutot@) ~ Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) nss - files/nss-config - files/nss.pc ~ Makefile + patches/patch-nss_pkg_pkg-config_nss-config_in + patches/patch-nss_pkg_pkg-config_nss_pc_in > Instead of providing old versions of nss-config & nss.pc shoplifted ages > ago from Debian, just patch & use the ones added upstream in bug > #1277852. This way, we properly list the right libs when linking, > including nssutil3 (which should fix linking chrome with lld) - and > while here fix includedir to be consistent with cflags. > Prompted by an original diff from espie@ > Tested in bulks by ajacoutot@ and myself > WANTLIB fixes removing softokn3 to come (landry@) py-artifacts ~ Makefile ~ distinfo > update artifacts to 20171107. > ok benoit@. (rpointel@) == sysutils ========================================================== 14/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/sysutils awscli ~ Makefile ~ distinfo > Update to awscli-1.11.184. (ajacoutot@) py-tsk ~ Makefile ~ distinfo > update py-tsk to 20171108. > ok benoit@. (rpointel@) riemann-c-client ~ Makefile > Drop uneeded patches, CFLAGS, chunks now that we have proper definitions > for EPROTO and EBADMSG. (ajacoutot@) sshfs-fuse ~ Makefile ~ patches/patch-sshfs_c > Drop uneeded patches, CFLAGS, chunks now that we have proper definitions > for EPROTO and EBADMSG. (ajacoutot@) terraform ~ provider-heroku/Makefile ~ provider-heroku/distinfo > Update to terraform-provider-heroku-0.1.1. (ajacoutot@) == textproc ========================================================== 15/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/textproc hs-HaXml ~ Makefile > Miss bump. (ajacoutot@) nfoview ~ Makefile ~ distinfo ~ pkg/PLIST > Update nfoview to 1.23 > Drops intltool dependency. > Change my email address to my @openbsd.org address while here. (bcallah@) uncrustify ~ Makefile ~ distinfo > update uncrustify to 0.66. > ok benoit@. (rpointel@) == www =============================================================== 16/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/www dillo ~ Makefile > Use HTTPS for homepage/master_sites. (bentley@) phantomjs ~ Makefile ~ patch-src_qt_qtbase_src_network_socket_qnativesocketengine_unix_cpp > Drop uneeded patches, CFLAGS, chunks now that we have proper definitions > for EPROTO and EBADMSG. (ajacoutot@) == x11 =============================================================== 17/17 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/x11 freerdp - patches/patch-winpr_libwinpr_winsock_winsock_c ~ Makefile > Drop uneeded patches, CFLAGS, chunks now that we have proper definitions > for EPROTO and EBADMSG. (ajacoutot@) gnome ~ builder/Makefile > Add an XXX that this ports fails to build if graphics/gd is installed. > Fix under investigation... > reported by nigel@ (ajacoutot@) ~ builder/Makefile ~ builder/pkg/PLIST > Disable gobject-introspection and vala to prevent the graphics/gd bug for > now. (ajacoutot@) ~ builder/Makefile ~ builder/pkg/PLIST > Workaround the graphics/gd colision using MODGNOME_LDFLAGS. > Bring back gobject-introspection and vala support back. (ajacoutot@) - eog/patches/patch-help_es_es_po - eog/patches/patch-help_lv_lv_po ~ eog/Makefile ~ eog/distinfo ~ eog/pkg/PLIST > update to eog-3.26.2 (jasper@) ~ initial-setup/Makefile + initial-setup/patch-data_gnome-initial-setup-copy-worker_desktop_in_in + initial-setup/patch-gnome-initial-setup_gis-assistant_c + initial-setup/patch-gnome-initial-setup_pages_goa_gis-goa-page_c > Add a few fixes from upstream. (ajacoutot@) ~ gvfs/Makefile ~ shell/Makefile ~ settings-daemon/Makefile ~ photos/Makefile ~ online-miners/Makefile ~ grilo-plugins/Makefile ~ grilo/Makefile ~ eog-plugins/Makefile ~ contacts/Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) kde4 ~ kstars/Makefile > sync WANTLIB (jasper@) ~ plasma-addons/Makefile + plasma-addons/patch-applets_kdeobservatory_cmake_modules_FindQwt_cmake + plasma-addons/patch-applets_kdeobservatory_src_commithistoryview_cpp > Fix build with Qwt6 - reported by ajacoutot@, was missed all this time > because of the samba breakage. Enforce dependency on qt4 version of Qwt. > (landry@) mate ~ settings-daemon/Makefile > Fix some WANTLIB after nss dependency change (sometimes, just remove > unneeded softokn3, sometimes replace it by nssutil3) - note that there > might be more WANTLIB to fix/remove from those ports, but i only > concentrated on the changes related to nss. (landry@) xmonad - patches/patch-xmonad_cabal > remove empty patch files (jasper@) ===============================================================================
_______________________________________________ odc mailing list [email protected] http://www.squish.net/mailman/listinfo/odc
