FreeBSD ports you maintain which are out of date

2013-05-16 Thread portscout
Dear port maintainer,

The portscout new distfile checker has detected that one or more of your
ports appears to be out of date. Please take the opportunity to check
each of the ports listed below, and if possible and appropriate,
submit/commit an update. If any ports have already been updated, you can
safely ignore the entry.

You will not be e-mailed again for any of the port/version combinations
below.

Full details can be found at the following URL:
http://portscout.freebsd.org/po...@freebsd.org.html


Port| Current version | New version
+-+
lang/slib   | 3b3 | 3b4
+-+


If any of the above results are invalid, please check the following page
for details on how to improve portscout's detection and selection of
distfiles on a per-port basis:

http://portscout.freebsd.org/info/portscout-portconfig.txt

If wish to stop receiving portscout reminders, please contact
portsc...@portscout.freebsd.org

Thanks.
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


Firefox-i18n installing failure

2013-05-16 Thread Leslie Jensen


Hello.

It looks like there's a dot to much should be firefox-21 not firefox-2.1.


Cleaning for firefox-i18n-21.0
===  firefox-i18n-21.0 cannot install: unknown Firefox version: 
firefox-2.1.

*** [all] Error code 1

Stop in /usr/ports/www/firefox-i18n.


Thanks!




___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


Re: Firefox-i18n installing failure

2013-05-16 Thread Florian Smeets
On 16.05.13 05:36, Leslie Jensen wrote:
 
 Hello.
 
 It looks like there's a dot to much should be firefox-21 not firefox-2.1.
 
 
 Cleaning for firefox-i18n-21.0
 ===  firefox-i18n-21.0 cannot install: unknown Firefox version: 
 firefox-2.1.
 *** [all] Error code 1
 
 Stop in /usr/ports/www/firefox-i18n.
 
 

I forgot to commit one file with the update. It should be OK now. Please
update your ports tree and try again.

Florian



signature.asc
Description: OpenPGP digital signature


Re: Firefox-i18n installing failure

2013-05-16 Thread Leslie Jensen



2013-05-16 11:49, Florian Smeets skrev:

On 16.05.13 05:36, Leslie Jensen wrote:


Hello.

It looks like there's a dot to much should be firefox-21 not firefox-2.1.


Cleaning for firefox-i18n-21.0
===  firefox-i18n-21.0 cannot install: unknown Firefox version:
firefox-2.1.
*** [all] Error code 1

Stop in /usr/ports/www/firefox-i18n.




I forgot to commit one file with the update. It should be OK now. Please
update your ports tree and try again.

Florian



Even though I solved my problem it still asks for one to

=== Fetching all distfiles required by firefox-i18n-21.0 for building

Please define FIREFOX_I18N_ALL to install all languages

When only installing Swedish I think I'm doing the right thing but it 
still fails


===  Found saved configuration for firefox-i18n-17.0.1
===   firefox-i18n-21.0 depends on file: /usr/local/sbin/pkg - found
=== Fetching all distfiles required by firefox-i18n-21.0 for building
= SHA256 Checksum mismatch for xpi/firefox-i18n-21.0/sv-SE.xpi.
= SHA256 Checksum mismatch for xpi/firefox-i18n-21.0/sv-SE.xpi.
===  Giving up on fetching files: xpi/firefox-i18n-21.0/sv-SE.xpi 
xpi/firefox-i18n-21.0/sv-SE.xpi


Make sure the Makefile and distinfo file 
(/usr/ports/www/firefox-i18n/distinfo)

are up to date.  If you are absolutely sure you want to override this
check, type make NO_CHECKSUM=yes [other args].
*** [checksum] Error code 1

Stop in /usr/ports/www/firefox-i18n.
*** [checksum] Error code 1

Stop in /usr/ports/www/firefox-i18n.
*** 
[/usr/ports/www/firefox-i18n/work/.extract_done.firefox-i18n._usr_local] 
Error code 1


Stop in /usr/ports/www/firefox-i18n.
*** [configure] Error code 1

Stop in /usr/ports/www/firefox-i18n.

=== make failed for www/firefox-i18n
=== Aborting update

=== Update for www/firefox-i18n failed
=== Aborting update

=== Killing background jobs
Terminated



Thanks

___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


Re: teTeX and TeXLive

2013-05-16 Thread A.J. 'Fonz' van Werven
Hiroki Sato wrote:

  If you want to use TeXLive, please try to use the following knob:
 
  TEX_DEFAULT= texlive
 [snip]
  Please test TeXLive and send your failure report to me.  Once it is
  confirmed that TEX_DEFAULT=texlive works, I will switch the default
  value from tetex to texlive at some point.

Unfortunately I haven't had the chance to do any testing myself (busy busy
busy), but the following issues have been reported on the FreeBSD Forums
and I'm passing them along here.

If you're not on the Forums and you'd like me to either pass back a
response or ask followup questions, let me know.

AvW

* print/latex-cjk has option DVIPDFMX hardcoded to teTeX stuff.

* print/freetype-tools's RUNDEPEND=t1asm is hard coded to teTeX and
  conflicted with bulk print/texlive-base's pkg-plist.

* print/texlive-base needs to be more modularized to achieve drop-in
  replacement with teTeX for downstream ports.

-- 
I'm not completely useless, I can be used as a bad example.


pgpoXyNjErxVi.pgp
Description: PGP signature


Re: [texlive, FreeBSD 10.x-amd64] build error: _ThreadRuneLocale: TLS definition in /usr/lib/libc.so section .tbss mismatches non-TLS reference in gsftopk.o

2013-05-16 Thread Hiroki Sato
Boris Samorodov b...@passap.ru wrote
  in 51939aed.3060...@passap.ru:

bs Hi,
bs
bs I've got an error while building texlive-base at fresh CURRENT:
bs -
bs % uname -a
bs FreeBSD BB049.int.wart.ru 10.0-CURRENT FreeBSD 10.0-CURRENT #21 r250633:
bs Tue May 14 13:53:42 SAMT 2013
bs b...@bb049.int.wart.ru:/usr/obj/usr/src/sys/BB64X  amd64
bs -
bs
bs I have TEX_DEFAULT=texlive at the /etc/make.conf.
bs
bs Here is a tail of te log (full log 719 KB
bs ftp://ftp.wart.ru/pub/FreeBSD/errorlogs/texlive.make.log.txt ):

 Thank you for the report.  I am trying to reproduce this now.

-- Hiroki


pgpiQruc2Y8EH.pgp
Description: PGP signature


Re: teTeX and TeXLive

2013-05-16 Thread Hiroki Sato
David Demelier demelier.da...@gmail.com wrote
  in CAO+PfDe0nEdG=6zvnce90ktjsy4jyrk9jr1pmfbawrbj5cb...@mail.gmail.com:

de 2013/5/12 Florent Peterschmitt flor...@peterschmitt.fr:
de  Le 11/05/2013 20:36, Hiroki Sato a écrit :
de  Hello,
de 
de   As you already noticed, TeXLive ports have been imported and one can
de   choose teTeX or TeXLive while the default value for pre-compiled
de   packages is still teTeX.
de 
de   If you want to use TeXLive, please try to use the following knob:
de 
de   TEX_DEFAULT= texlive
de 
de   To do this, almost all of ports which use TeX will depend on TeXLive.
de   Although some ports which install a new TeX macro package may not
de   work because of incompatibility such as difference of directory
de   structure between the two, ones which use TeX for typesetting should
de   work fine.  Ones to install macro packages which were non-standard in
de   teTeX but are included in TeXLive will be fixed or removed.
de 
de   Please test TeXLive and send your failure report to me.  Once it is
de   confirmed that TEX_DEFAULT=texlive works, I will switch the default
de   value from tetex to texlive at some point.
de 
de 
de Thank you very much, however I have a install failure on poudriere
de with ports tree up to date 5 minutes ago:

 Thank you for your report.  I have received several reports about
 install failures on poudriere and am investigating them.

-- Hiroki


pgp1NQuUTYl0t.pgp
Description: PGP signature


Re: teTeX and TeXLive

2013-05-16 Thread Chris Rees
On 16 May 2013 14:02, A.J. 'Fonz' van Werven f...@skysmurf.nl wrote:

 Hiroki Sato wrote:

   If you want to use TeXLive, please try to use the following knob:
 
   TEX_DEFAULT= texlive
  [snip]
   Please test TeXLive and send your failure report to me.  Once it is
   confirmed that TEX_DEFAULT=texlive works, I will switch the default
   value from tetex to texlive at some point.

 Unfortunately I haven't had the chance to do any testing myself (busy busy
 busy), but the following issues have been reported on the FreeBSD Forums
 and I'm passing them along here.

 If you're not on the Forums and you'd like me to either pass back a
 response or ask followup questions, let me know.

Thanks for your message But :)

 AvW

 * print/latex-cjk has option DVIPDFMX hardcoded to teTeX stuff.

That is a problem for the latex-cjk port maintainer.

 * print/freetype-tools's RUNDEPEND=t1asm is hard coded to teTeX and
   conflicted with bulk print/texlive-base's pkg-plist.

That is a problem for the freetype maintainers.

 * print/texlive-base needs to be more modularized to achieve drop-in
   replacement with teTeX for downstream ports.

This in particular is a long term goal, however I and many others greatly
appreciate Hiroki-san's efforts to bring TeX Live to FreeBSD ports.  It may
come later.

Chris
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


Re: teTeX and TeXLive

2013-05-16 Thread A.J. 'Fonz' van Werven
Chris Rees wrote:

 Thanks for your message But :)
 
Hey, I'm just the messenger ;-)

 * print/latex-cjk has option DVIPDFMX hardcoded to teTeX stuff.
 
 That is a problem for the latex-cjk port maintainer.
 
 * print/freetype-tools's RUNDEPEND=t1asm is hard coded to teTeX and
   conflicted with bulk print/texlive-base's pkg-plist.
 
 That is a problem for the freetype maintainers.

Fair enough. I'll pass it back to the Forums and notifty the maintainers
in question.
 
 * print/texlive-base needs to be more modularized to achieve drop-in
   replacement with teTeX for downstream ports.
 
 This in particular is a long term goal, however I and many othersi
 greatly appreciate Hiroki-san's efforts to bring TeX Live to FreeBSD
 ports.  It may come later.

I quite agree. It's great to finally have TeXLive on FreeBSD and Hiroki's
efforts are very much appreciated.

AvW

-- 
I'm not completely useless, I can be used as a bad example.


pgpdEYoIu5NVF.pgp
Description: PGP signature


[QAT] r318328: 4x leftovers

2013-05-16 Thread Ports-QAT
Upgrade to 1.7.9.

Changelog at http://tt-rss.org/redmine/versions/91.
-

  Build ID:  20130516183601-6650
  Job owner: thie...@freebsd.org
  Buildtime: 12 minutes
  Enddate:   Thu, 16 May 2013 18:47:38 GMT

  Revision:  r318328
  Repository:
https://svnweb.freebsd.org/ports?view=revisionrevision=318328

-

Port:www/tt-rss 1.7.9

  Buildgroup: 9.1-QAT/amd64
  Buildstatus:   LEFTOVERS
  Log: 
https://qat.redports.org//~thie...@freebsd.org/20130516183601-6650-139680/tt-rss-1.7.9.log

  Buildgroup: 9.1-QAT/i386
  Buildstatus:   LEFTOVERS
  Log: 
https://qat.redports.org//~thie...@freebsd.org/20130516183601-6650-139681/tt-rss-1.7.9.log

  Buildgroup: 8.3-QAT/amd64
  Buildstatus:   LEFTOVERS
  Log: 
https://qat.redports.org//~thie...@freebsd.org/20130516183601-6650-139682/tt-rss-1.7.9.log

  Buildgroup: 8.3-QAT/i386
  Buildstatus:   LEFTOVERS
  Log: 
https://qat.redports.org//~thie...@freebsd.org/20130516183601-6650-139683/tt-rss-1.7.9.log


--
Buildarchive URL: https://qat.redports.org/buildarchive/20130516183601-6650
redports https://qat.redports.org/
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


Re: teTeX and TeXLive

2013-05-16 Thread Hiroki Sato
Matthias Andree matthias.and...@gmx.de wrote
  in 51941f70.2060...@gmx.de:

ma I have been looking at the texlive-base and -texmf ports, prompted by a
ma discussion on IRC involving marino, Niclas Zeising and myself, and I
ma must say that I am impressed - not to say scared - by the sheer size of
ma the ports' distfiles (130 MB for base, 1.4 GB for -texmf), and have not
ma yet taken the time to install and test the port.
ma
ma I suppose the -texmf port would be all of texlive.
ma
ma Is there any optimization we can make to get the texlive material more
ma manageable?  People have expressed concerns about daily download limits
ma (although that situation does not affect me personally currently).
ma
ma Are you aware of a list/overview/... that would explain the difference
ma between the -base and the -texmf ports?

 -base is binary part of the TeXLive, and -texmf includes data such as
 TeX macro packages, fonts, configuration files, and documentation.
 Both are needed to make TeX (yes, strictly speaking it is much more
 than pure TeX) work.

 The reason why -texmf is huge is fonts and docs.  Both are about 1GB
 respectively.  The other tex-* ports that I committed/will commit are
 ones split from -base and -texmf in per functionality basis.  I will
 continue to split down them until the granularity reaches where the
 other ports require.  It means -base and -texmf will be shrunk (and
 the number of */tex-* ports will increase).

 -full always installs everything but most of ports which need TeX do
 not require it in building stage or runtime and blindly specifying
 this as a dependency is a pain for users.  So, every ports which
 require TeX must specify the minimal set of USE_TEX knobs.  We should
 complete this stage to go further.  I expect the number of split TeX
 ports will be ~100 (FYI, the number of ports which directly depend on
 TeX is currently around 150).  Some minimal installation options will
 also be added.

 This is my mid-term goal in 1-2 months.  Although modularization is
 also planned, it will be happened once we confirm the new ports work
 fine in the current shape.  I agree that the size of the distfiles is
 another pain, but it is what TeXLive is, unfortunately.

-- Hiroki


pgpEDHtyhe8Hj.pgp
Description: PGP signature


INDEX build failed for 8.x

2013-05-16 Thread Ports Index build
INDEX build failed with errors:
Generating INDEX-8 - please wait.. Done.
make_index: wmnetload-1.3_4: no entry for /usr/ports/x11-wm/libdockapp
make_index: wmnetload-1.3_4: no entry for /usr/ports/x11-wm/libdockapp
make_index: XScreenSaver.App-2.3_3: no entry for /usr/ports/x11-wm/libdockapp
make_index: XScreenSaver.App-2.3_3: no entry for /usr/ports/x11-wm/libdockapp

Committers on the hook:
 bdrewery crees erwin olivierd rakuco rm thierry zeising 

Most recent SVN update was:
Updating '.':
Udeskutils/contacts/Makefile
Udeskutils/gruler/Makefile
Dtextproc/p5-KinoSearch
Utextproc/ibus-qt/Makefile
Utextproc/ibus-qt/distinfo
Utextproc/Makefile
Umisc/mshell/Makefile
Upolish/libtlen/Makefile
Ugraphics/cimg/Makefile
Ugraphics/cimg/distinfo
UU   graphics/cimg/pkg-descr
Dgraphics/cimg/files/patch-examples_gmic.cpp
Ugraphics/cimg/files/patch-examples::Makefile
Ugraphics/cimg/pkg-plist
Ugraphics/agave/Makefile
Ugraphics/gcolor2/Makefile
Ugraphics/potrace/Makefile
Usecurity/cfs/files/cfsd.in
Usecurity/cfs/files/pkg-message.in
UMOVED
Uftp/bareftp/distinfo
Uftp/bareftp/files/patch-po-LINGUAS
Uftp/bareftp/pkg-plist
Uftp/bareftp/Makefile
Udatabases/py-sqlkit/Makefile
Udatabases/py-sqlkit/pkg-plist
Unet-im/komclean/Makefile
Dx11-wm/libdockapp
Ux11-wm/Makefile
Ux11-themes/cursor-jimmac-theme/Makefile
Uemulators/javatari/Makefile
Uemulators/javatari/distinfo
Uwww/tt-rss/Makefile
Uwww/tt-rss/distinfo
Uwww/tt-rss/pkg-plist
Ucad/opencascade/Makefile
Acad/opencascade/files/patch-src_Standard_Standard_CString.cxx
Acad/opencascade/files/patch-src_Standard_Standard_CLocaleSentry.hxx
Acad/opencascade/files/patch-inc_Standard_CLocaleSentry.hxx
Udevel/mercurial/distinfo
Udevel/mercurial/Makefile
Updated to revision 318339.
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


Portaudit claims nginx 1.2.x vulnerable

2013-05-16 Thread Michael Gmelin
Hi,

I just noticed that portaudit considers www/nginx =1.2.0,1 1.4.1,1 to
be affected by CVE-2013-2028, creating noise and preventing
installation:

http://portaudit.freebsd.org/efaa4071-b700-11e2-b1b9-f0def16c5c1b.html

According to the announcement on the nginx mailing list, only versions
of nginx = 1.3.9  1.4.1,1 should be affected:

http://mailman.nginx.org/pipermail/nginx-announce/2013/000112.html
and the fix in nginx trac
http://trac.nginx.org/nginx/changeset/5189/nginx

I just checked the source of 1.2.8 (the current version in ports,
www/nginx) and it doesn't even contain the affected functionality, nor
the affected function implementing it (ngx_http_parse_chunked). This is
in line with additional media and bugtracker coverage:

https://bugzilla.redhat.com/show_bug.cgi?id=960605
http://www.openwall.com/lists/oss-security/2013/05/07/3
http://www.ehackingnews.com/2013/05/cve-2013-2028-buffer-overflow.html
http://www.h-online.com/open/news/item/NGINX-patches-major-security-flaw-1858438.html

Long story short: I would kindly ask you to correct the entry in the
portaudit database to match only affected versions of nginx.

Cheers,
Michael

-- 
Michael Gmelin
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


Re: [patch included] teTeX and TeXLive

2013-05-16 Thread Christopher J. Ruwe
On Fri, 17 May 2013 00:32:58 +0900 (JST)
Hiroki Sato h...@freebsd.org wrote:

 David Demelier demelier.da...@gmail.com wrote
   in
 CAO+PfDe0nEdG=6zvnce90ktjsy4jyrk9jr1pmfbawrbj5cb...@mail.gmail.com:
 
 de 2013/5/12 Florent Peterschmitt flor...@peterschmitt.fr:
 de  Le 11/05/2013 20:36, Hiroki Sato a écrit :
 de  Hello,
 de 
 de   As you already noticed, TeXLive ports have been imported and
 de  one can choose teTeX or TeXLive while the default value for
 de  pre-compiled packages is still teTeX.
 de 
 de   If you want to use TeXLive, please try to use the following
 de  knob:
 de 
 de   TEX_DEFAULT= texlive
 de 
 de   To do this, almost all of ports which use TeX will depend on
 de  TeXLive. Although some ports which install a new TeX macro
 de  package may not work because of incompatibility such as
 de  difference of directory structure between the two, ones which
 de  use TeX for typesetting should work fine.  Ones to install
 de  macro packages which were non-standard in teTeX but are
 de  included in TeXLive will be fixed or removed.
 de 
 de   Please test TeXLive and send your failure report to me.  Once
 de  it is confirmed that TEX_DEFAULT=texlive works, I will switch
 de  the default value from tetex to texlive at some point.
 de 
 de 
 de Thank you very much, however I have a install failure on poudriere
 de with ports tree up to date 5 minutes ago:
 
  Thank you for your report.  I have received several reports about
  install failures on poudriere and am investigating them.
 
 -- Hiroki

Hello,

I had exactly the same issue. I have a manual solution so far and am
trying out the automation from ports. I am posting my progress hoping
to save someone some time.

I reproduced the issue in an empty poudriere jail. After installing
print/texlive-base and print/texlive-texmf via pkg add and

$ cd /usr/ports/print/tex-formats
$ make
$ make install

yields (taken only the last bit)

---Begin OPTIONS List---
---End OPTIONS List---
===phase: check-config ==
===
===phase: fetch==
=== Fetching all distfiles required by tex-formats-20120701 for building
===
===phase: checksum ==
=== Fetching all distfiles required by tex-formats-20120701 for building
===
===phase: extract  ==
=== Fetching all distfiles required by tex-formats-20120701 for building
===  Extracting for tex-formats-20120701
===
===phase: patch==
===  Patching for tex-formats-20120701
===
===phase: configure==
===  Configuring for tex-formats-20120701
===
===phase: build==
===
===phase: run-depends  ==
===
===phase: install-mtree==
===
===phase: install  ==
===  Installing for tex-formats-20120701
===   Generating temporary packing list
===  Checking if print/tex-formats already installed
tcfmgr: config file `tcfmgr.map' (usually in $TEXMFMAIN/texconfig) not found 
(ls-R missing?).
fmtutil: config file `fmtutil.cnf' not found.
*** [do-fmtutil-amstex] Error code 1

Stop in /usr/ports/print/tex-formats.


running 

$ texconfig rehash
$ make install 

solves the issue.

I suspect my approach to constitute a dirty hack, but for the time
being, I have added texconfig rehash as a post-install target to
print/texlive-texmf.

Compiling has started, I am off to bed now and will report tomorrow.

Hope to save some people some time, even if what I am doing is
actually not quite right.

Cheers,
-- 
Christopher
TZ: GMT + 2h
GnuPG/GPG:  0xE8DE2C14
 
FreeBSD 9.1-RELEASE #2: Tue Nov 27 03:45:16 UTC 2012
root@darkstar:/usr/obj/pcbsd-build90/fbsd-source/9.1/sys/GENERIC 
 
Punctuation matters:
Lets eat Grandma or Lets eat, Grandma - Punctuation saves lives.
A panda eats shoots and leaves or A panda eats, shoots, and leaves -
Punctuation teaches proper biology.
diff -uN /poudriere/ports/default/print/texlive-texmf/Makefile tree/print/texlive-texmf/Makefile
--- /poudriere/ports/default/print/texlive-texmf/Makefile	2013-05-16 19:38:19.919421187 +0200
+++ 

Re: Portaudit claims nginx 1.2.x vulnerable

2013-05-16 Thread Xin Li
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi, Michael,

On 05/16/13 15:04, Michael Gmelin wrote:
 Hi,
 
 I just noticed that portaudit considers www/nginx =1.2.0,1
 1.4.1,1 to be affected by CVE-2013-2028, creating noise and
 preventing installation:
 
 http://portaudit.freebsd.org/efaa4071-b700-11e2-b1b9-f0def16c5c1b.html

  According to the announcement on the nginx mailing list, only
 versions of nginx = 1.3.9  1.4.1,1 should be affected:
 
 http://mailman.nginx.org/pipermail/nginx-announce/2013/000112.html 
 and the fix in nginx trac 
 http://trac.nginx.org/nginx/changeset/5189/nginx
 
 I just checked the source of 1.2.8 (the current version in ports, 
 www/nginx) and it doesn't even contain the affected functionality,
 nor the affected function implementing it (ngx_http_parse_chunked).
 This is in line with additional media and bugtracker coverage:
 
 https://bugzilla.redhat.com/show_bug.cgi?id=960605 
 http://www.openwall.com/lists/oss-security/2013/05/07/3 
 http://www.ehackingnews.com/2013/05/cve-2013-2028-buffer-overflow.html

 
http://www.h-online.com/open/news/item/NGINX-patches-major-security-flaw-1858438.html
 
 Long story short: I would kindly ask you to correct the entry in
 the portaudit database to match only affected versions of nginx.

I have took a look at these and found this:

http://mailman.nginx.org/pipermail/nginx-announce/2013/000114.html

I'll update the vuxml entry to include these information.

Cheers,
- -- 
Xin LI delp...@delphij.nethttps://www.delphij.net/
FreeBSD - The Power to Serve!   Live free or die
-BEGIN PGP SIGNATURE-

iQEcBAEBCgAGBQJRlV9sAAoJEG80Jeu8UPuzmM4H/i66ifeXHOJX8cle5cf9ATXt
Y5G74TCLqLlxEv+1DCGh8Wks/JvN7KVsLNieXkf+jVonuXr4O5LCV7Pgj3SQ6EQK
TISbHwDDnwBqIvNncO4uZxOs6JbuTKWh43YdoPG7Rfpb0AJWJl/N8LFtxEckohyu
jWfyK6n1ftnjtaHoXZ63hF3daMHJwxtj8nJmHOqD1O7LbI+UCTPDwuYDb6BJGq9h
1JNt/NUyuANupRHftKa42+NLBa8zeGSggu7nYFhjuhcQN1ts31klKC/ReUIoUrTI
09+6Eu6AwpTvVa+rSRv6WUvLuG2srEKHS8zS+toFINAcY5EUO0zdqTglXGL8/E8=
=fQL9
-END PGP SIGNATURE-
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


Re: Portaudit claims nginx 1.2.x vulnerable

2013-05-16 Thread Michael Gmelin
On Thu, 16 May 2013 15:36:28 -0700
Xin Li delp...@delphij.net wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512
 
 Hi, Michael,
 
 On 05/16/13 15:04, Michael Gmelin wrote:
  Hi,
  
  I just noticed that portaudit considers www/nginx =1.2.0,1
  1.4.1,1 to be affected by CVE-2013-2028, creating noise and
  preventing installation:
  
  http://portaudit.freebsd.org/efaa4071-b700-11e2-b1b9-f0def16c5c1b.html
 
   According to the announcement on the nginx mailing list, only
  versions of nginx = 1.3.9  1.4.1,1 should be affected:
  
  http://mailman.nginx.org/pipermail/nginx-announce/2013/000112.html 
  and the fix in nginx trac 
  http://trac.nginx.org/nginx/changeset/5189/nginx
  
  I just checked the source of 1.2.8 (the current version in ports, 
  www/nginx) and it doesn't even contain the affected functionality,
  nor the affected function implementing it (ngx_http_parse_chunked).
  This is in line with additional media and bugtracker coverage:
  
  https://bugzilla.redhat.com/show_bug.cgi?id=960605 
  http://www.openwall.com/lists/oss-security/2013/05/07/3 
  http://www.ehackingnews.com/2013/05/cve-2013-2028-buffer-overflow.html
 
  
 http://www.h-online.com/open/news/item/NGINX-patches-major-security-flaw-1858438.html
  
  Long story short: I would kindly ask you to correct the entry in
  the portaudit database to match only affected versions of nginx.
 
 I have took a look at these and found this:
 
 http://mailman.nginx.org/pipermail/nginx-announce/2013/000114.html
 
 I'll update the vuxml entry to include these information.
 
 Cheers,

Hi Xin,

I missed that nginx got updated to 1.4.0 and now 1.4.1,1 - seems like
I've been working on an old copy of the ports tree. So recovering from
this should be easy for users and at the same time my statement about
the current version in the ports tree being 1.2.8 was clearly wrong.

Anyway, thanks for the clarification, so basically CVE-2013-2070 and
CVE-2013-2028 got mixed up (the former affecting only certain setups
while the latter affecting everybody in a severe way unless they took
special measures to harden their setup).

Cheers  thanks for your swift response,
Michael

-- 
Michael Gmelin
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


Re: [patch included] teTeX and TeXLive

2013-05-16 Thread Hiroki Sato
Christopher J. Ruwe c...@cruwe.de wrote
  in 20130517001153.1d7d4...@dijkstra.cruwe.de:

cj  de Thank you very much, however I have a install failure on poudriere
cj  de with ports tree up to date 5 minutes ago:
cj 
cj   Thank you for your report.  I have received several reports about
cj   install failures on poudriere and am investigating them.
cj 
cj  -- Hiroki
cj
cj Hello,
cj
cj I had exactly the same issue. I have a manual solution so far and am
cj trying out the automation from ports. I am posting my progress hoping
cj to save someone some time.

 Could you try r318346?

-- Hiroki


pgpSFJcFjoOqQ.pgp
Description: PGP signature


INDEX now builds successfully on 8.x

2013-05-16 Thread Ports Index build

___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


[HEADS UP] New pkgng git location

2013-05-16 Thread Bryan Drewery
Pkg has moved from http://github.com/pkgng/pkgng to
http://github.com/freebsd/pkg

Please update any links or git checkouts you have.

You can update your git checkout with:
 git remote set-url origin git://github.com/freebsd/pkg.git pkgng/pkgng


-- 
Regards,
Bryan Drewery



signature.asc
Description: OpenPGP digital signature