[UPDATE] Tor Browser 6.0.7
Hi ports@, Attached is an update to the Tor Browser ports that bring us up to 6.0.7, which patches CVE-2016-9079 (Use-after-free in SVG Animation). Tested under amd64 on the 30 Nov snap. Feedback, comments most welcome. Pax, -A -- http://haqistan.net/~attila | att...@stalphonsos.com | 0x62A729CF Index: meta/tor-browser/Makefile === RCS file: /cvs/ports/meta/tor-browser/Makefile,v retrieving revision 1.1.1.1 diff -u -p -r1.1.1.1 Makefile --- meta/tor-browser/Makefile 13 Nov 2016 21:18:48 - 1.1.1.1 +++ meta/tor-browser/Makefile 1 Dec 2016 19:28:03 - @@ -4,7 +4,7 @@ COMMENT= Tor Browser meta package MAINTAINER= Sean Levy -PKGNAME= tor-browser-6.0.5 +PKGNAME= tor-browser-6.0.7 RUN_DEPENDS= www/tor-browser/browser \ www/tor-browser/torbutton \ Index: www/tor-browser/Makefile.inc === RCS file: /cvs/ports/www/tor-browser/Makefile.inc,v retrieving revision 1.1.1.1 diff -u -p -r1.1.1.1 Makefile.inc --- www/tor-browser/Makefile.inc 13 Nov 2016 21:15:43 - 1.1.1.1 +++ www/tor-browser/Makefile.inc 1 Dec 2016 19:28:03 - @@ -6,7 +6,7 @@ GH_ACCOUNT ?= torbsd PERMIT_PACKAGE_CDROM ?= Yes CATEGORIES = www BROWSER_NAME = tor-browser -TB_VERSION = 6.0.5 +TB_VERSION = 6.0.7 TB_PREFIX = tb SUBST_VARS += BROWSER_NAME TB_VERSION Index: www/tor-browser/browser/Makefile === RCS file: /cvs/ports/www/tor-browser/browser/Makefile,v retrieving revision 1.1.1.1 diff -u -p -r1.1.1.1 Makefile --- www/tor-browser/browser/Makefile 13 Nov 2016 21:15:43 - 1.1.1.1 +++ www/tor-browser/browser/Makefile 1 Dec 2016 19:28:03 - @@ -15,7 +15,7 @@ DIST_SUBDIR = ${BROWSER_NAME} WRKDIST = ${WRKDIR}/${GH_PROJECT}-${GH_TAGNAME:C/^v//} GH_PROJECT = torb -GH_TAGNAME = v${TB_VERSION}-esr45.4.0 +GH_TAGNAME = v${TB_VERSION}-esr45.5.1 PKGNAME = ${TB_PREFIX}-browser-${TB_VERSION} DISTNAME = ${GH_TAGNAME} Index: www/tor-browser/browser/distinfo === RCS file: /cvs/ports/www/tor-browser/browser/distinfo,v retrieving revision 1.1.1.1 diff -u -p -r1.1.1.1 distinfo --- www/tor-browser/browser/distinfo 13 Nov 2016 21:15:43 - 1.1.1.1 +++ www/tor-browser/browser/distinfo 1 Dec 2016 19:28:03 - @@ -1,2 +1,2 @@ -SHA256 (tor-browser/v6.0.5-esr45.4.0.tar.gz) = zDpUGriIt9TbKiV8bG5aFIxdCZ3fw2E3j4PSDkxKms8= -SIZE (tor-browser/v6.0.5-esr45.4.0.tar.gz) = 256581824 +SHA256 (tor-browser/v6.0.7-esr45.5.1.tar.gz) = mvkYQHtZPZyiUiT5RpAnl48QcF3/YOO3x5mC4JjLuzs= +SIZE (tor-browser/v6.0.7-esr45.5.1.tar.gz) = 256632500 Index: www/tor-browser/browser/files/extension-overrides.js === RCS file: /cvs/ports/www/tor-browser/browser/files/extension-overrides.js,v retrieving revision 1.1.1.1 diff -u -p -r1.1.1.1 extension-overrides.js --- www/tor-browser/browser/files/extension-overrides.js 13 Nov 2016 21:15:43 - 1.1.1.1 +++ www/tor-browser/browser/files/extension-overrides.js 1 Dec 2016 19:28:03 - @@ -81,24 +81,27 @@ pref("extensions.torlauncher.default_bri pref("extensions.torlauncher.default_bridge.scramblesuit.1", "scramblesuit 83.212.101.3:443 A09D536DD1752D542E1FBB3C9CE4449D51298239 password=XTCXLG2JAMJKZW2POLBAOWOQETQSMASH"); -pref("extensions.torlauncher.default_bridge.obfs4.1", "obfs4 154.35.22.10:2934 8FB9F4319E89E5C6223052AA525A192AFBC85D55 cert=GGGS1TX4R81m3r0HBl79wKy1OtPPNR2CZUIrHjkRg65Vc2VR8fOyo64f9kmT1UAFG7j0HQ iat-mode=0"); +pref("extensions.torlauncher.default_bridge.obfs4.1", "obfs4 154.35.22.10:9332 8FB9F4319E89E5C6223052AA525A192AFBC85D55 cert=GGGS1TX4R81m3r0HBl79wKy1OtPPNR2CZUIrHjkRg65Vc2VR8fOyo64f9kmT1UAFG7j0HQ iat-mode=0"); pref("extensions.torlauncher.default_bridge.obfs4.2", "obfs4 198.245.60.50:443 752CF7825B3B9EA6A98C83AC41F7099D67007EA5 cert=xpmQtKUqQ/6v5X7ijgYE/f03+l2/EuQ1dexjyUhh16wQlu/cpXUGalmhDIlhuiQPNEKmKw iat-mode=0"); pref("extensions.torlauncher.default_bridge.obfs4.3", "obfs4 192.99.11.54:443 7B126FAB960E5AC6A629C729434FF84FB5074EC2 cert=VW5f8+IBUWpPFxF+rsiVy2wXkyTQG7vEd+rHeN2jV5LIDNu8wMNEOqZXPwHdwMVEBdqXEw iat-mode=0"); pref("extensions.torlauncher.default_bridge.obfs4.4", "obfs4 109.105.109.165:10527 8DFCD8FB3285E855F5A55EDDA35696C743ABFC4E cert=Bvg/itxeL4TWKLP6N1MaQzSOC6tcRIBv6q57DYAZc3b2AzuM+/TfB7mqTFEfXILCjEwzVA iat-mode=0"); -pref("extensions.torlauncher.default_bridge.obfs4.5", "obfs4 83.212.101.3:5 A09D536DD1752D542E1FBB3C9CE4449D51298239 cert=lPRQ/MXdD1t5SRZ9MquYQNT9m5DV757jtdXdlePmRCudUU9CFUOX1Tm7/meFSyPOsud7Cw iat-mode=0"); +pref("extensions.torlauncher.default_bridge.obfs4.5", "obfs4 83.212.101.3:50001 A09D536DD1752D542E1FBB3C9CE4449D51298239 cert=lPRQ/MXdD1t5SRZ9MquYQNT9m5DV757jtdXdlePmRCudUU9CFUOX1Tm7/meFSyPOsud7Cw iat-mode=0"); pref("extensions.torlauncher.default_bridge.obfs4.6", "obfs4 109.105.109.147:13764 BBB28DF0F201E706BE564EFE6
[UPDATE] audio/libxmp to 4.4.1
Hi ports@, Here is a diff to update libxmp to latest version (4.4.1). This is a bugfix release, no bump needed. Patches have been regenerated and the patch to rename the 'clock' function to prevent a conflict with clock(3) can now be dropped. Index: Makefile === RCS file: /cvs/ports/audio/libxmp/Makefile,v retrieving revision 1.17 diff -u -p -r1.17 Makefile --- Makefile2 Sep 2016 17:36:25 - 1.17 +++ Makefile1 Dec 2016 21:44:03 - @@ -2,7 +2,7 @@ COMMENT = module player library -DISTNAME = libxmp-4.4.0 +DISTNAME = libxmp-4.4.1 CATEGORIES = audio SHARED_LIBS += xmp 1.0 # 4.4 @@ -14,7 +14,7 @@ PERMIT_PACKAGE_CDROM =Yes MASTER_SITES = ${MASTER_SITE_SOURCEFORGE:=xmp/} -WANTLIB += m +WANTLIB += m USE_GMAKE =Yes Index: distinfo === RCS file: /cvs/ports/audio/libxmp/distinfo,v retrieving revision 1.14 diff -u -p -r1.14 distinfo --- distinfo2 Sep 2016 17:36:25 - 1.14 +++ distinfo1 Dec 2016 21:44:03 - @@ -1,2 +1,2 @@ -SHA256 (libxmp-4.4.0.tar.gz) = FIjdlT/TA4T7lGdFERgkrRSlwu2C12r2cayc1zOsXII= -SIZE (libxmp-4.4.0.tar.gz) = 615536 +SHA256 (libxmp-4.4.1.tar.gz) = NTU1zITIzdro3s7E5l+kxR/GTyLrCJG8Pa5uryX5zM8= +SIZE (libxmp-4.4.1.tar.gz) = 618448 Index: patches/patch-Makefile_in === RCS file: /cvs/ports/audio/libxmp/patches/patch-Makefile_in,v retrieving revision 1.4 diff -u -p -r1.4 patch-Makefile_in --- patches/patch-Makefile_in 15 Nov 2014 17:41:16 - 1.4 +++ patches/patch-Makefile_in 1 Dec 2016 21:44:03 - @@ -1,6 +1,6 @@ $OpenBSD: patch-Makefile_in,v 1.4 2014/11/15 17:41:16 bcallah Exp $ Makefile.in.orig Fri Oct 3 17:26:35 2014 -+++ Makefile.inSat Nov 15 11:44:00 2014 +--- Makefile.in.orig Mon Oct 3 02:24:30 2016 Makefile.inThu Dec 1 22:17:37 2016 @@ -32,7 +32,7 @@ DDIRS= docs include src loaders prowiz depackers win V = 0 LIB = libxmp.a @@ -10,7 +10,7 @@ $OpenBSD: patch-Makefile_in,v 1.4 2014/1 SONAME= $(SOLIB).$(VERSION_MAJOR) DLL = libxmp.dll DYLIB = libxmp.$(VERSION_MAJOR).dylib -@@ -91,7 +91,7 @@ lib/$(LIB): $(OBJS) +@@ -101,7 +101,7 @@ lib/$(LIB): $(OBJS) lib/$(SHLIB): $(LOBJS) @mkdir -p lib @@ -19,7 +19,7 @@ $OpenBSD: patch-Makefile_in,v 1.4 2014/1 if [ "$(V)" -gt 0 ]; then echo $$CMD; else echo LD $@ ; fi; \ eval $$CMD ln -sf $(SHLIB) lib/$(SONAME) -@@ -140,8 +140,6 @@ install: all +@@ -150,8 +150,6 @@ install: all @if [ -f lib/$(SHLIB) ]; then \ echo "Installing $(SHLIB)..."; \ $(INSTALL) -m644 lib/$(SHLIB) $(DESTDIR)$(LIBDIR); \ Index: patches/patch-src_common_h === RCS file: /cvs/ports/audio/libxmp/patches/patch-src_common_h,v retrieving revision 1.1 diff -u -p -r1.1 patch-src_common_h --- patches/patch-src_common_h 1 Dec 2014 18:03:51 - 1.1 +++ patches/patch-src_common_h 1 Dec 2016 21:44:03 - @@ -1,16 +1,16 @@ -$OpenBSD: patch-src_common_h,v 1.1 2014/12/01 18:03:51 miod Exp $ +$OpenBSD$ Disable versioned symbols on platforms using gcc 3.x, for the toolchain does not support them. src/common.h.orig Mon Nov 10 22:25:25 2014 -+++ src/common.h Sun Nov 30 15:20:17 2014 +--- src/common.h.orig Thu Dec 1 22:19:37 2016 src/common.h Thu Dec 1 22:18:54 2016 @@ -9,7 +9,7 @@ #include #include "xmp.h" -#if defined(__GNUC__) || defined(__clang__) +#if (defined(__GNUC__) && __GNUC__ >= 4) || defined(__clang__) - #if !defined(WIN32) && !defined(ANDROID) && !defined(__APPLE__) && !defined(__AMIGA__) && !defined(B_BEOS_VERSION) && !defined(__ATHEOS__) && !defined(EMSCRIPTEN) && !defined(__MINT__) + #if !defined(WIN32) && !defined(__ANDROID__) && !defined(__APPLE__) && !defined(__AMIGA__) && !defined(B_BEOS_VERSION) && !defined(__ATHEOS__) && !defined(EMSCRIPTEN) && !defined(__MINT__) #define USE_VERSIONED_SYMBOLS #endif Index: patches/patch-src_mix_paula_c === RCS file: patches/patch-src_mix_paula_c diff -N patches/patch-src_mix_paula_c --- patches/patch-src_mix_paula_c 2 Sep 2016 17:36:25 - 1.1 +++ /dev/null 1 Jan 1970 00:00:00 - @@ -1,31 +0,0 @@ -$OpenBSD: patch-src_mix_paula_c,v 1.1 2016/09/02 17:36:25 fcambus Exp $ src/mix_paula.c.orig Thu Sep 1 16:54:32 2016 -+++ src/mix_paula.cThu Sep 1 16:55:34 2016 -@@ -63,7 +63,7 @@ static void input_sample(struct paula_state *paula, in - } - } - --static void clock(struct paula_state *paula, unsigned int cycles) -+static void do_clock(struct paula_state *paula, unsigned int cycles) - { - int i; - -@@ -96,15 +96,15 @@ static void c
Re: Let's remove sysutils/lsof
Il 1 dicembre 2016 14:04:30 CET, Jeremie Courreges-Anglas ha scritto: >Jiri B writes: > >>> lsof is a problem. It is tightly coupled to the base system, enough >to >>> require /usr/src/sys checked out to be able to build it. This means >>> that it breaks quite frequently: >> >> Correcting Pascal's mail... >> >> IMO lsof is used because BSD' netstat >> doesn't show PID of a process with open sockets. fstat could be >> used with little filter effort. > >net/arm could indeed be easily patched to use fstat output, sthen@ >proposed an initial patch for this: > > http://marc.info/?l=openbsd-ports&m=147445148420200&w=2 > >More code is needed to completely replace the lsof bits. Someone who's >interested in tor / arm could take a look at this. > >However this is unrelated to whether we should keep lsof or not. >Testing shows that currently net/arm works *because* it can't use lsof. lsof has always caused troubles in the past, and it doesn't work well. Imho it's time to kill it. Ciao, David
update textproc/xml2rfc
The IETF expects RFCs to be originally written in an XML format, then coverted to all of the different forms that we know. They now require version 2 of the tool, so I updated our port. Looks like they re-wrote it all, so no more tk/tcl and it is now in python. OK? Index: textproc/xml2rfc/Makefile === RCS file: /cvs/openbsd/ports/textproc/xml2rfc/Makefile,v retrieving revision 1.38 diff -u -p -u -p -r1.38 Makefile --- textproc/xml2rfc/Makefile 10 Aug 2014 09:58:06 - 1.38 +++ textproc/xml2rfc/Makefile 1 Dec 2016 22:08:12 - @@ -2,31 +2,21 @@ COMMENT= convert memos written in XML to the RFC format -DISTNAME= xml2rfc-1.36 +MODPY_EGG_VERSION =2.5.2 +DISTNAME= xml2rfc-${MODPY_EGG_VERSION} CATEGORIES=textproc -EXTRACT_SUFX= .tgz -MASTER_SITES= http://xml.resource.org/authoring/ -HOMEPAGE= http://xml.resource.org/ - MAINTAINER=Jakob Schlyter # BSD PERMIT_PACKAGE_CDROM= Yes -MODULES+= x11/tk -RUN_DEPENDS+= ${MODTK_RUN_DEPENDS} -NO_BUILD= Yes -NO_TEST= Yes -PKG_ARCH= * +MASTER_SITES = ${MASTER_SITE_PYPI:=x/xml2rfc/} + +MODULES = lang/python +MODPY_SETUPTOOLS = Yes -do-install: - @${SUBST_PROGRAM} ${FILESDIR}/xml2rfc ${PREFIX}/bin/xml2rfc - @${INSTALL_DATA_DIR} ${PREFIX}/share/xml2rfc - @${INSTALL_DATA} ${WRKSRC}/xml2rfc.tcl ${PREFIX}/share/xml2rfc - @${INSTALL_DATA_DIR} ${PREFIX}/share/doc/xml2rfc -.for file in *.html *.txt *.xml *.dtd *.xsd *.rnc - @${INSTALL_DATA} ${WRKSRC}/${file} ${PREFIX}/share/doc/xml2rfc -.endfor +LIB_DEPENDS = textproc/py-lxml${MODPY_FLAVOR} \ + www/py-requests${MODPY_FLAVOR} .include Index: textproc/xml2rfc/distinfo === RCS file: /cvs/openbsd/ports/textproc/xml2rfc/distinfo,v retrieving revision 1.10 diff -u -p -u -p -r1.10 distinfo --- textproc/xml2rfc/distinfo 7 Feb 2013 14:21:04 - 1.10 +++ textproc/xml2rfc/distinfo 1 Dec 2016 21:53:46 - @@ -1,2 +1,2 @@ -SHA256 (xml2rfc-1.36.tgz) = 6xxZWX/LQFdb9W4tBOHI1+Gz6WXDLiCAE1TXQE4fJww= -SIZE (xml2rfc-1.36.tgz) = 1525517 +SHA256 (xml2rfc-2.5.2.tar.gz) = pyg1cof39iovnxaS0DGAMN8w+2u0673BMDrY8QFnrsQ= +SIZE (xml2rfc-2.5.2.tar.gz) = 1091059 Index: textproc/xml2rfc/files/xml2rfc === RCS file: textproc/xml2rfc/files/xml2rfc diff -N textproc/xml2rfc/files/xml2rfc --- textproc/xml2rfc/files/xml2rfc 16 Jan 2013 20:25:30 - 1.5 +++ /dev/null 1 Jan 1970 00:00:00 - @@ -1,13 +0,0 @@ -#!/bin/sh -# -# $Id: xml2rfc,v 1.5 2013/01/16 20:25:30 sthen Exp $ - -wish=${MODTK_BIN} -tclsh=${MODTCL_BIN} -xml2rfc=${TRUEPREFIX}/share/xml2rfc/xml2rfc.tcl - -if [ $# -gt 0 ]; then - exec $tclsh $xml2rfc xml2rfc $@ -else - exec $wish $xml2rfc -fi Index: textproc/xml2rfc/pkg/PLIST === RCS file: /cvs/openbsd/ports/textproc/xml2rfc/pkg/PLIST,v retrieving revision 1.11 diff -u -p -u -p -r1.11 PLIST --- textproc/xml2rfc/pkg/PLIST 7 Feb 2013 14:21:04 - 1.11 +++ textproc/xml2rfc/pkg/PLIST 1 Dec 2016 22:08:56 - @@ -1,22 +1,43 @@ @comment $OpenBSD: PLIST,v 1.11 2013/02/07 14:21:04 stu Exp $ @pkgpath textproc/xml2rfc,no_x11 bin/xml2rfc -share/doc/xml2rfc/ -share/doc/xml2rfc/README.html -share/doc/xml2rfc/README.txt -share/doc/xml2rfc/README.xml -share/doc/xml2rfc/draft-mrose-writing-rfcs.html -share/doc/xml2rfc/draft-mrose-writing-rfcs.txt -share/doc/xml2rfc/example.html -share/doc/xml2rfc/example.txt -share/doc/xml2rfc/example.xml -share/doc/xml2rfc/rfc2629.dtd -share/doc/xml2rfc/rfc2629.html -share/doc/xml2rfc/rfc2629.rnc -share/doc/xml2rfc/rfc2629.xml -share/doc/xml2rfc/rfc2629.xsd -share/doc/xml2rfc/test.txt -share/doc/xml2rfc/test.xml -share/doc/xml2rfc/xml.xsd -share/xml2rfc/ -share/xml2rfc/xml2rfc.tcl +lib/python${MODPY_VERSION}/site-packages/xml2rfc/ +lib/python${MODPY_VERSION}/site-packages/${FULLPKGNAME}-py${MODPY_VERSION}.egg-info/ +lib/python${MODPY_VERSION}/site-packages/${FULLPKGNAME}-py${MODPY_VERSION}.egg-info/PKG-INFO +lib/python${MODPY_VERSION}/site-packages/${FULLPKGNAME}-py${MODPY_VERSION}.egg-info/SOURCES.txt +lib/python${MODPY_VERSION}/site-packages/${FULLPKGNAME}-py${MODPY_VERSION}.egg-info/dependency_links.txt +lib/python${MODPY_VERSION}/site-packages/${FULLPKGNAME}-py${MODPY_VERSION}.egg-info/entry_points.txt +lib/python${MODPY_VERSION}/site-packages/${FULLPKGNAME}-py${MODPY_VERSION}.egg-info/not-zip-safe +lib/python${MODPY_VERSION}/site-packages/${FULLPKGNAME}-py${MODPY_VERSION}.egg-info/requires.txt +lib/python${MODPY_VERSION}/site-packages/${FULLPKGNAME}-py${MODPY_VERSION}.egg-info/top_level.txt +lib/python${MODPY_VERSION}/site-packages/xml2rfc/__init__.py +lib/python${MODPY_VERSION}/site-packages/xml2rfc/__init__.pyc +lib/python${MODPY_VERSION}/site-packages/xml
update productivity/homebank
Hi, please find below a straight-forward update for productivity/homebank to version 5.1.1. Slightly tested with a rather small .xhb file. Changelog can be found here: http://homebank.free.fr/ChangeLog Comments, OK? Thanks, Regards, Joerg Index: Makefile === RCS file: /cvs/ports/productivity/homebank/Makefile,v retrieving revision 1.27 diff -u -p -r1.27 Makefile --- Makefile3 Aug 2016 13:49:37 - 1.27 +++ Makefile1 Dec 2016 21:23:01 - @@ -2,7 +2,7 @@ COMMENT = personal accounting application -DISTNAME = homebank-5.0.9 +DISTNAME = homebank-5.1.1 CATEGORIES = productivity x11 Index: distinfo === RCS file: /cvs/ports/productivity/homebank/distinfo,v retrieving revision 1.12 diff -u -p -r1.12 distinfo --- distinfo3 Aug 2016 13:49:37 - 1.12 +++ distinfo1 Dec 2016 21:23:01 - @@ -1,2 +1,2 @@ -SHA256 (homebank-5.0.9.tar.gz) = 0Lx2PpTaDLpURJWwcHDnn67PHV3gz7CS0SZIJSXgYrc= -SIZE (homebank-5.0.9.tar.gz) = 2734386 +SHA256 (homebank-5.1.1.tar.gz) = nNNt3Gkx/ZXvW8xqcjs98GUbMuGUZVcNIjwhrB1apL0= +SIZE (homebank-5.1.1.tar.gz) = 2675174 Index: patches/patch-configure === RCS file: /cvs/ports/productivity/homebank/patches/patch-configure,v retrieving revision 1.4 diff -u -p -r1.4 patch-configure --- patches/patch-configure 7 Mar 2011 19:24:43 - 1.4 +++ patches/patch-configure 1 Dec 2016 21:23:01 - @@ -1,7 +1,7 @@ $OpenBSD: patch-configure,v 1.4 2011/03/07 19:24:43 ajacoutot Exp $ configure.orig Sat Feb 5 14:28:08 2011 -+++ configure Sat Feb 26 12:54:23 2011 -@@ -4982,7 +4982,7 @@ if test "${ac_cv_lib_ofx_ofx_set_status_cb+set}" = set +--- configure.orig Sun Nov 6 09:54:16 2016 configure Thu Dec 1 22:07:12 2016 +@@ -5298,7 +5298,7 @@ if ${ac_cv_lib_ofx_ofx_set_status_cb+:} false; then : $as_echo_n "(cached) " >&6 else ac_check_lib_save_LIBS=$LIBS @@ -10,7 +10,7 @@ $OpenBSD: patch-configure,v 1.4 2011/03/ cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ -@@ -5016,7 +5016,7 @@ if test "x$ac_cv_lib_ofx_ofx_set_status_cb" = x""yes; +@@ -5332,7 +5332,7 @@ if test "x$ac_cv_lib_ofx_ofx_set_status_cb" = xyes; th OFX_0_7="-DOFX_ENABLE" fi Index: patches/patch-po_POTFILES_in === RCS file: /cvs/ports/productivity/homebank/patches/patch-po_POTFILES_in,v retrieving revision 1.4 diff -u -p -r1.4 patch-po_POTFILES_in --- patches/patch-po_POTFILES_in7 Mar 2011 19:24:43 - 1.4 +++ patches/patch-po_POTFILES_in1 Dec 2016 21:23:01 - @@ -1,9 +1,11 @@ $OpenBSD: patch-po_POTFILES_in,v 1.4 2011/03/07 19:24:43 ajacoutot Exp $ po/POTFILES.in.origSat Jan 15 22:24:30 2011 -+++ po/POTFILES.in Sat Feb 26 12:54:23 2011 -@@ -31,4 +31,5 @@ src/ui_category.c - src/ui_payee.c - src/widgets.c - src/xml.c +--- po/POTFILES.in.origSun Feb 21 10:31:49 2016 po/POTFILES.in Thu Dec 1 22:07:12 2016 +@@ -31,6 +31,7 @@ src/ui-assist-import.c + src/ui-budget.c + src/ui-category.c + src/ui-currency.c +src/da_encoding.c - + src/ui-dialogs.c + src/ui-filter.c + src/ui-hbfile.c Index: pkg/PLIST === RCS file: /cvs/ports/productivity/homebank/pkg/PLIST,v retrieving revision 1.13 diff -u -p -r1.13 PLIST --- pkg/PLIST 3 Aug 2016 13:49:37 - 1.13 +++ pkg/PLIST 1 Dec 2016 21:23:01 - @@ -27,6 +27,7 @@ share/homebank/help/dlg-arch.html share/homebank/help/dlg-assi.html share/homebank/help/dlg-bud1.html share/homebank/help/dlg-cate.html +share/homebank/help/dlg-curr.html share/homebank/help/dlg-filt.html share/homebank/help/dlg-mult.html share/homebank/help/dlg-paye.html @@ -68,6 +69,7 @@ share/homebank/help/images/dlg-account2. share/homebank/help/images/dlg-assign1.png share/homebank/help/images/dlg-budget1.png share/homebank/help/images/dlg-category1.png +share/homebank/help/images/dlg-currencies1.png share/homebank/help/images/dlg-filter1.png share/homebank/help/images/dlg-filter2.png share/homebank/help/images/dlg-filter3.png @@ -75,6 +77,7 @@ share/homebank/help/images/dlg-filter4.p share/homebank/help/images/dlg-filter5.png share/homebank/help/images/dlg-filter6.png share/homebank/help/images/dlg-payee1.png +share/homebank/help/images/dlg-payee2.png share/homebank/help/images/dlg-prefs1.png share/homebank/help/images/dlg-prefs2.png share/homebank/help/images/dlg-prefs3.png @@ -116,6 +119,7 @@ share/homebank/help/images/pm-standingor share/homebank/help/images/pm-transfer.png share/homebank/help/images/tip-accorder.png share/homebank/help/images/tip-listsearch.png +share/homebank/help/images/tip-multiedit.png share/homebank/help/images/use-assignment1.png share/homebank/help/images/use-budget1.pn
Re: [new] mail/rmilter
On 2016/11/19 12:41, Johan Huldtgren wrote: > > release once one has been done on the 2.10 branch without an ugly v0. > > Thanks, agreed that's better. Oops, should have been s/2.10/1.10 :) Anyway that is released now. > > I still see the problem I was getting with the previous version > > though: > > > > 2016-11-19T16:36:32.261Z symphytum rmilter[19335]: ; mlfi_data: > > cannot get queue id, set to 'NOQUEUE' > > (Plus no evidence of it feeding the mail through rspamd..) > > I don't see that on my end: And I've figured this out at last; I was trying to run it alongside my existing "before-accept" amavis setup. rmilter was on the external- facing instance of the MTA, then feeding it via smtpd_proxy_filter to amavis, then to an internal instance of the MTA. Fixing that up (I just removed amavis for now, though I could probably move it from smtpd_proxy_filter to content_filter) gets queue IDs into rmilter, and now that rmilter has queue IDs it is successfully passing mail to rspamd. Example Postfix setup: smtpd_milters = unix:/var/run/rmilter/rmilter.sock milter_protocol = 6 milter_mail_macros = i {mail_addr} {client_addr} {client_name} {auth_authen} milter_default_action = accept And in my case Postfix is chrooted, so I have this in rmilter.conf bind_socket = unix:/var/spool/postfix/var/run/rmilter/rmilter.sock; I've attached an updated tgz. I'm happy with this now, so I'm looking for an OK to import. rmilter.tgz Description: application/tar-gz
Re: UPDATE: the_silver_searcher 1.0.1
On 2016/12/01 18:31, Florian Stinglmayr wrote: > down below is an update for the_silver_searcher to 1.0.1. > There is now apparently moar speed, new features - such as zsh > completion - and a move to gcc4 because of thread local storage. .. > +MODGCC4_LANGS = c++ It doesn't use C++. How about this one? Index: Makefile === RCS file: /cvs/ports/textproc/the_silver_searcher/Makefile,v retrieving revision 1.21 diff -u -p -r1.21 Makefile --- Makefile30 Sep 2016 02:08:52 - 1.21 +++ Makefile1 Dec 2016 20:47:33 - @@ -2,7 +2,7 @@ COMMENT = code searching tool, with a focus on speed (ag) -DISTNAME = the_silver_searcher-0.33.0 +DISTNAME = the_silver_searcher-1.0.1 CATEGORIES = textproc HOMEPAGE = https://github.com/ggreer/the_silver_searcher @@ -13,6 +13,9 @@ PERMIT_PACKAGE_CDROM =Yes # uses pledge() WANTLIB += c lzma pcre pthread z + +MODULES = gcc4 +MODGCC4_ARCHS =* # needed for TLS MASTER_SITES = http://geoff.greer.fm/ag/releases/ Index: distinfo === RCS file: /cvs/ports/textproc/the_silver_searcher/distinfo,v retrieving revision 1.19 diff -u -p -r1.19 distinfo --- distinfo30 Sep 2016 02:08:52 - 1.19 +++ distinfo1 Dec 2016 20:47:33 - @@ -1,2 +1,2 @@ -SHA256 (the_silver_searcher-0.33.0.tar.gz) = jKaAOZ317ohGpQnIpnwQ7h1fwalEVoBqD/ndkTuWHbM= -SIZE (the_silver_searcher-0.33.0.tar.gz) = 180522 +SHA256 (the_silver_searcher-1.0.1.tar.gz) = 2WgqcPWEIZfRA5HpuFdXbJtvxOkwzW0kHCSee0mC8so= +SIZE (the_silver_searcher-1.0.1.tar.gz) = 183173 Index: pkg/PLIST === RCS file: /cvs/ports/textproc/the_silver_searcher/pkg/PLIST,v retrieving revision 1.3 diff -u -p -r1.3 PLIST --- pkg/PLIST 17 May 2016 10:57:07 - 1.3 +++ pkg/PLIST 1 Dec 2016 20:47:33 - @@ -4,3 +4,6 @@ share/bash-completion/ share/bash-completion/completions/ share/bash-completion/completions/ag.bashcomp.sh +share/zsh/ +share/zsh/site-functions/ +share/zsh/site-functions/_the_silver_searcher > retrieving revision 1.19 > diff -u -p -u -r1.19 distinfo > --- distinfo 30 Sep 2016 02:08:52 - 1.19 > +++ distinfo 1 Dec 2016 16:37:49 - > @@ -1,2 +1,2 @@ > -SHA256 (the_silver_searcher-0.33.0.tar.gz) = > jKaAOZ317ohGpQnIpnwQ7h1fwalEVoBqD/ndkTuWHbM= > -SIZE (the_silver_searcher-0.33.0.tar.gz) = 180522 > +SHA256 (the_silver_searcher-1.0.1.tar.gz) = > 2WgqcPWEIZfRA5HpuFdXbJtvxOkwzW0kHCSee0mC8so= > +SIZE (the_silver_searcher-1.0.1.tar.gz) = 183173 > Index: pkg/PLIST > === > RCS file: /cvs/ports/textproc/the_silver_searcher/pkg/PLIST,v > retrieving revision 1.3 > diff -u -p -u -r1.3 PLIST > --- pkg/PLIST 17 May 2016 10:57:07 - 1.3 > +++ pkg/PLIST 1 Dec 2016 16:37:49 - > @@ -4,3 +4,6 @@ > share/bash-completion/ > share/bash-completion/completions/ > share/bash-completion/completions/ag.bashcomp.sh > +share/zsh/ > +share/zsh/site-functions/ > +share/zsh/site-functions/_the_silver_searcher >
Re: Backport links+-2.0.14 to -stable
"trondd" writes: > On Thu, December 1, 2016 5:07 am, Jeremie Courreges-Anglas wrote: >> Jeremie Courreges-Anglas writes: >> >>> Should this be backported to -stable? >> >> It appears so, as discussed with Tim. Could someone give this a shot >> on -stable? Please include the output of >> ''make port-lib-depends-check''. >> > > # make port-lib-depends-check > > links+2.14(www/links+): > Extra: iconv.6 > > > If you remove the gettext MODULE and add intl to WANTLIB, that goes away. > This was done with the update to 2.13 previously in -current. But for > -stable, the less churn the better. Yup. Committed, thanks. -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: [NEW] devel/premake
Solène Rapenne writes: > Le 2016-12-01 16:38, Solène Rapenne a écrit : >> Le 2016-11-30 21:28, Jeremie Courreges-Anglas a écrit : >>> >>> Note that the build is silent which is bad. Adding verbose=1 to >>> MAKE_FLAGS would have helped to spot an -Os cc flag that shouldn't be >>> there. The link step shouldn't use -s since it makes DEBUG=-g >>> useless. >>> >>> This seems to embed lua-5.1, using lua from ports could be nice - if >>> possible of course. >>> >>> Back to the purpose of the port, it would be nice to check whether the >>> generated Makefiles would be usable within the OpenBSD ports tree. >>> But >>> are you just looking for feedback or are you actually submitting it >>> for >>> inclusion? >> >> New version here >> >> I would like to submit it for inclusion in the ports tree because it's >> a >> dependency of another submission of mine (games/t-engine) > > New version : > > - removing -Os compilation flag > - DOC link changed in DESCR > - licence in Makefile Updated tarball that: - renames the port directory to premake4 - fixes the offending tests: use ldconfig -r to find libraries available on the system. Patching a lua source file is a bit of a pain here since we have to regenerate the C files that embed the lua source, hence the XXX comment. premake4.tgz Description: Binary data -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: UPDATE: math/hdf5
On Thu, Dec 01, 2016 at 07:12:17PM +0200, Paul Irofti wrote: > On Wed, Nov 30, 2016 at 07:46:25PM +0100, Ingo Feinerer wrote: > > Update math/hdf5 1.8.17 -> 1.8.18 > > > > The only dependency math/octave still works. > > I see that some library minors changed, why didn't you bump our minor? > > If you are sure about that, please commit. OK. Yes, I think so. Both https://support.hdfgroup.org/HDF5/doc1.8/ADGuide/Changes.html and https://support.hdfgroup.org/HDF5/doc1.8/ADGuide/Compatibility_Report/CR_1.8.18.html only list significant changes in hdf5_cpp. Best regards, Ingo
UPDATE: the_silver_searcher 1.0.1
Hi list, down below is an update for the_silver_searcher to 1.0.1. There is now apparently moar speed, new features - such as zsh completion - and a move to gcc4 because of thread local storage. Enjoy Index: Makefile === RCS file: /cvs/ports/textproc/the_silver_searcher/Makefile,v retrieving revision 1.21 diff -u -p -u -r1.21 Makefile --- Makefile30 Sep 2016 02:08:52 - 1.21 +++ Makefile1 Dec 2016 16:37:49 - @@ -2,7 +2,7 @@ COMMENT = code searching tool, with a focus on speed (ag) -DISTNAME = the_silver_searcher-0.33.0 +DISTNAME = the_silver_searcher-1.0.1 CATEGORIES = textproc HOMEPAGE = https://github.com/ggreer/the_silver_searcher @@ -13,6 +13,11 @@ PERMIT_PACKAGE_CDROM = Yes # uses pledge() WANTLIB += c lzma pcre pthread z + +MODULES += gcc4 + +MODGCC4_LANGS =c++ +MODGCC4_ARCHS =* MASTER_SITES = http://geoff.greer.fm/ag/releases/ Index: distinfo === RCS file: /cvs/ports/textproc/the_silver_searcher/distinfo,v retrieving revision 1.19 diff -u -p -u -r1.19 distinfo --- distinfo30 Sep 2016 02:08:52 - 1.19 +++ distinfo1 Dec 2016 16:37:49 - @@ -1,2 +1,2 @@ -SHA256 (the_silver_searcher-0.33.0.tar.gz) = jKaAOZ317ohGpQnIpnwQ7h1fwalEVoBqD/ndkTuWHbM= -SIZE (the_silver_searcher-0.33.0.tar.gz) = 180522 +SHA256 (the_silver_searcher-1.0.1.tar.gz) = 2WgqcPWEIZfRA5HpuFdXbJtvxOkwzW0kHCSee0mC8so= +SIZE (the_silver_searcher-1.0.1.tar.gz) = 183173 Index: pkg/PLIST === RCS file: /cvs/ports/textproc/the_silver_searcher/pkg/PLIST,v retrieving revision 1.3 diff -u -p -u -r1.3 PLIST --- pkg/PLIST 17 May 2016 10:57:07 - 1.3 +++ pkg/PLIST 1 Dec 2016 16:37:49 - @@ -4,3 +4,6 @@ share/bash-completion/ share/bash-completion/completions/ share/bash-completion/completions/ag.bashcomp.sh +share/zsh/ +share/zsh/site-functions/ +share/zsh/site-functions/_the_silver_searcher
Re: Backport links+-2.0.14 to -stable (was: Re: [UPDATE] www/links+ to 2.14)
On Thu, December 1, 2016 5:07 am, Jeremie Courreges-Anglas wrote: > Jeremie Courreges-Anglas writes: > >> Should this be backported to -stable? > > It appears so, as discussed with Tim. Could someone give this a shot > on -stable? Please include the output of > ''make port-lib-depends-check''. > # make port-lib-depends-check links+2.14(www/links+): Extra: iconv.6 If you remove the gettext MODULE and add intl to WANTLIB, that goes away. This was done with the update to 2.13 previously in -current. But for -stable, the less churn the better. Tim.
Re: UPDATE: math/hdf5
On Wed, Nov 30, 2016 at 07:46:25PM +0100, Ingo Feinerer wrote: > Update math/hdf5 1.8.17 -> 1.8.18 > > The only dependency math/octave still works. I see that some library minors changed, why didn't you bump our minor? If you are sure about that, please commit. OK. > > Index: Makefile > === > RCS file: /cvs/ports/math/hdf5/Makefile,v > retrieving revision 1.8 > diff -u -p -r1.8 Makefile > --- Makefile 8 Jun 2016 10:53:52 - 1.8 > +++ Makefile 30 Nov 2016 18:38:40 - > @@ -2,12 +2,12 @@ > > COMMENT =Hierarchical Data Format 5 Technology suite > > -V = 1.8.17 > +V = 1.8.18 > DISTNAME = hdf5-${V} > > -SHARED_LIBS += hdf51.0 # 12.0 > -SHARED_LIBS += hdf5_cpp2.0 # 12.0 > -SHARED_LIBS += hdf5_hl 1.0 # 11.0 > +SHARED_LIBS += hdf51.0 # 12.1 > +SHARED_LIBS += hdf5_cpp3.0 # 13.0 > +SHARED_LIBS += hdf5_hl 1.0 # 11.1 > SHARED_LIBS += hdf5_hl_cpp 2.0 # 12.0 > > CATEGORIES = math > @@ -21,8 +21,8 @@ PERMIT_PACKAGE_CDROM = Yes > > WANTLIB += c m stdc++ z > > -MASTER_SITES = https://www.hdfgroup.org/ftp/HDF5/current/src/ \ > - > https://www.hdfgroup.org/ftp/HDF5/releases/hdf5-${V}/src/ > +MASTER_SITES = > https://support.hdfgroup.org/ftp/HDF5/current18/src/ \ > + > https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-${V}/src/ > > SEPARATE_BUILD = Yes > CONFIGURE_STYLE =gnu > Index: distinfo > === > RCS file: /cvs/ports/math/hdf5/distinfo,v > retrieving revision 1.3 > diff -u -p -r1.3 distinfo > --- distinfo 8 Jun 2016 10:53:52 - 1.3 > +++ distinfo 30 Nov 2016 18:38:40 - > @@ -1,2 +1,2 @@ > -SHA256 (hdf5-1.8.17.tar.gz) = 2c2il+52remIHEIImHk5JQ05e65iUtDMtm+n0k1n4mM= > -SIZE (hdf5-1.8.17.tar.gz) = 12304149 > +SHA256 (hdf5-1.8.18.tar.gz) = zbGVrY2eZ4Ks8kskiAYSifYVYowszahFewoMP7eooGM= > +SIZE (hdf5-1.8.18.tar.gz) = 12373674
Re: GSSAPI flavor for Dovecot
Yup, everything still works. - William On 11/30/2016 7:30 AM, William Leuschner wrote: > Ah, whoops! Thanks for catching that! I'll test it later today. > > – William > > On Nov 30, 2016, 07:15 -0500, Stuart Henderson , wrote: >> On 2016/11/29 11:53, William Leuschner wrote: >>> Hello Brad, >>> >>> I've written a patch for Dovecot that adds GSSAPI as a flavor. Could you >>> take a look at it? >> >> Your diff doesn't register the library dependencies properly. This one >> is more complete but I have no way to test nor opinion on whether it >> should be committed or not. >> >> Index: Makefile >> === >> RCS file: /cvs/ports/mail/Makefile,v >> retrieving revision 1.351 >> diff -u -p -r1.351 Makefile >> --- Makefile 2 Nov 2016 19:30:58 - 1.351 >> +++ Makefile 30 Nov 2016 12:15:02 - >> @@ -33,6 +33,7 @@ >> SUBDIR += dkim-milter >> SUBDIR += dkimproxy >> SUBDIR += dovecot >> + SUBDIR += dovecot,gssapi >> SUBDIR += dovecot-antispam >> SUBDIR += dovecot-pigeonhole >> SUBDIR += dspam >> Index: dovecot/Makefile >> === >> RCS file: /cvs/ports/mail/dovecot/Makefile,v >> retrieving revision 1.247 >> diff -u -p -r1.247 Makefile >> --- dovecot/Makefile 12 Nov 2016 15:37:32 - 1.247 >> >> +++ dovecot/Makefile 30 Nov 2016 12:15:02 - >> @@ -7,9 +7,7 @@ COMMENT-postgresql= PostgreSQL authentic >> >> V_MAJOR= 2.2 >> V_DOVECOT= 2.2.26.0 >> -REVISION= 0 >> -REVISION-server= 1 >> -REVISION-ldap= 1 >> +REVISION= 2 >> >> DISTNAME= dovecot-${V_DOVECOT} >> PKGNAME= dovecot-${V_DOVECOT} >> @@ -43,6 +41,12 @@ WANTLIB-ldap= crypto lber-2.4 ldap-2.4 s >> WANTLIB-mysql= crypto m lib/mysql/mysqlclient pthread ssl stdc++ z >> WANTLIB-postgresql= crypto pq>=4 ssl >> >> +.for i in ${MULTI_PACKAGES:N-main} >> +# subpackages aren't flavoured, so overwrite the default name/path >> +FULLPKGNAME$i ?= dovecot$i-${V_DOVECOT} >> +FULLPKGPATH$i ?= ${PKGPATH},$i >> +.endfor >> + >> LIB_DEPENDS+= archivers/bzip2 \ >> archivers/lz4 \ >> archivers/xz \ >> @@ -70,10 +74,19 @@ CONFIGURE_ARGS= --with-rundir=/var/dovec >> CONFIGURE_ENV= CPPFLAGS="-I${LOCALBASE}/include" \ >> LDFLAGS="-L${LOCALBASE}/lib" >> >> +FLAVORS= gssapi >> PSEUDO_FLAVORS= no_db no_ldap no_mysql no_postgresql >> FLAVOR?= >> .if ${FLAVOR:Mno_db} >> FLAVOR+= no_ldap no_mysql no_postgresql >> +.endif >> + >> +.if ${FLAVOR:Mgssapi} >> +CONFIGURE_ARGS+= --with-gssapi=yes >> +MODULES+= security/heimdal >> +LIB_DEPENDS-server= ${MODHEIMDAL_LIB_DEPENDS} >> +WANTLIB-server+= ${MODHEIMDAL_WANTLIB} com_err heimdal/lib/gssapi >> +WANTLIB-server+= heimdal/lib/heimntlm heimdal/lib/heimsqlite >> .endif >> >> MULTI_PACKAGES= -server -ldap -mysql -postgresql >> Index: dovecot/pkg/DESCR-server >> === >> RCS file: /cvs/ports/mail/dovecot/pkg/DESCR-server,v >> retrieving revision 1.6 >> diff -u -p -r1.6 DESCR-server >> --- dovecot/pkg/DESCR-server 28 May 2011 19:40:41 - 1.6 >> >> +++ dovecot/pkg/DESCR-server 30 Nov 2016 12:15:02 - >> @@ -4,3 +4,6 @@ several coding techniques to avoid most >> can work with standard mbox and maildir formats and it's fully compatible >> with UW-IMAP and Courier IMAP servers as well as mail clients accessing >> the mailboxes directly. >> + >> +Flavors: >> + gssapi: support for GSSAPI authentication in Dovecot >>
Re: [NEW] devel/premake
Le 2016-12-01 16:38, Solène Rapenne a écrit : Le 2016-11-30 21:28, Jeremie Courreges-Anglas a écrit : Note that the build is silent which is bad. Adding verbose=1 to MAKE_FLAGS would have helped to spot an -Os cc flag that shouldn't be there. The link step shouldn't use -s since it makes DEBUG=-g useless. This seems to embed lua-5.1, using lua from ports could be nice - if possible of course. Back to the purpose of the port, it would be nice to check whether the generated Makefiles would be usable within the OpenBSD ports tree. But are you just looking for feedback or are you actually submitting it for inclusion? New version here I would like to submit it for inclusion in the ports tree because it's a dependency of another submission of mine (games/t-engine) New version : - removing -Os compilation flag - DOC link changed in DESCR - licence in Makefile premake.tar.gz Description: GNU Zip compressed data
Re: [NEW] devel/premake
Le 2016-11-30 21:28, Jeremie Courreges-Anglas a écrit : Note that the build is silent which is bad. Adding verbose=1 to MAKE_FLAGS would have helped to spot an -Os cc flag that shouldn't be there. The link step shouldn't use -s since it makes DEBUG=-g useless. This seems to embed lua-5.1, using lua from ports could be nice - if possible of course. Back to the purpose of the port, it would be nice to check whether the generated Makefiles would be usable within the OpenBSD ports tree. But are you just looking for feedback or are you actually submitting it for inclusion? New version here I would like to submit it for inclusion in the ports tree because it's a dependency of another submission of mine (games/t-engine) premake.tar.gz Description: GNU Zip compressed data
Re: Backport links+-2.0.14 to -stable (was: Re: [UPDATE] www/links+ to 2.14)
On Thu, December 1, 2016 5:07 am, Jeremie Courreges-Anglas wrote: > Jeremie Courreges-Anglas writes: > >> trondd writes: >> >>> Update links+ to 2.14 >>> >>> Fixes some security related issues: >>> >>> * Limit keepalive of ciphers with 64-bit block size to mitigate >>> the SWEET32 attack >>> * Improved tor hardening - when the user toggles the "Only Proxies" >>> option >>> (i.e. when connecting to tor), we reset certain other options to their >>> default values, so that it is not possible to identify user behind tor >>> based on the selected options. >>> * Security bug fixed: Don't load or render the content of >>> "407 Proxy Authentication Required" reply when using https proxy. >>> This avoids the FalseCONNECT attack. >>> Also, don't allow 401 and 407 responses to set cookies. >> >> Should this be backported to -stable? > > It appears so, as discussed with Tim. Could someone give this a shot > on -stable? Please include the output of > ''make port-lib-depends-check''. > I built it on -stable last night, but with my own diff. It built and ran without X. I won't have access to a -stable system with X until later today. I don't recall any problem with lib-depends-check. I can run your diff on another non-gui -stable right now and double check the depends. Tim.
Re: Let's remove sysutils/lsof
Jiri B writes: >> lsof is a problem. It is tightly coupled to the base system, enough to >> require /usr/src/sys checked out to be able to build it. This means >> that it breaks quite frequently: > > Correcting Pascal's mail... > > IMO lsof is used because BSD' netstat > doesn't show PID of a process with open sockets. fstat could be > used with little filter effort. net/arm could indeed be easily patched to use fstat output, sthen@ proposed an initial patch for this: http://marc.info/?l=openbsd-ports&m=147445148420200&w=2 More code is needed to completely replace the lsof bits. Someone who's interested in tor / arm could take a look at this. However this is unrelated to whether we should keep lsof or not. Testing shows that currently net/arm works *because* it can't use lsof. -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: Let's remove sysutils/lsof
On Thu, Dec 01, 2016 at 07:49:22AM -0500, Jiri B wrote: > > lsof is a problem. It is tightly coupled to the base system, enough to > > require /usr/src/sys checked out to be able to build it. This means > > that it breaks quite frequently: > > Correcting Pascal's mail... LOL, .co != .com :) Stupid me! > IMO lsof is used because BSD' netstat > doesn't show PID of a process with open sockets. fstat could be > used with little filter effort. > > j.
Re: Let's remove sysutils/lsof
> lsof is a problem. It is tightly coupled to the base system, enough to > require /usr/src/sys checked out to be able to build it. This means > that it breaks quite frequently: Correcting Pascal's mail... IMO lsof is used because BSD' netstat doesn't show PID of a process with open sockets. fstat could be used with little filter effort. j.
Let's remove sysutils/lsof
lsof is a problem. It is tightly coupled to the base system, enough to require /usr/src/sys checked out to be able to build it. This means that it breaks quite frequently: http://marc.info/?l=openbsd-ports&s=lsof It also needs /dev/mem access and doesn't even work without sysctl kern.allowkmem=1. So it is currently *broken* with a default install, and requires you to tune down security parameters. Nobody stepped up to fix it and make it play nicer, despite the heads-up: http://marc.info/?l=openbsd-ports&m=147445148420200&w=2 Only net/arm depends on it right now, and even there lsof is a problem. If lsof can't work because of lack of /dev/mem access, arm seems to run fine. If you hack things up to allow lsof to work, which means: 1. setting kern.allowkmem=1 2. running arm as root or adding the setuid bit to the lsof executable *cough* then arm will hang and be completely unusable. (Thanks danj@ for helping up with the tests.) I therefore propose that we gently move lsof to the Attic. ok? Index: Makefile === RCS file: /d/cvs/ports/net/arm/Makefile,v retrieving revision 1.5 diff -u -p -r1.5 Makefile --- Makefile7 May 2016 12:40:58 - 1.5 +++ Makefile1 Dec 2016 11:38:41 - @@ -4,7 +4,7 @@ COMMENT = terminal status monitor for T V =1.4.5.0 DISTNAME = arm-${V} -REVISION = 2 +REVISION = 3 SUBST_VARS += V @@ -22,7 +22,6 @@ EXTRACT_SUFX =.tar.bz2 MODULES = lang/python RUN_DEPENDS = net/tor \ - sysutils/lsof \ devel/desktop-file-utils NO_TEST = Yes -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
sync vim-spell for vim 8.0
Since editors/vim was upgraded to 8.0 spell checking stopped working for non-English languages. And it seems one of the spell files has been updated and we are currently shipping an outdated copy. ok? Index: Makefile.inc === RCS file: /cvs/ports/editors/vim-spell/Makefile.inc,v retrieving revision 1.5 diff -u -p -r1.5 Makefile.inc --- Makefile.inc6 Oct 2013 00:01:19 - 1.5 +++ Makefile.inc1 Dec 2016 11:45:08 - @@ -5,7 +5,7 @@ LANGS = af am bg ca cs cy da de el eo e sl sv sw tet tl tn uk yi zu HOMEPAGE = http://www.vim.org/ -VERSION = 7.4 +VERSION = 8.0 P =${VERSION:C/[\.]//g} CATEGORIES = editors MASTER_SITES = http://ftp.vim.org/pub/vim/runtime/spell/ \ Index: distinfo === RCS file: /cvs/ports/editors/vim-spell/distinfo,v retrieving revision 1.5 diff -u -p -r1.5 distinfo --- distinfo6 Oct 2013 00:01:19 - 1.5 +++ distinfo1 Dec 2016 11:52:28 - @@ -12,7 +12,7 @@ SHA256 (vim-spell/cy.iso-8859-14.spl) = SHA256 (vim-spell/cy.utf-8.spl) = bq3PEmlTu9oYjlG0fVGMGMrhdkSbQXQIZet0Ykx7Y+Q= SHA256 (vim-spell/da.latin1.spl) = HFpTgE2YQpYbIGHQvnLSQ4cdTvqnGZ76SbiN6d9iFMg= SHA256 (vim-spell/da.utf-8.spl) = kmorKLt1tRESopA8mLD1HfFvEMuDcvXugpH4Y2nAiTI= -SHA256 (vim-spell/de.latin1.spl) = Soei77591SlzN9GEWvxvQWBvcVgJoJ96uRAKG8kkG4M= +SHA256 (vim-spell/de.latin1.spl) = uo/ZhmXtLdDjNkL2l+QJ6Ac7ny1muAHE/eeKotBEu3A= SHA256 (vim-spell/de.utf-8.spl) = Q9ZvqkTn7hdeZfjGk+mwPT/Z5ryLSD50vrshRbl1l2Q= SHA256 (vim-spell/el.iso-8859-7.spl) = foUXQL9msjd8i+7r/qEQ1it70h6IzB4B40OTZdXsVWo= SHA256 (vim-spell/el.utf-8.spl) = P93wqLJYoY7gW6VLb5gssADDs4iOo4Fn6RA8MjFx5Zc=
Backport links+-2.0.14 to -stable (was: Re: [UPDATE] www/links+ to 2.14)
Jeremie Courreges-Anglas writes: > trondd writes: > >> Update links+ to 2.14 >> >> Fixes some security related issues: >> >> * Limit keepalive of ciphers with 64-bit block size to mitigate >> the SWEET32 attack >> * Improved tor hardening - when the user toggles the "Only Proxies" option >> (i.e. when connecting to tor), we reset certain other options to their >> default values, so that it is not possible to identify user behind tor >> based on the selected options. >> * Security bug fixed: Don't load or render the content of >> "407 Proxy Authentication Required" reply when using https proxy. >> This avoids the FalseCONNECT attack. >> Also, don't allow 401 and 407 responses to set cookies. > > Should this be backported to -stable? It appears so, as discussed with Tim. Could someone give this a shot on -stable? Please include the output of ''make port-lib-depends-check''. Index: Makefile === RCS file: /d/cvs/ports/www/links+/Makefile,v retrieving revision 1.58 diff -u -p -r1.58 Makefile --- Makefile17 Jan 2016 17:29:10 - 1.58 +++ Makefile1 Dec 2016 09:58:08 - @@ -1,8 +1,7 @@ # $OpenBSD: Makefile,v 1.58 2016/01/17 17:29:10 sthen Exp $ COMMENT= graphics and text browser -VER= 2.12 -REVISION= 0 +VER= 2.14 DISTNAME= links-${VER} PKGNAME= links+-${VER} CATEGORIES=www @@ -34,7 +33,7 @@ LIB_DEPENDS+= graphics/jpeg \ CONFIGURE_ARGS+= --with-x --enable-graphics WANTLIB+= X11 jpeg>=62 m png>=2 tiff>=35 WANTLIB += cairo event gdk_pixbuf-2.0 gio-2.0 glib-2.0 gobject-2.0 -WANTLIB += rsvg-2 +WANTLIB += rsvg-2 fontconfig MESSAGE= ${PKGDIR}/MESSAGE.x11 .endif Index: distinfo === RCS file: /d/cvs/ports/www/links+/distinfo,v retrieving revision 1.29 diff -u -p -r1.29 distinfo --- distinfo6 Oct 2015 22:43:50 - 1.29 +++ distinfo1 Dec 2016 09:51:54 - @@ -1,2 +1,2 @@ -SHA256 (links-2.12.tar.gz) = Lj2mGT3p1u5xvEvqsXFp7MWNfL8uIBkqP1GO2ffyLjM= -SIZE (links-2.12.tar.gz) = 7032939 +SHA256 (links-2.14.tar.gz) = IvqNy1pguP/WEd4x69THntzkcmN6NVS6tAF5XakdQ4c= +SIZE (links-2.14.tar.gz) = 7142389 Index: patches/patch-html_c === RCS file: /d/cvs/ports/www/links+/patches/patch-html_c,v retrieving revision 1.15 diff -u -p -r1.15 patch-html_c --- patches/patch-html_c20 Sep 2015 08:01:09 - 1.15 +++ patches/patch-html_c1 Dec 2016 09:53:25 - @@ -1,7 +1,7 @@ $OpenBSD: patch-html_c,v 1.15 2015/09/20 08:01:09 landry Exp $ html.c.origSat Jul 25 13:41:36 2015 -+++ html.c Sun Sep 20 09:33:31 2015 -@@ -970,6 +970,7 @@ static void html_a(unsigned char *a) +--- html.c.origWed Nov 16 23:49:10 2016 html.c Thu Dec 1 10:53:25 2016 +@@ -987,6 +987,7 @@ static void html_a(unsigned char *a) format_.target = stracpy(format_.target_base); } /*format_.attr ^= AT_BOLD;*/ Index: patches/patch-https_c === RCS file: /d/cvs/ports/www/links+/patches/patch-https_c,v retrieving revision 1.3 diff -u -p -r1.3 patch-https_c --- patches/patch-https_c 6 Oct 2015 22:43:50 - 1.3 +++ patches/patch-https_c 1 Dec 2016 09:56:30 - @@ -1,11 +1,11 @@ $OpenBSD: patch-https_c,v 1.3 2015/10/06 22:43:50 sthen Exp $ https.c.orig Thu Sep 17 18:28:56 2015 -+++ https.cTue Oct 6 10:49:16 2015 -@@ -87,6 +87,10 @@ SSL *getSSL(void) - if (RAND_load_file(cast_const_char f_randfile, -1)) - RAND_write_file(cast_const_char f_randfile); +--- https.c.orig Sat Nov 19 19:52:07 2016 https.cThu Dec 1 10:56:17 2016 +@@ -88,6 +88,10 @@ links_ssl *getSSL(void) + RAND_write_file(cast_const_char f_randfile); + } } -+#elif defined(HAVE_RAND_FILE_NAME) && defined(HAVE_RAND_LOAD_FILE) && defined(HAVE_RAND_WRITE_FILE) ++#elif defined(HAVE_RAND_EGD) && defined(HAVE_RAND_FILE_NAME) && defined(HAVE_RAND_LOAD_FILE) && defined(HAVE_RAND_WRITE_FILE) + const unsigned char *f = (const unsigned char *)RAND_file_name(cast_char f_randfile, sizeof(f_randfile)); + if (RAND_load_file(cast_const_char f_randfile, -1)) + RAND_write_file(cast_const_char f_randfile); -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: NEW: www/netsurf/libnspsl
On Wed, Nov 30, 2016 at 11:39:42PM -0700, Anthony J. Bentley wrote: > Hi, > > The Public Suffix List is a database of top level domain names. The > database allows an application to determine if if a domain name requires > an additional label to be valid. > > The nspsl library generates a static code representation of the Public > Suffix List for use in the NetSurf web browser. > > > ok? ok but remove the CVS subdirs before importing..