CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/04/24 16:54:10 Modified files: x11/qt5/qt3d : Makefile x11/qt5/qtwebchannel: Makefile Log message: x11/qt5/*: bump -main too after PLIST changes
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/04/20 08:49:48 Modified files: multimedia/libmediainfo: Makefile distinfo multimedia/mediainfo: Makefile distinfo Log message: mediainfo: maintenance update to 24.04
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/04/16 09:29:55 Modified files: audio/opus : Makefile distinfo Added files: audio/opus/patches: patch-celt_arm_armcpu_c Log message: audio/opus: update to 1.5.2 * Significant improvement to packet loss robustness using Deep Redundancy * Improved packet loss concealment through Deep PLC * Low-bitrate speech quality enhancement down to 6 kb/s wideband * Improved x86 (AVX2) and Arm (Neon) optimizations * Support for 4th and 5th order ambisonics This update enables the new machine learning features: https://opus-codec.org/demo/opus-1.5/
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/04/14 12:14:12 Modified files: archivers/libarchive: Makefile distinfo archivers/libarchive/patches: patch-cpio_bsdcpio_1 patch-tar_bsdtar_1 Log message: archivers/libarchive: update to 3.7.3 New features: * add trailing letter b to bsdtar(1) substitute pattern * add support for long options "--group" and "--owner" to bsdtar(1)
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/04/09 07:56:50 Modified files: audio/mpg123 : Makefile distinfo Log message: audio/mpg123: maintenance update to 1.32.6 No changes on OpenBSD.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/04/07 09:19:57 Modified files: net/curl : Tag: OPENBSD_7_5 Makefile distinfo net/curl/pkg : Tag: OPENBSD_7_5 PLIST Removed files: net/curl/patches: Tag: OPENBSD_7_5 patch-lib_curl_ntlm_wb_c Log message: net/curl: security update to 8.7.1 Changes: * CURLINFO_USED_PROXY: return bool whether the proxy was used * digest: support SHA-512/256 * DoH: add trace configuration * write-out: add '%{proxy_used}' Includes fixes for CVE-2024-2004: Usage of disabled protocol CVE-2024-2398: HTTP/2 push headers memory-leak Also install zsh and fish shell completions.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/04/06 14:19:59 Modified files: archivers/unrar: Makefile distinfo archivers/unrar/patches: patch-os_hpp patch-rijndael_cpp Added files: archivers/unrar/patches: patch-crc_cpp Removed files: archivers/unrar/patches: patch-makefile patch-rijndael_hpp Log message: archivers/unrar: update to 7.00 Stop linking against libcrypto for AES, and enable the included support for instruction set extensions to accelerate decryption and checksumming on x86 and arm64.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/04/01 14:52:56 Modified files: multimedia/libmediainfo: Makefile distinfo multimedia/mediainfo: Makefile distinfo Log message: mediainfo: maintenance update to 24.03
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/04/01 13:35:46 Modified files: net/curl : Makefile distinfo net/curl/pkg : PLIST Removed files: net/curl/patches: patch-lib_curl_ntlm_wb_c Log message: net/curl: security update to 8.7.1 Changes: * CURLINFO_USED_PROXY: return bool whether the proxy was used * digest: support SHA-512/256 * DoH: add trace configuration * write-out: add '%{proxy_used}' Includes fixes for CVE-2024-2004: Usage of disabled protocol CVE-2024-2398: HTTP/2 push headers memory-leak Also install zsh and fish shell completions.
Re: archivers/xz: update to 5.6.1
Christian Weisgerber: > If the script continued, it would fail because it uses "head -c" > and "tail -c" which are a nonstandard extension that the corresponding > OpenBSD commands don't support. Actually, "tail -c" is in POSIX and available on OpenBSD. Still would fail for "head -c", though. -- Christian "naddy" Weisgerber na...@mips.inka.de
Re: archivers/xz: update to 5.6.1
Christian Weisgerber: > > It sounds like a backdoor made it into the upstream repository: > > https://www.openwall.com/lists/oss-security/2024/03/29/4 > > Yes, I just learned. I am investigating. The xz 5.6.1 update hasn't been committed yet, so this mostly concerns only me anyway. * A malicious m4/build-to-host.m4 has been inserted and its code is used in the generated configure script. * This extracts and executes a shell script from tests/files/bad-3-corrupt_lzma2.xz. That script aborts if $(uname) is not Linux. <=== IT ENDS HERE. If the script continued, it would fail because it uses "head -c" and "tail -c" which are a nonstandard extension that the corresponding OpenBSD commands don't support. * The script extracts the next stage shell script from tests/files/good-large_compressed.lzma. This stage aborts again early when $(uname) is not Linux. It then proceeds to manipulate the build in some way I won't waste my time to figure out. In short, it's a supply chain attack on Linux that doesn't concern OpenBSD. PS: If anybody wants to compare build-to-host.m4, here's the GNU upstream: https://git.savannah.gnu.org/gitweb/?p=gnulib.git;a=blob;f=m4/build-to-host.m4;h=f928e9ab403b3633e3d1d974abcf478e65d4b0aa;hb=HEAD -- Christian "naddy" Weisgerber na...@mips.inka.de
Re: archivers/xz: update to 5.6.1
Jesse Darrone: > I hate to raise the alarm, but it looks like this should be scrutinized. > > It sounds like a backdoor made it into the upstream repository: > https://www.openwall.com/lists/oss-security/2024/03/29/4 Yes, I just learned. I am investigating. FWIW, I did look over the complete 5.4.5 -> 5.6.1 diff as part of my regular update procedure, but didn't catch this in the 144028-line diff. -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/03/25 10:43:32 Modified files: shells/yash: Makefile distinfo shells/yash/patches: patch-configure patch-variable_c shells/yash/pkg: PLIST Removed files: shells/yash/patches: patch-lineedit_editing_c Log message: shells/yash: update to 2.56.1
audio/opus: update to 1.5.1
audio/opus: update to 1.5.1 * Significant improvement to packet loss robustness using Deep Redundancy * Improved packet loss concealment through Deep PLC * Low-bitrate speech quality enhancement down to 6 kb/s wideband * Improved x86 (AVX2) and Arm (Neon) optimizations * Support for 4th and 5th order ambisonics This update enables the new machine learning features: https://opus-codec.org/demo/opus-1.5/ I decided to enable the ML features because they must be explicitly enabled by the caller, so apart from code size, having them doesn't incur any cost. I added the missing detection code for arm and arm64 instruction set extensions. This could use another pair of eyes. The PRESUME defines are set by testing whether certain intrinsics can be compiled with the default compiler options, so the idea is that those instructions are supported by all machines this code was compiled for. The MAY_HAVE defines are set by testing with additional -march compiler flags, so the idea is that only some machines will actually support those instructions, as determined by a runtime check. The port needs a compile test on armv7. An additional small fix was needed for FreeBSD/armv7, but I have trouble understanding it and I don't know if OpenBSD is affected, too. diff be988415f4d56f263d8683085eef00ba2324920c d65615b6802f8ddeb4536c340034d07be3df3483 commit - be988415f4d56f263d8683085eef00ba2324920c commit + d65615b6802f8ddeb4536c340034d07be3df3483 blob - 0c28150d8be0e27c51d8e512e8f3e7e88893310d blob + 347df1e7d4a575894c0f9c37ca92e7085b941f0b --- audio/opus/Makefile +++ audio/opus/Makefile @@ -1,8 +1,8 @@ COMMENT= IETF audio codec -VERSION= 1.4 +VERSION= 1.5.1 DISTNAME= opus-${VERSION} -SHARED_LIBS= opus1.4 # 9.0 +SHARED_LIBS= opus1.5 # 10.0 CATEGORIES=audio HOMEPAGE= https://opus-codec.org/ @@ -12,8 +12,7 @@ MAINTAINER= Christian Weisgerber # BSD PERMIT_PACKAGE=Yes -SITES= https://downloads.xiph.org/releases/opus/ \ - https://github.com/xiph/opus/releases/download/v${VERSION}/ +SITES= https://downloads.xiph.org/releases/opus/ WANTLIB= m @@ -21,5 +20,10 @@ USE_GMAKE= Yes SEPARATE_BUILD=Yes CONFIGURE_STYLE=gnu CONFIGURE_ARGS=--disable-doc # requires doxygen +# enable machine learning features +CONFIGURE_ARGS+=--enable-dred \ + --enable-osce +DEBUG_PACKAGES=${BUILD_PACKAGES} + .include blob - 4a01917d51a99dbf17ef11f597907f3ab2f7e692 blob + f2e7261c08569c1ee1e5798d9d7aebe8c817521c --- audio/opus/distinfo +++ audio/opus/distinfo @@ -1,2 +1,2 @@ -SHA256 (opus-1.4.tar.gz) = ybMrQlO+WuY9H/Fu6ga5S18PKVG3oCrO71jjo85JxR8= -SIZE (opus-1.4.tar.gz) = 1063408 +SHA256 (opus-1.5.1.tar.gz) = uEYQlZuNQXthGqEqIlZeCjcyCXxjidGQmNhEVD40D4U= +SIZE (opus-1.5.1.tar.gz) = 7834540 blob - /dev/null blob + dadb4de8cd32c628ccfd9f9485f6c0af473bc2cc (mode 644) --- /dev/null +++ audio/opus/patches/patch-celt_arm_armcpu_c @@ -0,0 +1,42 @@ +Index: celt/arm/armcpu.c +--- celt/arm/armcpu.c.orig celt/arm/armcpu.c +@@ -191,6 +191,38 @@ opus_uint32 opus_cpu_capabilities(void) + return flags; + } + ++#elif defined(__OpenBSD__) ++#include ++#include ++#include ++#include ++ ++opus_uint32 opus_cpu_capabilities(void) ++{ ++ opus_uint32 flags = 0; ++ ++#if defined(OPUS_ARM_MAY_HAVE_DOTPROD) && defined(CPU_ID_AA64ISAR0) ++ const int isar0_mib[] = { CTL_MACHDEP, CPU_ID_AA64ISAR0 }; ++ uint64_t isar0; ++ size_t len = sizeof(isar0); ++ ++ if (sysctl(isar0_mib, 2, , , NULL, 0) != -1) ++ { ++if (ID_AA64ISAR0_DP(isar0) >= ID_AA64ISAR0_DP_IMPL) ++ flags |= OPUS_CPU_ARM_DOTPROD_FLAG; ++ } ++#endif ++ ++#if defined(OPUS_ARM_PRESUME_NEON_INTR) \ ++ || defined(OPUS_ARM_PRESUME_AARCH64_NEON_INTR) ++ flags |= OPUS_CPU_ARM_EDSP_FLAG | OPUS_CPU_ARM_MEDIA_FLAG | OPUS_CPU_ARM_NEON_FLAG; ++# if defined(OPUS_ARM_PRESUME_DOTPROD) ++ flags |= OPUS_CPU_ARM_DOTPROD_FLAG; ++# endif ++#endif ++ return flags; ++} ++ + #else + /* The feature registers which can tell us what the processor supports are + * accessible in priveleged modes only, so we can't have a general user-space -- Christian "naddy" Weisgerber na...@mips.inka.de
archivers/xz: update to 5.6.1
archivers/xz: update to 5.6.1 * Multithreaded mode is now the default. * New command line options to set filter chains using the liblzma filter string syntax. * Significant speed optimizations to the LZMA decoder. I have added runtime detection code to check for CRC32 instructions to speed up CRC32 integrity checks on arm64. I intend to submit this upstream, so if anybody has comments on that, let me know. (xz defaults to CRC64 anyway, so this has little practical value, but it is supported on other operating systems.) Upstream has added pledge() support to xzdec, rendering our previous patch obsolete. ok? diff d65615b6802f8ddeb4536c340034d07be3df3483 41fabc9987fb853589f2dd0de774d8f5cdbd0b69 commit - d65615b6802f8ddeb4536c340034d07be3df3483 commit + 41fabc9987fb853589f2dd0de774d8f5cdbd0b69 blob - d1f7ac3fc25e3152944c4efae9a179e35ab504dc blob + 40addd5d055828107dd9fdb477184ffa605b5fd1 --- archivers/xz/Makefile +++ archivers/xz/Makefile @@ -1,18 +1,19 @@ COMMENT= library and tools for XZ and LZMA compressed files -DISTNAME= xz-5.4.5 -SHARED_LIBS= lzma 2.2 # 9.4 +VERSION= 5.6.1 +DISTNAME= xz-${VERSION} +SHARED_LIBS= lzma 2.3 # 11.1 CATEGORIES=archivers DPB_PROPERTIES=parallel -HOMEPAGE= https://tukaani.org/xz/ +HOMEPAGE= https://xz.tukaani.org/xz-utils/ MAINTAINER=Christian Weisgerber # GPLv2+ PERMIT_PACKAGE=Yes -SITES= ${SITE_SOURCEFORGE:=lzmautils/} +SITES= https://github.com/tukaani-project/xz/releases/download/v${VERSION}/ # uses pledge() WANTLIB= c pthread blob - 98b88e2abbfec958489da8fba87fb00df54b8532 blob + 83ae5ae9b49b503f0bcb1672db69e161dbb814b0 --- archivers/xz/distinfo +++ archivers/xz/distinfo @@ -1,2 +1,2 @@ -SHA256 (xz-5.4.5.tar.gz) = E1yQuTSu6PvA1Gfeh6Bctw1ifaNqvlGMNXqHNwnlt9Y= -SIZE (xz-5.4.5.tar.gz) = 2884510 +SHA256 (xz-5.6.1.tar.gz) = I5j0qOUzRTJfRL3Z8Mx0Ab2QJdc2xtQ7Ny9N6ne/dbg= +SIZE (xz-5.6.1.tar.gz) = 3045434 blob - 6061c7f3c22f7e992a2b66ff5cd7082eb1ffd5c8 (mode 644) blob + /dev/null --- archivers/xz/patches/patch-config_h_in +++ /dev/null @@ -1,16 +0,0 @@ -Index: config.h.in config.h.in.orig -+++ config.h.in -@@ -409,7 +409,11 @@ - - /* Define to 1 if the system supports fast unaligned access to 16-bit, 32-bit, -and 64-bit integers. */ --#undef TUKLIB_FAST_UNALIGNED_ACCESS -+#include -+#if !defined(__STRICT_ALIGNMENT) -+#define \ -+TUKLIB_FAST_UNALIGNED_ACCESS 1 -+#endif - - /* Define to 1 if the amount of physical memory can be detected with -_system_configuration.physmem. */ blob - /dev/null blob + a4b473567a4e085aa4ae0b4af893e51eed1e2014 (mode 644) --- /dev/null +++ archivers/xz/patches/patch-src_liblzma_check_crc32_arm64_h @@ -0,0 +1,30 @@ +Index: src/liblzma/check/crc32_arm64.h +--- src/liblzma/check/crc32_arm64.h.orig src/liblzma/check/crc32_arm64.h +@@ -28,6 +28,11 @@ + # include + # elif defined(__APPLE__) && defined(HAVE_SYSCTLBYNAME) + # include ++# elif defined(__OpenBSD__) ++# include ++# include ++# include ++# include + # endif + #endif + +@@ -103,6 +108,14 @@ is_arch_extension_supported(void) + , NULL, 0); + + return !err && has_crc32; ++ ++#elif defined(__OpenBSD__) ++ const int isar0_mib[] = { CTL_MACHDEP, CPU_ID_AA64ISAR0 }; ++ uint64_t isar0; ++ size_t len = sizeof(isar0); ++ ++ return sysctl(isar0_mib, 2, , , NULL, 0) != -1 && ++ ID_AA64ISAR0_CRC32(isar0) >= ID_AA64ISAR0_CRC32_BASE; + + #else + // If a runtime detection method cannot be found, then this must blob - 399cb3be7c7e9134963d36b0858d09da5dc0e3ff (mode 644) blob + /dev/null --- archivers/xz/patches/patch-src_xzdec_xzdec_c +++ /dev/null @@ -1,21 +0,0 @@ -Index: src/xzdec/xzdec.c src/xzdec/xzdec.c.orig -+++ src/xzdec/xzdec.c -@@ -295,9 +295,17 @@ main(int argc, char **argv) - - if (optind == argc) { - // No filenames given, decode from stdin. -+ if (pledge("stdio", NULL) == -1) { -+ my_errorf("pledge"); -+ exit(EXIT_FAILURE); -+ } - uncompress(, stdin, "(stdin)"); - } else { - // Loop through the filenames given on the command line. -+ if (pledge("stdio rpath", NULL) == -1) { -+ my_errorf("pledge"); -+ exit(EXIT_FAILURE); -+ } - do { - // "-" indicates stdin. - if (strcmp(argv[optind], "-") == 0) { blob - /dev/null blob + c2a62aaeb707f0b281f921f3b2064334f94de22b (mode 644) --- /dev/null +++ archivers/xz/patches/patch-src_liblzma_check_crc_common_h @@ -0,0 +1,13 @@ +Index: src/liblzma/check/crc_common.h +--- src/liblzma/chec
Ports tree unlocked
The 7.5 release is done. The ports tree is unlocked again. -- Christian "naddy" Weisgerber na...@mips.inka.de
Re: quiche security update
Otto Moerbeek: > maybe I was not being clear... it would be ncie to have this in the release. Too late. > > This is a security update to quiche. > > See https://github.com/cloudflare/quiche/releases/tag/0.20.1 That only prevents a type of denial-of-service attack, anyway. -- Christian "naddy" Weisgerber na...@mips.inka.de
Ports commits now require approval
Any ports tree commits now need to be approved by sthen@ or me. If you have changes you consider important or fixes, don't hesitate to ask. -- Christian "naddy" Weisgerber na...@mips.inka.de
No more imports, only important updates
The release is rapidly approaching. Please, no more imports of new ports. Also, only important updates should still go in, i.e., if they fix something or are required for the lifetime of -stable. Obviously we still want bug fixes! -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/03/09 08:18:28 Modified files: lang/dmd : Makefile lang/ldc : Makefile Log message: lang/dmd, lang/ldc: disable until new bootstrap becomes available
Slowing down for the release; testing
The OpenBSD 7.5 release is quickly approaching and it's time to slow down work on the ports tree. There are no formal restrictions yet, but please refrain from commits that run the risk of introducing breakage in the tree. If you break something now, little time will remain to fix it. Also, if people don't want to find out after the release that their favorite application is broken, now is the time to test the latest packages. In particular, OpenBSD is leading the curve by enforcing indirect branch tracking (IBT) on 11th generation and later Intel CPUs. We have tried to adapt all ports one way or another, but it's possible something slipped through and will die with SIGILL at runtime. Please test. -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/27 18:06:35 Modified files: devel/gettext/patches: patch-gettext-runtime_intl_gnulib-lib_math_in_h patch-gettext-tools_gnulib-lib_math_in_h patch-libtextstyle_lib_math_in_h Log message: devel/gettext: sync gnulib patch with upstream
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/27 15:25:02 Modified files: devel/gettext : Makefile distinfo devel/gettext/patches: patch-gettext-runtime_intl_Makefile_in patch-gettext-runtime_intl_configure patch-gettext-tools_gnulib-lib_Makefile_in patch-gettext-tools_src_Makefile_in devel/gettext/pkg: PLIST-tools Added files: devel/gettext/patches: patch-gettext-runtime_intl_gnulib-lib_math_in_h patch-gettext-tools_gnulib-lib_math_in_h patch-libtextstyle_lib_math_in_h Removed files: devel/gettext/patches: patch-gettext-tools_gnulib-lib_asyncsafe-spin_c Log message: devel/gettext: maintenance update to 0.22.5, no significant changes
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/22 04:28:56 Modified files: sysutils/crust : Makefile Log message: sysutils/crust: requires bison
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/20 13:34:08 Modified files: misc/vttest: Makefile distinfo Log message: misc/vttest: maintenance update to 20240218
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/19 03:55:03 Modified files: audio/mpg123 : Makefile distinfo Log message: audio/mpg123: update to 1.32.5
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/18 06:29:27 Modified files: devel/clang-tools-extra: Makefile devel/llvm/13 : Makefile editors/xemacs21/stable: Makefile lang/bootgcc : Makefile lang/gcc/11: Makefile lang/gcc/8 : Makefile lang/gpc : Makefile lang/pcc/pcc-libs: Makefile lang/swi-prolog: Makefile math/octave: Makefile Log message: bump for plist changes 7.4 -> 7.5
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/13 07:44:16 Modified files: graphics/png : Makefile distinfo graphics/png/patches: patch-Makefile_in Log message: graphics/png: maintenance update to 1.6.42
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/05 14:57:57 Modified files: multimedia/libmediainfo: Makefile distinfo multimedia/libmediainfo/patches: patch-Project_GNU_Library_configure_ac multimedia/mediainfo: Makefile distinfo Log message: mediainfo: maintenance update to 24.01
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/05 14:45:14 Modified files: net/curl : Tag: OPENBSD_7_4 Makefile distinfo net/curl/patches: Tag: OPENBSD_7_4 patch-m4_curl-compilers_m4 net/curl/pkg : Tag: OPENBSD_7_4 PLIST Added files: net/curl/patches: Tag: OPENBSD_7_4 patch-lib_curl_ntlm_wb_c Removed files: net/curl/patches: Tag: OPENBSD_7_4 patch-tests_data_DISABLED Log message: net/curl: security update to 8.6.0 Includes a fix for CVE-2024-0853: OCSP verification bypass with TLS session reuse
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/05 14:18:39 Removed files: net/curl/patches: patch-tests_data_DISABLED Log message: net/curl: re-enable test accidentally broken in the preceding release
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/02/05 13:33:05 Modified files: net/curl : Makefile distinfo net/curl/patches: patch-m4_curl-compilers_m4 net/curl/pkg : PLIST Added files: net/curl/patches: patch-lib_curl_ntlm_wb_c Log message: net/curl: security update to 8.6.0 Includes a fix for CVE-2024-0853: OCSP verification bypass with TLS session reuse
Re: NEW: x11/emwm
Omar Polo: > Here's an updated tarball with a few more tweaks on top: > > - use DIST_TUPLE instead of GH_* (takes less lines :-) > - don't need to patch the makefile; just override the variables using >MAKE_FLAGS and FAKE_FLAGS > - use tabs for indenting the values I've been wanting to look at this for months, well before the port was submitted here, but I can never find the time, so just some quick remarks: If it uses the 1.1 release anyway, it should just use the release tarball https://fastestcode.org/dl/emwm-src-1.1.tar.xz instead of GitHub. This is advertised as an mwm fork "without changing the way the window manager looks and behaves". Well, it _looks_ different, even after neutering app-defaults/Emwm. What's up with that? Also, aren't those app-defaults intended as an example, rather than actual defaults? Resizing xterm is a crapshoot, because their is a size mismatch between emwm and xterm. A default 80x24 xterm is "81x26" or some such. This is a showstopper, IMO. I don't know whether it also affects pixel-dimensioned windows. On the plus side, it interops better with Firefox in at least two regards: * Maximizing the Firefox window correctly maximizes it. (With mwm its extended to twice the screen height/width.) * The PiP window can be moved. -- Christian "naddy" Weisgerber na...@mips.inka.de
Re: Using git mirror instead of CVS for working with ports?
Johannes Thyssen Tishman: > Subject says it all. I'm wondering if using the git conversion > of the ports tree[0] is regarded as a good alternative to CVS for > working with ports. If you are more comfortable with Got[1] or Git, by all means use them. sthen@ has already explained the limits of the conversion. > Do any of you porters use it instead of CVS? I've mostly switched to Got for all of OpenBSD, and treat CVS as write-only. From the format of the patches flying around, it's obvious that there are a number of committers that use Got or Git. > [0] https://github.com/openbsd/ports https://codeberg.org/OpenBSD/ports [1] https://gameoftrees.org/ -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/01/25 04:03:17 Modified files: games/fnaify : Makefile Log message: games/fnaify: catch up with fna ports move
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/01/24 12:48:08 Modified files: shells/bash: Makefile distinfo Log message: shells/bash: update to 5.2 patchlevel 26
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/01/19 15:01:37 Modified files: www/w3m: Makefile Added files: www/w3m/patches: patch-etc_c Log message: www/w3m: Fix OOB access due to multiple backspaces This is the upstream fix for CVE-2023-4255, via tj@
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/01/17 09:11:45 Modified files: archivers/gcpio: Makefile distinfo archivers/gcpio/pkg: PLIST Log message: archivers/gcpio: update to 2.15 * Fix operation of --no-absolute-filenames --make-directories * Restore access and modification times of symlinks in copy-in and copy-pass modes.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/01/15 15:01:23 Removed files: audio/mpg123/patches: patch-src_libmpg123_dct36_avx_S patch-src_libmpg123_dct36_neon64_S patch-src_libmpg123_dct36_x86_64_S Log message: audio/mpg123: actually remove empty patches pointed out by jca@
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/01/15 14:32:29 Modified files: audio/mpg123 : Makefile distinfo audio/mpg123/patches: patch-src_libmpg123_dct36_avx_S patch-src_libmpg123_dct36_neon64_S patch-src_libmpg123_dct36_x86_64_S Log message: audio/mpg123: update to 1.32.4 Avoid indirect branches into the assembly routines by using C wrappers, relieving us of the need to care for bti / endbr instructions for control flow integrity.
Re: graphics/png: update to 1.6.40
Klemens Nanni: > >From june 2023: > http://www.libpng.org/pub/png/src/libpng-1.6.40-README.txt ok naddy@ -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/01/07 14:26:16 Modified files: misc/vttest: Makefile distinfo Log message: misc/vttest: maintenance update to 20231230
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2024/01/02 16:20:58 Modified files: mail/stalwart/smtp: Makefile Log message: mail/stalwart/smtp: fix typo in WANTLIB
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/12/27 07:16:16 Modified files: archivers/unrar: Makefile distinfo Log message: archivers/unrar: update to 6.24
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/12/07 08:53:29 Modified files: archivers/xz : Makefile distinfo archivers/xz/patches: patch-src_xzdec_xzdec_c Log message: archivers/xz: maintenance update to 5.4.5
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/12/07 06:29:32 Modified files: net/curl : Tag: OPENBSD_7_4 Makefile distinfo net/curl/patches: Tag: OPENBSD_7_4 patch-m4_curl-compilers_m4 Added files: net/curl/patches: Tag: OPENBSD_7_4 patch-tests_data_DISABLED Log message: net/curl: security update to 8.5.0 Includes fixes for CVE-2023-46218: cookie mixed case PSL bypass CVE-2023-46219: HSTS long file name clears contents
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/12/06 16:20:06 Modified files: net/curl : Makefile distinfo net/curl/patches: patch-m4_curl-compilers_m4 Added files: net/curl/patches: patch-tests_data_DISABLED Log message: net/curl: security update to 8.5.0 Includes fixes for CVE-2023-46218: cookie mixed case PSL bypass CVE-2023-46219: HSTS long file name clears contents
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/12/03 13:57:40 Modified files: net/nheko : Makefile Log message: net/nheko: BROKEN with LLVM 16 ok tb@
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/12/02 18:35:46 Modified files: multimedia/libmediainfo: Makefile distinfo multimedia/libmediainfo/patches: patch-Project_GNU_Library_configure_ac multimedia/mediainfo: Makefile distinfo Log message: mediainfo: maintenance update to 23.11
net/nheko: mark BROKEN
net/nheko fails to build since the switch to LLVM 16. I would like to mark it BROKEN, see below. Is there a better idiom? --- net/nheko/Makefile +++ net/nheko/Makefile @@ -1,3 +1,9 @@ +# broken with LLVM 16 +.include +.if ${PROPERTIES:Mclang} +BROKEN=cannot initialize '__va_list_tag *' with 'va_list' +.endif + COMMENT = desktop client for Matrix using Qt and C++20 GH_ACCOUNT = Nheko-Reborn -- Christian "naddy" Weisgerber na...@mips.inka.de
graphics/orthanc/webviewer-plugin build failure
graphics/orthanc/webviewer-plugin failed to build during my latest amd64 bulk build, due to some sort of missing dependency on the python executable. >>> Building on localhost under graphics/orthanc/webviewer-plugin BDEPENDS = [graphics/orthanc/server;databases/sqlite3;archivers/unzip;devel/boost;devel/ninja;devel/gtest;sysutils/e2fsprogs;devel/cmake;devel/jsoncpp] DIST = [graphics/orthanc/webviewer-plugin:pako-0.2.5.zip;graphics/orthanc/webviewer-plugin:jquery-ui-1.11.3.zip;graphics/orthanc/webviewer-plugin:jsPanel-2.3.3-fixed.zip;graphics/orthanc/webviewer-plugin:OrthancWebViewer-2.8.tar.gz;graphics/orthanc/webviewer-plugin:cornerstone-0.11.0.zip;graphics/orthanc/postgresql-plugin:Orthanc-1.11.1.tar.gz;graphics/orthanc/webviewer-plugin:js-url-1.8.6.zip] FULLPKGNAME = orthanc-plugin-webviewer-2.8p2 RDEPENDS = [databases/sqlite3;devel/boost;devel/jsoncpp;sysutils/e2fsprogs;graphics/orthanc/server] (Junk lock obtained for localhost at 1701498382.41) >>> Running depends in graphics/orthanc/webviewer-plugin at 1701498382.44 last junk was in emulators/mupen64plus/rsp-z64 /usr/sbin/pkg_add -aI -Drepair boost-1.83.0v0 e2fsprogs-1.46.2p1 jsoncpp-1.9.5 orthanc-1.11.1p6 sqlite3-3.43.2 unzip-6.0p17 was: /usr/sbin/pkg_add -aI -Drepair boost-1.83.0v0 cmake-3.27.7v0 e2fsprogs-1.46.2p1 gtest-1.14.0p0 jsoncpp-1.9.5 ninja-1.11.1 orthanc-1.11.1p6 sqlite3-3.43.2 unzip-6.0p17 /usr/sbin/pkg_add -aI -Drepair boost-1.83.0v0 e2fsprogs-1.46.2p1 jsoncpp-1.9.5 orthanc-1.11.1p6 sqlite3-3.43.2 unzip-6.0p17 The following new rcscripts were installed: /etc/rc.d/orthanc See rcctl(8) for details. >>> Running show-prepare-results in graphics/orthanc/webviewer-plugin at >>> 1701498404.47 ===> graphics/orthanc/webviewer-plugin ===> Building from scratch orthanc-plugin-webviewer-2.8p2 ===> orthanc-plugin-webviewer-2.8p2 depends on: orthanc-* -> orthanc-1.11.1p6 ===> orthanc-plugin-webviewer-2.8p2 depends on: gtest-* -> gtest-1.14.0p0 ===> orthanc-plugin-webviewer-2.8p2 depends on: unzip-* -> unzip-6.0p17 ===> orthanc-plugin-webviewer-2.8p2 depends on: cmake-* -> cmake-3.27.7v0 ===> orthanc-plugin-webviewer-2.8p2 depends on: ninja-* -> ninja-1.11.1 ===> orthanc-plugin-webviewer-2.8p2 depends on: sqlite3-* -> sqlite3-3.43.2 ===> orthanc-plugin-webviewer-2.8p2 depends on: boost-* -> boost-1.83.0v0 ===> orthanc-plugin-webviewer-2.8p2 depends on: jsoncpp-* -> jsoncpp-1.9.5 ===> orthanc-plugin-webviewer-2.8p2 depends on: e2fsprogs-* -> e2fsprogs-1.46.2p1 ===> Verifying specs: c++ c++abi pthread boost_atomic-mt boost_chrono-mt boost_date_time-mt boost_filesystem-mt boost_iostreams-mt boost_regex-mt boost_system-mt boost_thread-mt jsoncpp m sqlite3 uuid ===> found c++.9.0 c++abi.6.0 pthread.27.1 boost_atomic-mt.22.0 boost_chrono-mt.22.0 boost_date_time-mt.22.0 boost_filesystem-mt.22.0 boost_iostreams-mt.22.0 boost_regex-mt.22.0 boost_system-mt.22.0 boost_thread-mt.22.0 jsoncpp.5.0 m.10.1 sqlite3.37.25 uuid.14.0 boost-1.83.0v0 cmake-3.27.7v0 e2fsprogs-1.46.2p1 gtest-1.14.0p0 jsoncpp-1.9.5 ninja-1.11.1 orthanc-1.11.1p6 sqlite3-3.43.2 unzip-6.0p17 (Junk lock released for localhost at 1701498406.20) distfiles size=4959139 >>> Running patch in graphics/orthanc/webviewer-plugin at 1701498406.22 ===> graphics/orthanc/webviewer-plugin ===> Checking files for orthanc-plugin-webviewer-2.8p2 `/usr/ports/distfiles/Orthanc-1.11.1.tar.gz' is up to date. `/usr/ports/distfiles/cornerstone-0.11.0.zip' is up to date. `/usr/ports/distfiles/jquery-ui-1.11.3.zip' is up to date. `/usr/ports/distfiles/jsPanel-2.3.3-fixed.zip' is up to date. `/usr/ports/distfiles/pako-0.2.5.zip' is up to date. `/usr/ports/distfiles/js-url-1.8.6.zip' is up to date. `/usr/ports/distfiles/OrthancWebViewer-2.8.tar.gz' is up to date. >> (SHA256) Orthanc-1.11.1.tar.gz: OK >> (SHA256) cornerstone-0.11.0.zip: OK >> (SHA256) jquery-ui-1.11.3.zip: OK >> (SHA256) jsPanel-2.3.3-fixed.zip: OK >> (SHA256) pako-0.2.5.zip: OK >> (SHA256) js-url-1.8.6.zip: OK >> (SHA256) OrthancWebViewer-2.8.tar.gz: OK ===> Extracting for orthanc-plugin-webviewer-2.8p2 mkdir /usr/obj/ports/orthanc-plugin-webviewer-2.8/OrthancWebViewer-2.8/ThirdPartyDownloads/ cp /usr/ports/distfiles/cornerstone-0.11.0.zip /usr/obj/ports/orthanc-plugin-webviewer-2.8/OrthancWebViewer-2.8/ThirdPartyDownloads/ cp /usr/ports/distfiles/jquery-ui-1.11.3.zip /usr/obj/ports/orthanc-plugin-webviewer-2.8/OrthancWebViewer-2.8/ThirdPartyDownloads/ cp /usr/ports/distfiles/jsPanel-2.3.3-fixed.zip /usr/obj/ports/orthanc-plugin-webviewer-2.8/OrthancWebViewer-2.8/ThirdPartyDownloads/ cp /usr/ports/distfiles/pako-0.2.5.zip /usr/obj/ports/orthanc-plugin-webviewer-2.8/OrthancWebViewer-2.8/ThirdPartyDownloads/ cp /usr/ports/distfiles/js-url-1.8.6.zip /usr/obj/ports/orthanc-plugin-webviewer-2.8/OrthancWebViewer-2.8/ThirdPartyDownloads/ tar -xzf /usr/ports/distfiles/Orthanc-1.11.1.tar.gz -C
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/25 15:09:31 Modified files: lang/fpc : Makefile Log message: lang/fpc: mark BROKEN on amd64, does not build with LLVM 16
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/25 06:55:00 Modified files: www/mozilla-firefox: Makefile Log message: www/mozilla-firefox: bump after runtime fix on IBT-enabled hardware
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/21 14:55:03 Modified files: devel/gettext : Makefile distinfo devel/gettext/patches: patch-gettext-tools_gnulib-lib_Makefile_in patch-gettext-tools_src_Makefile_in Log message: devel/gettext: maintenance update to 0.22.4, no significant changes
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/19 13:33:18 Modified files: net/kea: Makefile Log message: net/kea: add a comment with the rationale for -std=c++14
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/19 08:45:00 Added files: devel/avr32/newlib/patches: patch-newlib_doc_makedoc_c Log message: devel/avr32/newlib: fix integer to pointer conversion in build tool
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/19 08:44:13 ports/devel/avr32/newlib/patches Update of /cvs/ports/devel/avr32/newlib/patches In directory cvs.openbsd.org:/tmp/cvs-serv63329/devel/avr32/newlib/patches Log Message: Directory /cvs/ports/devel/avr32/newlib/patches added to the repository
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/18 12:55:16 Modified files: multimedia/synfigstudio: Makefile Log message: multimedia/synfigstudio: Use -std=gnu++14 (for std::auto_ptr)
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/18 11:36:16 Modified files: devel/kdevelop/pkg: PLIST Log message: devel/kdevelop: fix PLIST again after MODCLANG_VERSION mishap
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/17 09:47:41 Added files: games/bastet/patches: patch-BastetBlockChooser_cpp Log message: games/bastet: unbreak with clang16 (C++17)
Re: amd64: llvm 16 fallout (2023-11-14)
Updated list: cad/prusaslicer C++ ambiguous function call comms/gnuradio internal compiler error devel/atlas C++17 does not allow dynamic exception devel/avr32/newlib C integer to pointer conversion devel/iaito C++ undeclared identifier r_pvector_len devel/lutok C++ auto_ptr games/amoebax C++ auto_ptr games/bastetC++ std::bind2nd games/boswars C++ auto_ptr games/eliot C++ std::random_shuffle games/goldberg_emulator C++ std::in_place_t games/lwjgl3JRE segv games/mars C++ std::random_shuffle japanese/onew,canna C integer to pointer conversion lang/fpc? multimedia/synfig C++ auto_ptr net/gnugk C++ std::mem_fun net/minbif C++17 does not allow dynamic exception net/nheko C va_list net/xprobe C++ std::random_shuffle www/firefox-esr clang-13 internal compiler error www/mozilla-firefox clang-13 internal compiler error www/tor-browser/browser clang-13 internal compiler error x11/gnome/mutter'wayland-server.h' not found x11/kde-applications/kdepim-runtime C++ integer value outside enum range x11/kde-applications/kleopatra C++ integer value outside enum range x11/ogreC++ auto_ptr x11/qt6/qtwebengine C integer to pointer conversion -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/16 15:39:04 Modified files: net/kea: Makefile Log message: net/kea: use -std=c++14 for base-clang to unbreak with clang16 This is a transitive requirement imposed by the outdated version of the devel/log4cplus dependency.
Re: amd64: llvm 16 fallout (2023-11-14)
Christian Weisgerber: > net/kea,postgresql checking for log4cplus/logger.h... no This is actually the C++ auto_ptr issue, but already in configure. (It also affects all flavors of net/kea.) -- Christian "naddy" Weisgerber na...@mips.inka.de
Re: amd64: llvm 16 fallout (2023-11-14)
Here are the build failures from my amd64 bulk build started on 2023-11-14, including the subsequent build fixes up to security/web-eid-app. http://build-failures.rhaalovely.net/amd64/2023-11-14/ cad/prusaslicer C++ ambiguous function call comms/gnuradio internal compiler error devel/atlas C++17 does not allow dynamic exception devel/avr32/newlib C integer to pointer conversion devel/iaito C++ undeclared identifier devel/lutok C++ auto_ptr games/0ad/base Rust? games/amoebax C++ auto_ptr games/bastetC++ undeclared identifier games/boswars C++ auto_ptr games/eliot C++ no member in namespace 'std' games/goldberg_emulator C++ no member in namespace 'std' games/lwjgl3JRE segv games/mars C++ no member in namespace 'std' japanese/onew,canna C integer to pointer conversion lang/fpc? multimedia/synfig C++ auto_ptr net/gnugk C++ no member in namespace 'std' net/kea,postgresql checking for log4cplus/logger.h... no net/minbif C++17 does not allow dynamic exception net/nheko C va_list net/xprobe C++ undeclared identifier www/firefox-esr clang-13 internal compiler error www/mozilla-firefox clang-13 internal compiler error www/tor-browser/browser clang-13 internal compiler error x11/gnome/mutter'wayland-server.h' not found x11/kde-applications/kdepim-runtime C++ integer value outside enum range x11/kde-applications/kleopatra C++ integer value outside enum range x11/ogreC++ auto_ptr x11/qt6/qtwebengine C integer to pointer conversion -- Christian "naddy" Weisgerber na...@mips.inka.de
amd64: llvm 16 fallout (2023-11-14)
My build is still catching up with the many fixes that have already been committed, but here is some basic triage of remaining problems: cad/prusaslicer C++ ambiguous function call comms/gnuradio internal compiler error devel/atlas C++17 does not allow dynamic exception devel/avr32/newlib C integer to pointer conversion devel/iaito C++ undeclared identifier devel/lutok C++ auto_ptr games/0ad/base Rust? games/amoebax C++ auto_ptr games/bastetC++ undeclared identifier games/boswars C++ auto_ptr games/eliot C++ no member in namespace 'std' games/goldberg_emulator C++ no member in namespace 'std' games/lwjgl3JRE segv games/mars C++ no member in namespace 'std' japanese/onew,canna C integer to pointer conversion lang/fpc? multimedia/synfig C++ auto_ptr net/gnugk C++ no member in namespace 'std' net/kea,postgresql checking for log4cplus/logger.h... no net/minbif C++17 does not allow dynamic exception net/nheko C va_list net/xprobe C++ undeclared identifier security/pivy configure: cannot compute sizeof (int) security/web-eid-appC++ integer value outside enum range www/firefox-esr clang-13 internal compiler error www/mozilla-firefox clang-13 internal compiler error www/tor-browser/browser clang-13 internal compiler error x11/gnome/mutter'wayland-server.h' not found x11/kde-applications/kleopatra C++ integer value outside enum range x11/ogreC++ auto_ptr x11/qt6/qtwebengine C integer to pointer conversion -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/15 17:11:46 Modified files: x11/xruskb : Makefile Added files: x11/xruskb/patches: patch-configure_ac Log message: x11/xruskb: fix typo in configure script to unbreak with clang16
Re: amd64: llvm 16 fallout (2023-11-13)
Christian Weisgerber: > Results: > http://build-failures.rhaalovely.net/amd64-clang/2023-11-13/ In the future, I'll include summary.log in the uploaded results, but meanwhile here's the one from this run: -- astro/celestia errored astro/kstars not built devel/kf5/knotifyconfig -> multimedia/phonon astro/stellarium not built x11/qt6/qtwebengine -> x11/qt6/qttools audio/audacious/player errored audio/audacious/plugins not built audio/audacious/player audio/audacity errored audio/calf errored audio/liblastfm errored audio/mumble,-main not built net/poco audio/mumble,-server not built net/poco audio/py-tagpy,python3 errored audio/sonata not installable audio/py-tagpy,python3 benchmarks/bonnie++ errored cad/magic errored cad/prusaslicer errored cad/qcad not installable x11/qt5/qtwebengine cad/qflow not built cad/magic comms/fldigi errored comms/gnuradio errored converters/wv2 errored databases/kexi not built x11/kde-applications/marble -> multimedia/phonon databases/p5-sybperl errored databases/pkglocatedb not built databases/sqlports,-list databases/ports-readmes not built databases/sqlports databases/ports-readmes-dancer not installable databases/sqlports databases/recoll,-gui not built x11/qt5/qtwebengine databases/recoll,-main not built x11/qt5/qtwebengine databases/sqlports errored devel/arduino-esp8266 not built devel/xtensa-lx106-elf/newlib -> devel/xtensa-lx106-elf/gcc-bootstrap -> devel/xtensa-lx106-elf/binutils devel/arm-none-eabi/gdb errored devel/arm-none-eabi/newlib errored devel/atf errored devel/atlas errored devel/avr32/gcc not built devel/avr32/newlib -> devel/avr32/gcc-bootstrap devel/avr32/gcc-bootstrap errored devel/avr32/newlib not built devel/avr32/gcc-bootstrap devel/ccrtp not built devel/commoncpp devel/clang-tools-extra errored devel/codechecker errored devel/codeworker errored devel/commoncpp errored devel/csmith errored devel/git-cola not built textproc/xxdiff devel/gsoap errored devel/include-what-you-use errored devel/kdevelop not built devel/clang-tools-extra devel/kf5/khtml not built multimedia/phonon devel/kf5/knotifyconfig not built multimedia/phonon devel/kf5/purpose not built x11/kde-applications/kaccounts-integration -> devel/qcoro devel/kreport not built x11/kde-applications/marble -> multimedia/phonon devel/kyua-cli not built devel/kyua-testers -> devel/atf devel/kyua-testers not built devel/atf devel/log4cplus errored devel/lutok not built devel/atf devel/ode errored devel/ptlib errored devel/py-llvmlite,python3 errored devel/qcoro errored devel/qt-creator not built x11/qt6/qtwebengine -> x11/qt6/qttools devel/riscv32-esp-elf/gdb errored devel/spyder/spyder,python3 not installable www/py-qtwebengine,python3 -> x11/qt5/qtwebengine devel/ti-msp430gcc errored devel/valgrind errored devel/xsd errored devel/xtensa-esp32-elf/gdb errored devel/xtensa-esp32s2-elf/gdb errored devel/xtensa-esp32s3-elf/gdb errored devel/xtensa-lx106-elf/binutils errored devel/xtensa-lx106-elf/gcc not built devel/xtensa-lx106-elf/binutils devel/xtensa-lx106-elf/gcc-bootstrap not built devel/xtensa-lx106-elf/binutils devel/xtensa-lx106-elf/lx106-hal not built devel/xtensa-lx106-elf/gcc -> devel/xtensa-lx106-elf/binutils devel/xtensa-lx106-elf/newlib not built devel/xtensa-lx106-elf/gcc-bootstrap -> devel/xtensa-lx106-elf/binutils editors/calligra not built devel/kf5/khtml -> multimedia/phonon editors/ghostwriter not built x11/qt5/qtwebengine editors/ht locked editors/ht,no_x11 errored editors/kakoune errored editors/kile not built x11/kde-applications/okular -> devel/kf5/purpose -> x11/kde-applications/kaccounts-integration -> devel/qcoro editors/sigil not built x11/qt5/qtwebengine education/anki not built www/py-qtwebengine,python3 -> x11/qt5/qtwebengine emulators/dolphin,-main not built multimedia/sfml emulators/dolphin,-nogui not built multimedia/sfml emulators/emulationstation not built graphics/freeimage emulators/gambatte errored emulators/vbam not built multimedia/sfml games/0ad/base errored games/alephone/alephone errored games/alephone/scenarios/evil not built games/alephone/alephone games/alephone/scenarios/marathon not built games/alephone/alephone games/alephone/scenarios/marathon2 not built games/alephone/alephone games/alephone/scenarios/marathoninfinity not built games/alephone/alephone games/alephone/scenarios/red not built games/alephone/alephone games/amoebax errored games/bastet errored games/blockgame not installable games/lwjgl3 games/boswars errored games/brumbrumrally errored games/dangerdeep errored games/eboard errored games/eboard-extras not installable games/eboard games/eliot not built textproc/arabica games/extremetuxracer not built multimedia/sfml games/ezquake errored games/fillets-ng errored games/flightgear/base not built graphics/simgear -> graphics/openscenegraph games/freesynd errored games/godot not built games/goldberg_em
amd64: llvm 16 fallout (2023-11-13)
New base snapshots with llvm 16 have not yet been built, but I updated manually and ran an amd64 bulk build. This also included a handful of fixes from jca@. Results: http://build-failures.rhaalovely.net/amd64-clang/2023-11-13/ The list of build failures is too long for me to do any serious triaging yet. astro/celestia audio/audacious/player audio/audacity audio/calf audio/liblastfm audio/py-tagpy,python3 benchmarks/bonnie++ cad/magic cad/prusaslicer comms/fldigi comms/gnuradio converters/wv2 databases/p5-sybperl databases/sqlports devel/arm-none-eabi/gdb devel/arm-none-eabi/newlib devel/atf devel/atlas devel/avr32/gcc-bootstrap devel/clang-tools-extra devel/codechecker devel/codeworker devel/commoncpp devel/csmith devel/gsoap devel/include-what-you-use devel/log4cplus devel/ode devel/ptlib devel/py-llvmlite,python3 devel/qcoro devel/riscv32-esp-elf/gdb devel/ti-msp430gcc devel/valgrind devel/xsd devel/xtensa-esp32-elf/gdb devel/xtensa-esp32s2-elf/gdb devel/xtensa-esp32s3-elf/gdb devel/xtensa-lx106-elf/binutils editors/ht,no_x11 editors/kakoune emulators/gambatte games/0ad/base games/alephone/alephone games/amoebax games/bastet games/boswars games/brumbrumrally games/dangerdeep games/eboard games/ezquake games/fillets-ng games/freesynd games/goldberg_emulator games/ja2-stracciatella games/liberalcrimesquad games/lincity-ng games/lwjgl3 games/meandmyshadow games/openxcom games/scorched3d games/stepmania games/wrath geo/gpstk geo/osrm-backend graphics/asymptote graphics/ctl graphics/freeimage graphics/lsys graphics/openscenegraph graphics/piglit graphics/povray inputmethods/scim inputmethods/uim japanese/Wnn japanese/canna japanese/kasumi java/jlint lang/apl lang/clazy lang/fpc lang/iverilog lang/ldc lang/pcc/pcc lang/verilator lang/wasi-libc mail/geary mail/stalwart/jmap math/ginac multimedia/mjpegtools multimedia/ogmtools multimedia/phonon multimedia/sfml multimedia/streamdvd multimedia/synfig net/bro net/minbif net/nheko net/poco net/xprobe security/john-jumbo security/pivy security/veracrypt sysutils/incron sysutils/rustic telephony/resiprocate textproc/arabica textproc/isearch textproc/source-highlight textproc/xxdiff www/dansguardian www/sogo www/sqtop x11/blackbox x11/eterm x11/fluxbox x11/gnome/usage x11/mate/engrampa x11/qt5/qtwebengine x11/qt6/qttools x11/rep-gtk x11/xruskb -- Christian "naddy" Weisgerber na...@mips.inka.de
Re: llvm-16 and lang/python
Jeremie Courreges-Anglas: > We need to disable optimization for python3 ports. Even with a fixed > path to libclang_rt.profile.etc, I get: > > ld.lld: error: relocation R_X86_64_PC32 cannot be used against symbol > '__profd_isdigit'; recompile with -fPIC I wanted to take a look at where those relocations are coming from, but the *.o files that are linked together aren't even object files according to nm or readelf. WTF? -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/13 08:41:25 Modified files: shells/bash: Makefile distinfo Log message: shells/bash: update to 5.2 patchlevel 21
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/07 07:19:52 Modified files: archivers/arc : Makefile archivers/fastjar: Makefile archivers/lxsplit: Makefile archivers/p7zip: Makefile archivers/par1cmdline: Makefile archivers/unzip: Makefile archivers/zip : Makefile astro/jday : Makefile astro/libnova : Makefile astro/xphoon : Makefile audio/cmu-sphinx3: Makefile audio/cmu-sphinxbase: Makefile audio/dumb : Makefile audio/fdk-aac : Makefile audio/gqmpeg : Makefile audio/grip : Makefile audio/id3lib : Makefile audio/lame : Makefile audio/liba52 : Makefile audio/libbs2b : Makefile audio/libcdaudio: Makefile audio/libcddb : Makefile audio/libid3tag: Makefile audio/liblo: Makefile audio/libmikmod: Makefile audio/libmodplug: Makefile audio/libmp3splt: Makefile audio/libnjb : Makefile audio/libsoxr : Makefile audio/libxmp : Makefile audio/madplay : Makefile audio/mikmod : Makefile audio/mp3blaster: Makefile audio/mp3splt : Makefile audio/mp3splt-gtk: Makefile audio/mp3wrap : Makefile audio/mpg321 : Makefile audio/nosefart : Makefile audio/opencore-amr: Makefile audio/opennap : Makefile audio/pacpl: Makefile audio/paulstretch: Makefile audio/portmidi : Makefile audio/sox : Makefile audio/streamripper: Makefile audio/tap-plugins: Makefile audio/timidity : Makefile audio/xmp : Makefile benchmarks/fs_mark: Makefile benchmarks/netstrain: Makefile benchmarks/randread: Makefile benchmarks/sysbench: Makefile books/thinking-forth: Makefile cad/dxf2gcode : Makefile cad/gtkwave: Makefile cad/ngspice: Makefile.inc cad/ngspice/libngspice: Makefile cad/ngspice/ngspice: Makefile cad/xtrkcad: Makefile chinese/libtabe: Makefile comms/dfu-util : Makefile comms/hamlib : Makefile comms/qodem: Makefile converters/fondu: Makefile converters/wv : Makefile converters/wv2 : Makefile converters/xlhtml: Makefile converters/xmltoman: Makefile databases/libdbi: Makefile databases/libdbi-drivers: Makefile databases/p5-SQL-Translator: Makefile databases/pg_stats_reporter: Makefile databases/pg_statsinfo: Makefile databases/sqsh : Makefile devel/64tass : Makefile devel/ald : Makefile devel/argtable : Makefile devel/autogen : Makefile devel/cppcheck : Makefile devel/cscope : Makefile devel/cunit: Makefile devel/cvsplot : Makefile devel/cvsps: Makefile devel/doc++: Makefile devel/ectags : Makefile devel/expect-lite: Makefile devel/goopy: Makefile devel/gputils : Makefile devel/itcl : Makefile devel/libJudy : Makefile devel/libast : Makefile devel/libivykis: Makefile devel/libmtp : Makefile devel/libnotify: Makefile devel/libofx : Makefile devel/libspectrum: Makefile devel/libusb-compat: Makefile devel/log4c: Makefile devel/log4cplus: Makefile devel/log4cpp : Makefile devel/lpc21isp : Makefile devel/msp430 : Makefile.inc devel/msp430/binutils: Makefile devel/msp430/gcc: Makefile devel/msp430/gdb: Makefile devel/msp430/libc: Makefile devel/msp430/msp430mcu: Makefile devel/nagelfar : Makefile devel/openocd : Makefile devel/p5-Devel-ptkdb: Makefile devel/p5-Term-ScreenColor: Makefile devel/perltidy : Makefile devel/plib : Makefile devel/qjson: Makefile devel/remake : Makefile devel/sdcc : Makefile devel/sdl-pango: Makefile devel/sdlmm: Makefile devel/srecord : Makefile devel/tclap: Makefile devel/tclcl: Makefile devel/tcllib : Makefile devel/tclthread: Makefile devel/tkdiff : Makefile devel/udis86 : Makefile devel/utfcpp : Makefile devel/vim-taglist: Makefile devel/vtcl : Makefile editors/bvi: Makefile editors/fte: Makefile editors/ht : Makefile editors/joe: Makefile editors/traditional-vi: Makefile emulators/dgen-sdl: Makefile
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/11/05 15:20:53 Modified files: audio/vorbis-tools: Makefile Added files: audio/vorbis-tools/patches: patch-oggenc_platform_c Log message: audio/vorbis-tools: fix a buffer overflow in oggenc CVE-2023-43361 The security implications of this are very limited.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/26 13:26:56 Modified files: infrastructure/mk: bsd.port.mk mail/elm : Makefile mail/elm/pkg : PLIST Log message: do not create the ${PREFIX}/share/nls directory tree by default The share/nls directories have been barely ever used throughout the 27-year history of the ports tree. Let the single port that still installs a file there create the directory itself.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/15 08:13:56 Modified files: sysutils/colorls: Makefile distinfo Log message: sysutils/colorls: sync with OpenBSD 7.4
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/14 14:56:07 Modified files: cad/solvespace : Makefile geo/lib2geom : Makefile graphics/libvips: Makefile mail/msmtp : Makefile math/datamash : Makefile Log message: explicitly specify gettext subpackage in *_DEPENDS Specify "devel/gettext,-runtime" rather than depending on "devel/gettext" expanding to this.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/14 09:35:58 Modified files: x11/qt6/qtwebengine: Makefile Log message: x11/qt6/qtwebengine: copy arch restrictions and dpb properties from qt5 ok tb@
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/13 17:53:08 Modified files: books/tex-by-topic: Makefile Log message: books/tex-by-topic: do not override SITE_GITHUB with obsolete SITES
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/12 12:15:08 Modified files: net/curl : Tag: OPENBSD_7_3 Makefile distinfo net/curl/patches: Tag: OPENBSD_7_3 patch-configure_ac patch-lib_vquic_curl_ngtcp2_c net/curl/pkg : Tag: OPENBSD_7_3 PLIST Log message: net/curl: security update to 8.4.0 Changes: * curl: add support for the IPFS protocols via HTTP gateway * curl_multi_get_handles: get easy handles from a multi handle Includes fixes for * CVE-2023-38545: SOCKS5 heap buffer overflow * CVE-2023-38546: cookie injection with none file
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/11 16:49:26 Modified files: net/curl : Tag: OPENBSD_7_4 Makefile distinfo net/curl/pkg : Tag: OPENBSD_7_4 PLIST Removed files: net/curl/patches: Tag: OPENBSD_7_4 patch-tests_data_test1474 Log message: net/curl: security update to 8.4.0 Changes: * curl: add support for the IPFS protocols via HTTP gateway * curl_multi_get_handles: get easy handles from a multi handle Includes fixes for * CVE-2023-38545: SOCKS5 heap buffer overflow * CVE-2023-38546: cookie injection with none file
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/11 15:48:39 Modified files: net/curl : Makefile distinfo net/curl/pkg : PLIST Removed files: net/curl/patches: patch-tests_data_test1474 Log message: net/curl: security update to 8.4.0 Changes: * curl: add support for the IPFS protocols via HTTP gateway * curl_multi_get_handles: get easy handles from a multi handle Includes a fix for * CVE-2023-38545: SOCKS5 heap buffer overflow
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/11 14:26:29 Modified files: audio/mpg123 : Makefile distinfo audio/mpg123/patches: patch-src_libmpg123_dct36_avx_S patch-src_libmpg123_dct36_neon64_S patch-src_libmpg123_dct36_x86_64_S Log message: audio/mpg123: update to 1.32.3 libmpg123: added explicit 64-bit API with "64" suffix
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/11 14:25:31 Modified files: multimedia/libmediainfo: Makefile distinfo multimedia/mediainfo: Makefile distinfo Log message: mediainfo: maintenance update to 23.10
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/11 14:24:49 Modified files: misc/vttest: Makefile distinfo Log message: misc/vttest: maintenance update to 20230924
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/11 14:24:03 Modified files: devel/gettext : Makefile distinfo devel/gettext/patches: patch-gettext-runtime_intl_Makefile_in patch-gettext-runtime_intl_configure patch-gettext-tools_gnulib-lib_Makefile_in patch-gettext-tools_src_Makefile_in Log message: devel/gettext: maintenance update to 0.22.3, no significant changes
Ports tree unlocked
The ports tree is unlocked. The 7.4 release is behind us now. -- Christian "naddy" Weisgerber na...@mips.inka.de
HEADS-UP: Commits need approval now
The 7.4 release is approaching fast. All ports commits now need approval by sthen@ or naddy@. Changes need to be important or at least actually fix something. -- Christian "naddy" Weisgerber na...@mips.inka.de
Re: OS version in packages
Marc Espie: > Every release, it's the same dance: a few packages want version bumps > because the OS version changed. Here's the list of offenders that have ${OSREV} in some path: editors/xemacs21/stable lang/bootgcc lang/gcc/11 lang/gcc/8 lang/gpc lang/pcc/pcc-libs lang/swi-prolog math/octave And these get bumped because they compile in a path to gcc that changes: devel/clang-tools-extra devel/llvm > I propose that, after 7.4, we get rid of those pesky version numbers that > are useless for us. Fine by me. I think we're in the current situation simply because nobody has sat down to fix it. > (did we do it for base gcc as well, I don't remember) We did not, see distrib/sets/lists/comp/gcc.sparc64. -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/10/01 03:42:37 Modified files: devel/got : Makefile Added files: devel/got/patches: patch-lib_repository_c Log message: devel/got: honor fetch_all_branches configuration again Fix a regression in 0.93 where the fetch_all_branches configuration setting from got.conf was dropped and always defaulted to "no". requested by stsp@
Bought a new Intel laptop? Test packages!
If you bought a new Intel laptop this year, chances are its hardware is capable of IBT (indirect branch tracking), and OpenBSD now enables this security feature by default. It is very likely that some packages are broken at runtime because they fail to handle IBT. This doesn't show up at build time, so people need to actually run their favorite packages from a snapshot _now_ and need to report SIGILL failures, or those problems will not be fixed in time for the release. -- Christian "naddy" Weisgerber na...@mips.inka.de
No more imports for 7.4
We are approaching the release. No more imports of new ports, please. If there are special considerations, ask sthen@ or me for an exemption. Updates can still proceed at this time. -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/09/29 03:24:58 Modified files: infrastructure/templates: mk.conf.template Log message: poison MASTER_SITES
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/09/29 03:16:58 Modified files: tests/portbump/t2: Makefile.inc Log message: bye bye MASTER*, you served us well
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/09/29 03:12:15 Modified files: infrastructure/lib/DPB: Config.pm Log message: bye bye MASTER*, you served us well
Re: aarch64 bulk build report
Omar Polo: > on non-apple arm devices it assumes there is sys/auxv.h and > asm/hwcap.h and uses getauxval(AT_HWCAP) to see if some features > (CRC32, SHA1, SHA2 and AES) are supported by the CPU. > > What can we use to detect the availability of these instructions? sysctl machdep.id_aa64isar0 See for instance security/libgcrypt/patches/patch-src_hwf-arm_c. (Or grep the ports tree for patches that contain "AA64ISAR0".) -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/09/26 16:22:26 Modified files: astro/sunclock : Makefile Log message: astro/sunclock: fix DISTFILES for -maps
HEADS-UP: Slowing down for release, testing
We are quickly approaching the 7.4 release and it is time to slow down the work in the ports tree. Imports and updates can still go ahead, but please proceed with caution. If you break something now, there may be no time to fix it. Conversely, if there are fixes or updates that will be important for the lifetime of -stable, now is the last opportunity to get them in. I also urge people to test snapshot packages now, unless you want to learn at release time that your favorite application is broken. -- Christian "naddy" Weisgerber na...@mips.inka.de
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/09/23 08:42:03 Modified files: graphics/netpbm: Makefile distinfo Log message: graphics/netpbm: update to 11.03.05 Numerous bug fixes. Formally take maintainership.
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/09/23 06:53:56 Modified files: lang/crystal : Makefile Log message: lang/crystal: BROKEN: not IBT compatible, cannot load library libLLVM-13.so
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/09/23 06:31:55 Modified files: devel/llvm : Makefile.inc devel/llvm/13 : Makefile devel/llvm/16 : Makefile Log message: devel/llvm: separate maintainer addresses with comma
CVS: cvs.openbsd.org: ports
CVSROOT:/cvs Module name:ports Changes by: na...@cvs.openbsd.org 2023/09/21 08:00:28 Modified files: shells/yash: Makefile distinfo shells/yash/patches: patch-configure shells/yash/pkg: PLIST Log message: shells/yash: update to 2.55