CVS: cvs.openbsd.org: ports

2022-09-23 Thread Alexander Bluhm
CVSROOT:/cvs
Module name:ports
Changes by: bl...@cvs.openbsd.org   2022/09/23 18:42:53

Modified files:
converters/p5-JSON-MaybeXS: Makefile distinfo 

Log message:
update p5-JSON-MaybeXS to 1.004004



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Alexander Bluhm
CVSROOT:/cvs
Module name:ports
Changes by: bl...@cvs.openbsd.org   2022/09/23 18:13:24

Modified files:
devel/p5-Exporter-Tiny: Makefile distinfo 

Log message:
update p5-Exporter-Tiny to 1.004002



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Alexander Bluhm
CVSROOT:/cvs
Module name:ports
Changes by: bl...@cvs.openbsd.org   2022/09/23 17:56:28

Modified files:
devel/p5-FFI-CheckLib: Makefile distinfo 

Log message:
update p5-FFI-CheckLib to 0.30



Re: CVS: cvs.openbsd.org: ports

2022-09-23 Thread Kurt Mosiejczuk
On Fri, Sep 23, 2022 at 10:31:39PM +0200, Antoine Jacoutot wrote:

> > There's no configure knob for doing without libzip. I tried adding 
> > "--without-libzip" and it just complained about that option.

> There is.
> But you cannot just assume --disable-$randomlib works. 
> Each configure script is different; in this case, you want: --without-pptx 
> which
> libzip is a dependency for.
> In general, ./configure --help and/or looking at the configure script itself
> will give you the needed information.

Yeah. That's why I knew to try "--without-zlib". None of the existing 
"--without-x" in our Makefile is listed by "./configure --help" but it
does show "--without-PACKAGE" as an option.

> I just committed a fix.

Good.

--Kurt



Re: CVS: cvs.openbsd.org: ports

2022-09-23 Thread Antoine Jacoutot
On Fri, Sep 23, 2022 at 04:22:47PM -0400, Kurt Mosiejczuk wrote:
> On Fri, Sep 23, 2022 at 10:15:51PM +0200, Antoine Jacoutot wrote:
> 
> > > > Can it be that it finds libzlib if installed?
> 
> > > > <...>
> > > > checking for zip_add in -lzip... yes
> > > > checking zip.h usability... yes   
> > > > checking zip.h presence... yes  
> > > > checking for zip.h... yes
> > > > <...>
> > > > => dpb junking
> > > > c++ -DHAVE_CONFIG_H -I. -DHAVE_MKSTEMP -DHAVE_LIBZIP -DDEFAULTGS=gs 
> > > > -DPSTOEDITDATADIR="/usr/local/share/pstoedit" -DPST
> > > > OEDITLIBDIR="/usr/local/lib/pstoedit" -Wall -Wextra -Wuninitialized 
> > > > -Wswitch-default -Wunused -Wshadow -Wwrite-strings
> > > > -Wcast-qual -Wpointer-arith -Wno-long-long -I/usr/local/include 
> > > > -D_LITTLE_ENDIAN -O2 -pipe -DINTERNALBOOL -MT drvpptx.l
> > > > o -MD -MP -MF .deps/drvpptx.Tpo -c drvpptx.cpp -fPIC -DPIC -o 
> > > > .libs/drvpptx.o
> > > > drvpptx.cpp:67:10: fatal error: 'zip.h' file not found
> > > > #include 
> 
> > > > 1 error generated.
> 
> > > I haven't seen it, but I can believe it. Should we add archivers/libzip to
> > > LIB_DEPENDS?
> 
> > Can't we disable it with a knob?
> > Anyway, I have no strong opinion whether to enforce the dep or not.
> 
> There's no configure knob for doing without libzip. I tried adding 
> "--without-libzip" and it just complained about that option.

There is.
But you cannot just assume --disable-$randomlib works. 
Each configure script is different; in this case, you want: --without-pptx which
libzip is a dependency for.
In general, ./configure --help and/or looking at the configure script itself
will give you the needed information.

I just committed a fix.

-- 
Antoine



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Antoine Jacoutot
CVSROOT:/cvs
Module name:ports
Changes by: ajacou...@cvs.openbsd.org   2022/09/23 14:31:36

Modified files:
graphics/pstoedit: Makefile 

Log message:
Explicitely pass --without-pptx to configure to make sure libzip is not
looked for.



Re: CVS: cvs.openbsd.org: ports

2022-09-23 Thread Kurt Mosiejczuk
On Fri, Sep 23, 2022 at 10:15:51PM +0200, Antoine Jacoutot wrote:

> > > Can it be that it finds libzlib if installed?

> > > <...>
> > > checking for zip_add in -lzip... yes
> > > checking zip.h usability... yes   
> > > checking zip.h presence... yes  
> > > checking for zip.h... yes
> > > <...>
> > > => dpb junking
> > > c++ -DHAVE_CONFIG_H -I. -DHAVE_MKSTEMP -DHAVE_LIBZIP -DDEFAULTGS=gs 
> > > -DPSTOEDITDATADIR="/usr/local/share/pstoedit" -DPST
> > > OEDITLIBDIR="/usr/local/lib/pstoedit" -Wall -Wextra -Wuninitialized 
> > > -Wswitch-default -Wunused -Wshadow -Wwrite-strings
> > > -Wcast-qual -Wpointer-arith -Wno-long-long -I/usr/local/include 
> > > -D_LITTLE_ENDIAN -O2 -pipe -DINTERNALBOOL -MT drvpptx.l
> > > o -MD -MP -MF .deps/drvpptx.Tpo -c drvpptx.cpp -fPIC -DPIC -o 
> > > .libs/drvpptx.o
> > > drvpptx.cpp:67:10: fatal error: 'zip.h' file not found
> > > #include 

> > > 1 error generated.

> > I haven't seen it, but I can believe it. Should we add archivers/libzip to
> > LIB_DEPENDS?

> Can't we disable it with a knob?
> Anyway, I have no strong opinion whether to enforce the dep or not.

There's no configure knob for doing without libzip. I tried adding 
"--without-libzip" and it just complained about that option.

--Kurt



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Antoine Jacoutot
CVSROOT:/cvs
Module name:ports
Changes by: ajacou...@cvs.openbsd.org   2022/09/23 14:16:44

Modified files:
sysutils/consul: Makefile distinfo 
Added files:
sysutils/consul/patches: 
 
patch-vendor_github_com_shirou_gopsutil_v3_disk_disk_openbsd_go 

Log message:
Update to consul-1.13.2.



Re: CVS: cvs.openbsd.org: ports

2022-09-23 Thread Antoine Jacoutot
On Fri, Sep 23, 2022 at 04:05:02PM -0400, Kurt Mosiejczuk wrote:
> On Fri, Sep 23, 2022 at 09:43:37PM +0200, Antoine Jacoutot wrote:
> > On Sun, Sep 18, 2022 at 04:43:36PM -0600, Kurt Mosiejczuk wrote:
> > > CVSROOT:  /cvs
> > > Module name:  ports
> > > Changes by:   k...@cvs.openbsd.org2022/09/18 16:43:36
> 
> > > Modified files:
> > >   graphics/pstoedit: Makefile 
> 
> > > Log message:
> > > ports-gcc doesn't check /usr/local for includes or libraries by
> > > default.
> 
> > > Fixes build on sparc64
> 
> > Can it be that it finds libzlib if installed?
> 
> > <...>
> > checking for zip_add in -lzip... yes
> > checking zip.h usability... yes   
> > checking zip.h presence... yes  
> > checking for zip.h... yes
> > <...>
> > => dpb junking
> > c++ -DHAVE_CONFIG_H -I. -DHAVE_MKSTEMP -DHAVE_LIBZIP -DDEFAULTGS=gs 
> > -DPSTOEDITDATADIR="/usr/local/share/pstoedit" -DPST
> > OEDITLIBDIR="/usr/local/lib/pstoedit" -Wall -Wextra -Wuninitialized 
> > -Wswitch-default -Wunused -Wshadow -Wwrite-strings
> > -Wcast-qual -Wpointer-arith -Wno-long-long -I/usr/local/include 
> > -D_LITTLE_ENDIAN -O2 -pipe -DINTERNALBOOL -MT drvpptx.l
> > o -MD -MP -MF .deps/drvpptx.Tpo -c drvpptx.cpp -fPIC -DPIC -o 
> > .libs/drvpptx.o
> > drvpptx.cpp:67:10: fatal error: 'zip.h' file not found
> > #include 
> >  ^~~
> > 1 error generated.
> 
> I haven't seen it, but I can believe it. Should we add archivers/libzip to
> LIB_DEPENDS?

Can't we disable it with a knob?
Anyway, I have no strong opinion whether to enforce the dep or not.

-- 
Antoine



Re: CVS: cvs.openbsd.org: ports

2022-09-23 Thread Kurt Mosiejczuk
On Fri, Sep 23, 2022 at 09:43:37PM +0200, Antoine Jacoutot wrote:
> On Sun, Sep 18, 2022 at 04:43:36PM -0600, Kurt Mosiejczuk wrote:
> > CVSROOT:/cvs
> > Module name:ports
> > Changes by: k...@cvs.openbsd.org2022/09/18 16:43:36

> > Modified files:
> > graphics/pstoedit: Makefile 

> > Log message:
> > ports-gcc doesn't check /usr/local for includes or libraries by
> > default.

> > Fixes build on sparc64

> Can it be that it finds libzlib if installed?

> <...>
> checking for zip_add in -lzip... yes
> checking zip.h usability... yes   
> checking zip.h presence... yes  
> checking for zip.h... yes
> <...>
> => dpb junking
> c++ -DHAVE_CONFIG_H -I. -DHAVE_MKSTEMP -DHAVE_LIBZIP -DDEFAULTGS=gs 
> -DPSTOEDITDATADIR="/usr/local/share/pstoedit" -DPST
> OEDITLIBDIR="/usr/local/lib/pstoedit" -Wall -Wextra -Wuninitialized 
> -Wswitch-default -Wunused -Wshadow -Wwrite-strings
> -Wcast-qual -Wpointer-arith -Wno-long-long -I/usr/local/include 
> -D_LITTLE_ENDIAN -O2 -pipe -DINTERNALBOOL -MT drvpptx.l
> o -MD -MP -MF .deps/drvpptx.Tpo -c drvpptx.cpp -fPIC -DPIC -o .libs/drvpptx.o
> drvpptx.cpp:67:10: fatal error: 'zip.h' file not found
> #include 
>  ^~~
> 1 error generated.

I haven't seen it, but I can believe it. Should we add archivers/libzip to
LIB_DEPENDS?

--Kurt



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Antoine Jacoutot
CVSROOT:/cvs
Module name:ports
Changes by: ajacou...@cvs.openbsd.org   2022/09/23 13:46:07

Modified files:
sysutils/exoscale-cli: Makefile distinfo 

Log message:
Update to exoscale-cli-1.59.2.



Re: CVS: cvs.openbsd.org: ports

2022-09-23 Thread Antoine Jacoutot
On Sun, Sep 18, 2022 at 04:43:36PM -0600, Kurt Mosiejczuk wrote:
> CVSROOT:  /cvs
> Module name:  ports
> Changes by:   k...@cvs.openbsd.org2022/09/18 16:43:36
> 
> Modified files:
>   graphics/pstoedit: Makefile 
> 
> Log message:
> ports-gcc doesn't check /usr/local for includes or libraries by
> default.
> 
> Fixes build on sparc64

Can it be that it finds libzlib if installed?


<...>
checking for zip_add in -lzip... yes
checking zip.h usability... yes   
checking zip.h presence... yes  
checking for zip.h... yes
<...>
=> dpb junking
c++ -DHAVE_CONFIG_H -I. -DHAVE_MKSTEMP -DHAVE_LIBZIP -DDEFAULTGS=gs 
-DPSTOEDITDATADIR="/usr/local/share/pstoedit" -DPST
OEDITLIBDIR="/usr/local/lib/pstoedit" -Wall -Wextra -Wuninitialized 
-Wswitch-default -Wunused -Wshadow -Wwrite-strings
-Wcast-qual -Wpointer-arith -Wno-long-long -I/usr/local/include 
-D_LITTLE_ENDIAN -O2 -pipe -DINTERNALBOOL -MT drvpptx.l
o -MD -MP -MF .deps/drvpptx.Tpo -c drvpptx.cpp -fPIC -DPIC -o .libs/drvpptx.o
drvpptx.cpp:67:10: fatal error: 'zip.h' file not found
#include 
 ^~~
1 error generated.



-- 
Antoine



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Stuart Henderson
CVSROOT:/cvs
Module name:ports
Changes by: st...@cvs.openbsd.org   2022/09/23 13:28:50

Modified files:
lang/node  : Makefile distinfo 
lang/node/patches: patch-node_gyp 
Added files:
lang/node/patches: patch-configure 

Log message:
security update to node-16.17.1, from maintainer Volker Schlecht
plus I added a patch to the configure script to prevent it from picking up
a non-default Python version at build time

HTTP Request Smuggling Due to Incorrect Parsing of Multi-line
Transfer-Encoding (Medium) (improper fix for CVE-2022-32215)

CVE-2022-32213 bypass via obs-fold mechanic (Medium) (CVE-2022-32213)

HTTP Request Smuggling Due to Incorrect Parsing of Header Fields
(Medium) (CVE-2022-35256)

Weak randomness in WebCrypto keygen (High) (CVE-2022-35255)



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Stuart Henderson
CVSROOT:/cvs
Module name:ports
Changes by: st...@cvs.openbsd.org   2022/09/23 13:19:26

Modified files:
www/honk   : Makefile distinfo 
www/honk/pkg   : PLIST README honk.rc 
Added files:
www/honk/pkg   : MESSAGE 

Log message:
update to honk-0.9.8, from Horia Racoviceanu
note, the database format changes, see pkg-readme pointed at by 1-liner in 
MESSAGE



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Stefan Sperling
CVSROOT:/cvs
Module name:ports
Changes by: s...@cvs.openbsd.org2022/09/23 08:51:28

Modified files:
devel/got  : Makefile distinfo 

Log message:
update to got 0.76

- gotwebd documentation fixes
- tog: extend log view author highlight colour to full field width (jamsek)
- tog: make headline highlight extend the full view width (jamsek)
- make got_commit_graph_iter_next use caller-provided storage for the id (op)
- tog: add new log view limit feature to filter commits (patch by Mikhail + op)
- tog: respect current cursor position during log search (patch by Mikhail)
- tog: implement runtime help accessible via H,F1 keymaps (jamsek)
- add gotadmin init -b  to specify repo head ref (jamsek)
- ensure got patch respects x-bit perms for new files (jamsek)
- gotwebd: drop needless NULL check (op)
- show file mode for new added files in work tree diffs (jamsek)
- fix wrong function prototypes shown in diff hunk headers (thj@freebsd, jamsek)



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Landry Breuil
CVSROOT:/cvs
Module name:ports
Changes by: lan...@cvs.openbsd.org  2022/09/23 08:10:37

Modified files:
devel/py-buildbot: Makefile.inc 
devel/py-buildbot/buildbot: distinfo 
devel/py-buildbot/console-view: distinfo 
devel/py-buildbot/grid-view: distinfo 
devel/py-buildbot/pkg: distinfo 
devel/py-buildbot/waterfall-view: distinfo 
devel/py-buildbot/www: distinfo 
devel/py-buildslave: Makefile distinfo 

Log message:
devel/py-build{bot,slave}: update to 3.6.1.

see https://github.com/buildbot/buildbot/releases/tag/v3.6.1



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Landry Breuil
CVSROOT:/cvs
Module name:ports
Changes by: lan...@cvs.openbsd.org  2022/09/23 07:24:16

Modified files:
www/mozilla-firefox: Makefile distinfo 
www/firefox-i18n: Makefile.inc distinfo 

Log message:
www/mozilla-firefox: update to 105.0.1.

see https://www.mozilla.org/en-US/firefox/105.0.1/releasenotes/
fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1784692



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Stuart Henderson
CVSROOT:/cvs
Module name:ports
Changes by: st...@cvs.openbsd.org   2022/09/23 03:40:10

Modified files:
www/squid  : Tag: OPENBSD_7_1 Makefile distinfo 
www/squid/pkg  : Tag: OPENBSD_7_1 PLIST-main README-main 

Log message:
update to squid-5.7 in -stable; it included security fixes

SQUID-2022:1 Exposure of Sensitive Information in Cache Manager
"This problem allows a trusted client to directly access cache
manager information bypassing the manager ACL protection"

SQUID-2022:2 Buffer Over Read in SSPI and SMB Authentication
(though the only affected auth helper we package is ntlm_fake_auth)



CVS: cvs.openbsd.org: ports

2022-09-23 Thread Stuart Henderson
CVSROOT:/cvs
Module name:ports
Changes by: st...@cvs.openbsd.org   2022/09/23 00:32:47

Modified files:
net/jitsi/jicofo: Makefile 
net/jitsi/jicofo/pkg: jicofo.rc 
net/jitsi/videobridge: Makefile 
net/jitsi/videobridge/pkg: jvb.rc 

Log message:
net/jitsi/*: fix pexp, from aisha