aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* security/vaultwarden: Update to 1.23.0Michael Reifenberger2021-12-114-357/+349
| | | | | | After rust got updated to 1.57 vaultwarden can be updated too. PR: 259333
* security/openvpn: license incompat mbedTLS, LZO+LibreSSLMatthias Andree2021-12-111-3/+25
| | | | | | | | | | | | | | | | | | | After reviewing licenses again, - mark mbedTLS broken for now, since it uses the Apache License 2.0, which is incompatible with the GPLv2 (OpenVPN does not employ the "or any later version" escape hatch). This will be handed to the OpenVPN-devel mailing list for review. - block out the combination of LZO with LibreSSL, since OpenVPN only has a linking exception for OpenSSL itself. Remedy is to either forgo LibreSSL, or to disable the LZO option, which requires proper configuration on either end. The maintainer's recommendation is to compile with OpenSSL instead. Bump PORTREVISION in spite of unchanged contents to flush out old packages. MFH: 2021Q4
* archivers/7-zip: add license and cpe infoMax Brazhnikov2021-12-111-3/+14
|
* security/vuxml: document sysutils/graylog log4j vulnDave Cottlehuber2021-12-111-0/+32
| | | | | Reported by: https://github.com/Graylog2/graylog2-server/commit/d3e441f1126f0dc292e986879039a87c59375b2a Security: CVE-2021-44228
* net/cloudflared: update from 2021.10.3 to 2021.11.0Vinícius Zavam2021-12-112-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | * github.com/cloudflare/cloudflared/blob/2021.11.0/RELEASE_NOTES * github.com/cloudflare/cloudflared/compare/2021.10.3...2021.11.0 * 2021.11.0 Fallback to HTTP2 immediately if connection times out with no network activity Add flag to 'tunnel create' subcommand to specify a base64-encoded secret * 2021.10.5 Update change log for release 2021.10.4 Revert "TUN-5184" * 2021.10.4 Fix misuse of wait group in TestQUICServer that caused the test to exit immediately Upgrade crypto/ssh package to fix CVE-2020-29652 Allow to configure max fetch size for listing queries Improvements to `max-fetch-size` that allow to deal with large number of tunnels in account Collect QUIC metrics about RTT, packets and bytes transfered and log events at tracing level Make sure outstanding websocket write is finished, and no more writes after shutdown PR: 254293 Reported by: orzodk % neomailbox.net
* sysutils/graylog: update to 4.2.3 with log4j CVE patchDave Cottlehuber2021-12-112-6/+6
| | | | | MFH: 2021Q4 Security: CVE-2021-44228
* www/matomo: update to 4.5.0Andrej Ebert2021-12-114-72/+961
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I also added a patch to supress the file integrity warning caused by the shebangfix to misc/log-analytics/import_logs.py and changed the pkg-message (change to the recommended apache config + upgrade message) Changelog: https://matomo.org/changelog Major Changes: * The `logme` method for [automatic logins](https://matomo.org/faq/how-to/faq_30/) is now disabled by default for new installations. For existing installations it will be enabled automatically on update. If you do not need it please consider disabling it again for security reasons by setting `login_allow_logme = 0` in `General` section of `config.ini.php`. * The redirect using the `url` param for the automatic login action `logme`, will no longer do redirects to untrusted hosts. If you need to do redirects to other URLs on purpose, please add the according hosts as `trusted_hosts` entry in `config.ini.php` * When determining the client IP address from proxy headers like X-Forwarded-For, Matomo will by default look at the first IP in the list. If you need to read the last IP instead, the new INI config option `[General] proxy_ip_read_last_in_list` be set to `1`. Using the last IP can be more secure when you are using proxy headers in combination with a load balancer. * Matomo logs can now be written into "errorlog" (logs using the error_log() php function) and "syslog" (logs to the syslog service) (to complement existing log writers: "screen", "file", "database"). [Learn more.](https://matomo.org/faq/troubleshooting/faq_115/) * Added new command `core:version` which returns the Matomo version number. * Added new command `core:create-security-files` which creates some web server security files if they haven't existed previously (useful when using for example Apache or IIS web server). * Before the JS tracker method, `enableLinkTracking` did not follow the DOM changes, from this version when the DOM updates, Matomo automatically adds event listeners for new links on the page. It makes it easier to track clicks on links in SPAs. From this version, if we use the `addListener` method to add event listener manually after the DOM has changed and the `enableLinkTracking` is turned on we will track the click event for that element twice. * Before every JS error was tracked, from this version the same JS error will be only tracked once per page view. If the very same error is happening multiple times, then it will be tracked only once within the same page view. If another page view is tracked or when the page reloads, then the error will be tracked again. * It's no longer possible to store any class instances directly in the session object. Please use arrays or plain data instead. * In Matomo 4.3.0 we have added a 'passwordConfirmation' parameter to the CorePluginsAdmin.setSystemSettings API method. It is currently optional, but will become mandatory in version 4.4.0. Plugin developers and users of the API should make sure to update their plugins and apps before this happens. * The `password_hash_algorithm`, `password_hash_argon2_threads`, `password_hash_argon2_memory_cost` and `password_hash_argon2_time_cost` INI config options have been added to allow using specific `password_hash` algorithms and options if desired. * The `enable_php_profiler` INI config option was added. This must now be set to 1 before profiling is allowed in Matomo. PR: 259850 Approved by: maintainer timeout
* math/p5-Math-GSL: prepare for math/gsl-2.7.1Tobias C. Berner2021-12-111-2/+6
| | | | | | | - Note, this project seems mostly dead upstream and the support for gsl 2.7.* is likely not really functional. PR: 260201
* print/freetype2: update to 2.11.1Tobias C. Berner2021-12-113-14/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: CHANGES BETWEEN 2.11.0 and 2.11.1 I. IMPORTANT CHANGES - Some fields in the `CID_FaceDictRec`, `CID_FaceInfoRec`, and `FT_Data` structures have been changed from signed to unsigned type, which better reflects the actual usage. It is also an additional means to protect against malformed input. II. MISCELLANEOUS - Cmake support has been further improved. To do that various backward-incompatible changes were necessary; please see file `CMakeLists.txt` for more details. - Since version 2.11.0, a C99 compiler is necessary to compile FreeType. - The experimental 'COLR' v1 API has been updated to the latest OpenType standard 1.9. - The `apinames` tool got a new option `-wV` to output an OpenVMS Linker Option File. - VMS support was updated. - MS Visual Studio support was added to build the demo programs. PR: 260202 Exp-run by: antoine
* dns/dnsmasq: pull in three more upstream fixesMatthias Andree2021-12-114-1/+195
| | | | | | | | | | | Cherry-pick these Git commits from the upstream: --local should behave as --server, not as --address [...] Fix confusion in DNS retries and --strict-order. Fix confusion with log-IDs and DNS retries. loosely prompted by Olivier's PR: 260331
* dns/dnsmasq: fix error "config error is REFUSED (EDE: not ready)"Olivier Cochard2021-12-112-1/+82
| | | | | | | | | | | | | Fix --address=/#/...... which was lost in 2.86 ML message: https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg15508.html Git commit: https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=26bbf5a314d833beaf0f147d24409969f05f3dba PR: 260331 Obtained from: Simon Kelley (upstream maintainer)
* security/py-trezor: Update to 0.13.0Emanuel Haupt2021-12-112-6/+6
|
* multimedia/mpv: fix lua option handlingVVD2021-12-111-4/+10
| | | | | | | | | | | | | | | | mpv supports - no lua - luajit - lua51-52 The new options added support to select between these. - LUA_NONE - LUAJIT (previous OFF by default) - LUA (previously on when LUAJIT=OFF) So the default remains to use lang/lua5[12]. PR: 259598
* lang/chez-scheme: Fix threads support on i386 platformAshish SHUKLA2021-12-112-7/+7
| | | | | | While here, pet portlint. Reported by: Jason Dagit <dagitj at gmail dot com> (private email)
* graphics/blender-lts28: prepare for cmake-3.22Tobias C. Berner2021-12-111-3/+12
| | | | PR: 260123
* lang/eisl: Update 2.25 -> 2.34Yuri Victorovich2021-12-112-4/+4
|
* multimedia/assimp: Update 5.1.0 -> 5.1.3Yuri Victorovich2021-12-113-7/+8
| | | | Reported by: portscout
* devel/py-distlib: Update 0.3.3 -> 0.3.4Yuri Victorovich2021-12-112-4/+4
| | | | Reported by: portscout
* devel/cxxopts: Update 2.2.1 -> 3.0.0Yuri Victorovich2021-12-112-6/+8
| | | | | | Also add the 'test' target. Reported by: portscout
* cad/openfpgaloader: Update 0.5.0 -> 0.6.1Yuri Victorovich2021-12-113-4/+6
| | | | Reported by: portscout
* mail/davmail: update to 6.0.1Jose G. Juanino2021-12-112-12/+15
| | | | | | | | | While here, make portclippy and portfmt happy. Changelog: https://sourceforge.net/p/davmail/code/HEAD/tree/tags/6.0.1/RELEASE-NOTES.md PR: 260323 Reported by: Jose G. Juanino <jjuanino@gmail.com> (maintainer)
* graphics/opencolorio-tools: prepare for cmake-3.22Tobias C. Berner2021-12-111-0/+11
| | | | PR: 260123
* sysutils/ttyd: prepare for cmake-3.22Tobias C. Berner2021-12-111-1/+0
| | | | PR: 260123
* devel/soft-serve: Update to 0.1.2Ashish SHUKLA2021-12-113-4/+25
| | | | | | - Also add a patch to fix building on 32-bit platforms[1] Reported-by: pkg-fallout[1]
* editors/vscode: update to 1.63.0Hiroki Tagato2021-12-1112-66/+144
| | | | | | | While here, remove BROKEN on FreeBSD 12. It build fine on FreeBSD 12 now. Changelog: https://code.visualstudio.com/updates/v1_63
* devel/psptoolchain*: Reset MAINTAINER as requested.Gleb Popov2021-12-118-8/+8
| | | | PR: 198813
* lang/chez-scheme: Fix threads supportAshish SHUKLA2021-12-112-6/+7
| | | | | | Thanks to Jason for suggesting the fix as well Reported by: Jason Dagit <dagitj at gmail dot com> (private email)
* graphics/tesseract: switch back to autotoolsPiotr Kubaj2021-12-112-29/+26
| | | | It looks like cmake doesn't install training data.
* security/openssl-devel: bump PORTREVISIONPiotr Kubaj2021-12-111-1/+1
|
* security/openssl-devel: merge upstream patch to enable assembly routines on ↵Piotr Kubaj2021-12-112-2/+17
| | | | | | powerpc* Since the architecture is misdetected as powerpc, manually set up target.
* textproc/opensearch-dashboards: Add CHROME optionRomain Tartière2021-12-111-0/+5
| | | | | | | | | | | Chrome is required for generating reports. Add an option to make this more visible, but since the dependencies are large, do not enable it by default. PORTREVISION is kept unchanged since the default package is not modified. With hat: opensearch
* devel/cdecl: update to 11.7Larry Rosenman2021-12-112-4/+4
| | | | | | | | | | | | | | | | | | | | | | ChangeLog: Cdecl keywords When an unexpected name token is encountered, if said token is a cdecl keyword, it's now mentioned in the error message: cdecl> declare ptr as pointer to void ^ 16: syntax error: "ptr": name expected ("ptr" is a cdecl keyword) Additionally, cdecl keywords are now also offered in suggestions. register arrays register arrays are now correctly allowed. Zero-sized arrays Zero-sized arrays are now correctly forbidden. No files as arguments Command-line arguments were treated as files if they weren't commands. This dubious use-case was a hold-over from the original cdecl and has been removed. (If you want to read a file use -f.)
* www/py-caldav: Update to 0.8.2Joseph Mingrone2021-12-112-7/+7
| | | | | https://github.com/python-caldav/caldav/blob/541daa244ef426bf9cb5587f8a53e3ffba6b1421/changelog-0.8.md https://github.com/python-caldav/caldav/releases/tag/v0.8.2
* devel/sdl12-compat: update to s20211209Jan Beich2021-12-112-5/+5
| | | | Changes: https://github.com/libsdl-org/sdl12-compat/compare/a6a965a...8743305
* graphics/mesa-devel: update to 21.3.b.1759Jan Beich2021-12-112-8/+5
| | | | Changes: https://gitlab.freedesktop.org/mesa/mesa/-/compare/ff74d5dd1b8...fd2a558bf8a
* emulators/rpcs3: update to 0.0.19.13101Jan Beich2021-12-112-5/+5
| | | | Changes: https://github.com/RPCS3/rpcs3/compare/f48c53580...2f93df480
* mail/notmuch*: Update to 0.34.2Joseph Mingrone2021-12-114-6/+6
| | | | https://git.notmuchmail.org/git?p=notmuch;a=blob_plain;f=NEWS;hb=a06b76b9b3c1212b17d2bb170bdd511711f578f8
* graphics/vulkan-loader: update to 1.2.202Jan Beich2021-12-113-6/+5
| | | | | Changes: https://github.com/KhronosGroup/Vulkan-Loader/compare/v1.2.201...v1.2.202 Reported by: Repology
* graphics/vulkan-headers: update to 1.2.202Jan Beich2021-12-115-4/+65
| | | | | | | Force rebuild vulkan-loader to make sure vulkaninfo shows the new version. Changes: https://github.com/KhronosGroup/Vulkan-Headers/compare/v1.2.201...v1.2.202 Reported by: Repology
* kde-ports: remove runtime-dependency on Qt testlibAdriaan de Groot2021-12-109-17/+25
| | | | | | Qt testlib is a library for tests; it is not generally needed at runtime. Move it to a _build dependency for the KDE-related ports that use it for their tests.
* x11/plasma5-plasma-workspace: fix errors in Wayland-scriptAdriaan de Groot2021-12-102-2/+3
| | | | | | | | These are fairly basic and silly shell-script errors in the startplasma-wayland.sh script (which might not even be needed, if you start KDE Plasma-wayland some other way). Derpy hat to me.
* astro/qmapshack: Update version 1.16.0=>1.16.1Christoph Moench-Tegeder2021-12-102-5/+4
| | | | | | | PR: 260327 Reported by: cmt Relnotes: https://sourceforge.net/p/qlandkartegt/mailman/message/37395765/
* mail/mimedefang: Allow setting MX_MAX_RSS and MX_MAX_AS in rc.confml@netfence.it2021-12-103-18/+35
| | | | | | | | | | | | | | | | | In order to avoid DOSes due to complex MIME, MIMEDefang sets some limits on how much memory a process can use (MX_MAX_RSS and MX_MAX_AS). The provided example init script sets these variables to very low values (which probably made sense when RAM was much scarcer); the port already patches that file, increasing them, but they are still way too low in some cases, resulting in some mail messages crashing the filter and not passing. This patch, while retaining the current port defaults, allows these thresholds to be set in rc.conf. PR: 256711 Approved by: maintainer
* shells/starship: Update 0.58.0 -> 1.0.0Yuri Victorovich2021-12-102-83/+103
|
* x11/libexo: Update to 4.16.3Guido Falsi2021-12-102-8/+9
| | | | - Add some missing dependencies
* mail/fetchmail: update 6.4.25, add WOLFSSL supportMatthias Andree2021-12-103-13/+22
| | | | | | WOLFSSL is a GPLv2+ licensed SSL library with OpenSSL compatibility layer. This is to permit shipping fetchmail under a clean GPLv2+ license with OpenSSL 1.1.1.
* emulators/qemu: Use system dtc from portsMuhammad Moinur Rahman2021-12-106-101/+88
| | | | | | | | - elf2dmp depends on CURL [1] - Fix build when fusefs-libs3 is installed [2] PR: 260315 [2] Reported by: kostikbel@gmail.com [1] d8zNeCFG@aon.at [2]
* graphics/digikam: add upstreams akonadi-21.12 compability patchTobias C. Berner2021-12-102-1/+6
| | | | | | | - the update of KDE Gear to 21.12 shuffled header files around - upstream already fixed this in the added patch Reported by: fluffy, krop
* graphics/shotwell: remove option OPENMP tracesChristoph Moench-Tegeder2021-12-101-8/+1
| | | | | | after 24e4736c1314 I'm very positive that no special handling for using an openmp-enabled libraw is required anymore, so remove leftover comments for that
* graphics/libraw: link against libomp with OPENMP=onChristoph Moench-Tegeder2021-12-101-1/+2
| | | | | | | | | | | | Since 07fb2d5e9d00 consumers - most notably shotwell - crashed hard on RAW file operations when libraw was built with OPENMP=on: ld-elf.so.1: /usr/local/lib/libraw.so.20: Undefined symbol "__kmpc_fork_call" adding -lomp to libraw's LDFLAGS (via OPENMP_LDFLAGS, so it stays conditional) fixes the issue. PR: 259904 Approved by: maintainer-timeout (jhale@)