OpenBSD ports changes summary for 2017-09-17 to 2017-09-24 inclusive ====================================================================
archivers/p5-Compress-Bzip2 audio audio/ario audio/deadbeef audio/mp3gain audio/p5-Audio-Scan audio/pulseaudio audio/rgain comms/minimodem databases/freetds databases/libzdb databases/p5-BerkeleyDB databases/redis databases/xapian-bindings devel devel/bullet devel/cmake devel/gwenhywfar devel/iso-codes devel/mercurial devel/ninja devel/ocaml-dose devel/p5-B-Utils devel/p5-Class-Load-XS devel/p5-Devel-FindRef devel/p5-Devel-Gladiator devel/p5-Filesys-Statvfs devel/p5-IO-AIO devel/p5-Locale-gettext devel/p5-Pango devel/p5-SDL devel/p5-Sys-Mmap devel/p5-Tcl devel/p5-Unix-Mknod devel/p5-Variable-Magic devel/p5-Want devel/p5-ZMQ-LibZMQ3 devel/p5-indirect devel/p5-libintl devel/qbs devel/qt-creator devel/quirks devel/subversion devel/uuid emulators/fceux emulators/nestopia games/golly games/stepmania games/warmux geo geo/mapserver geo/p5-Geo-Parse-OSM geo/pgrouting geo/py-planet geo/qgis geo/spatialite graphics/gifsicle graphics/gnofract4d graphics/p5-Cairo graphics/p5-Imager graphics/p5-Sane graphics/py-Pillow graphics/py-cairo graphics/py-matplotlib graphics/shotwell infrastructure/bin infrastructure/mk lang lang/jimtcl lang/jruby lang/kawa lang/mruby lang/myrddin lang/oo2c lang/python lang/ruby lang/smlnj mail/dovecot mail/evolution-rss mail/mutt mail/opensmtpd-extras mail/razor-agents mail/rspamd misc/shared-mime-info multimedia/atomicparsley multimedia/dvdstyler multimedia/get_flash_videos multimedia/gstreamer1 multimedia/xine-lib multimedia/xine-ui net net/bitlbee net/farstream net/icinga net/ircd-ratbox net/irssi net/liboping net/libvncserver net/mcabber net/monitoring-plugins net/nagios net/openconnect net/openvpn-auth-ldap net/p5-Geo-IP net/p5-IO-Interface net/p5-Net-DBus net/p5-Net-IP-XS net/p5-Net-LDNS net/p5-Net-LibIDN net/py-botocore net/rtorrent net/samba net/seafile net/telepathy net/wireshark print/cups-filters print/texinfo productivity/aqbanking productivity/glabels security/cyrus-sasl2 security/gpa security/integrit security/letsencrypt security/libssh security/p5-Chipcard-PCSC security/p5-Crypt-IDEA security/p5-Crypt-OpenSSL-X509 security/p5-Crypt-RIPEMD160 security/sslscan security/xmlsec sysutils sysutils/awscli sysutils/librelp sysutils/libvirt sysutils/p5-Proc-ProcessTable sysutils/p5-Sys-Virt sysutils/py-parallel-ssh sysutils/riemann-c-client sysutils/rsyslog telephony/asterisk telephony/baresip telephony/kamailio textproc/iksemel textproc/ispell textproc/p5-Pod-Spell textproc/p5-Text-CSV_XS textproc/p5-Text-Reflow textproc/redland-bindings www www/apache-httpd www/buku www/chromium www/epiphany www/liferea www/newsbeuter www/nghttp2 www/p5-CSS-Minifier-XS www/p5-JavaScript-Minifier-XS www/p5-libapreq2 www/sope www/squid www/ttyd www/varnish x11/gnome x11/gtk+2 x11/gtk2-murrine-engine x11/kde x11/lumina x11/mate x11/mlterm x11/p5-Gtk2-GladeXML x11/p5-Gtk2-ImageView x11/p5-Tk x11/rxvt-unicode x11/spice-gtk x11/virt-viewer x11/x2goclient x11/xfce4 x11/xwallpaper == archivers ========================================================= 01/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/archivers p5-Compress-Bzip2 ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) == audio ============================================================= 02/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/audio audio ~ Makefile > remove mp3gain, see http://www.openwall.com/lists/oss-security/2017/09/14/ > Note that http://www.openwall.com/lists/oss-security/2017/09/14/12 has some > words in its defense; it might make sense to reintroduce if the forked mp3 > decoder library is replaced. > link rgain. (sthen@) ario ~ Makefile > add a bunch of missing unistring deps (sthen@) deadbeef ~ Makefile > sync wantlib (sthen@) mp3gain - Makefile - distinfo - pkg/DESCR - pkg/PLIST > remove mp3gain, see http://www.openwall.com/lists/oss-security/2017/09/14/ > Note that http://www.openwall.com/lists/oss-security/2017/09/14/12 has some > words in its defense; it might make sense to reintroduce if the forked mp3 > decoder library is replaced. > link rgain. (sthen@) p5-Audio-Scan ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) pulseaudio ~ Makefile ~ distinfo ~ patches/patch-configure_ac ~ patches/patch-src_Makefile_am ~ patches/patch-src_pulsecore_core-util_c ~ pkg/PLIST > Update to pulseaudio-11.1. > ok robert@ (maintainer) (ajacoutot@) rgain + Makefile + distinfo + pkg/PLIST + pkg/DESCR > New import: > import ports/audio/rgain, ok jca@ - this is an alternative to > audio/mp3gain == comms ============================================================= 03/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/comms minimodem ~ Makefile > Adjust MAKE_FLAGS to unbreak after pulseaudio update. (ajacoutot@) == databases ========================================================= 04/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/databases freetds ~ Makefile > sync WANTLIB (sthen@) libzdb ~ Makefile > WANTLIB+=m for a bunch of things (chasing sqlite3 fts5 addition) (sthen@) p5-BerkeleyDB ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) redis ~ Makefile ~ distinfo > Update to redis-4.0.2 (dcoppa@) xapian-bindings ~ Makefile > WANTLIB+=c for more perl XS things (sthen@) == devel ============================================================= 05/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/devel devel ~ Makefile > hook qbs (rsadowski@) bullet ~ Makefile > add missing COMPILER_LIBCXX wantlib, fixup GH_*, remove unwanted > MASTER_SITES (sthen@) cmake ~ Makefile ~ distinfo ~ patches/patch-bootstrap > Update to CMake-3.9.3 (dcoppa@) gwenhywfar ~ Makefile > add a bunch of missing unistring deps (sthen@) iso-codes ~ Makefile ~ distinfo > update to iso-codes-3.76 (jasper@) mercurial ~ Makefile ~ distinfo > Update to mercurial 4.3.2. (juanfra@) ninja ~ Makefile ~ distinfo ~ pkg/PLIST > Update to 1.8.2 and enable regression tests > original diff by rsadowski@ with tweaks by me > ok sthen@ dcoppa@ > bulk build by naddy@ > maintainer timeout (giovanni@) ocaml-dose ~ Makefile ~ patches/patch-algo_dominators_ml > adjust for ocamlgraph 1.8.6 API > breakage spotted by naddy@; fix from upstream (jasper@) p5-B-Utils ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Class-Load-XS ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Devel-FindRef ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Devel-Gladiator ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Filesys-Statvfs ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-IO-AIO ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Locale-gettext ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Pango ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-SDL ~ Makefile > broken on amd64: perl -e 'use SDL' segfaults (naddy@) p5-Sys-Mmap ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Tcl ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Unix-Mknod ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Variable-Magic ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Want ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-ZMQ-LibZMQ3 ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-indirect ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-libintl ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) qbs + Makefile + distinfo + pkg/DESCR + pkg/PLIST > New import: > Import devel/qbs qt-creator ~ Makefile ~ distinfo ~ patch-src_shared_qbs_src_lib_corelib_tools_tools_pri ~ pkg/PLIST > Update qt-creator to 4.4.0 > tweaks from zhuk@: > - stop bundling botan and qbs, use system ones > - add USE_WXNEEDED to avoid crashes in form designer > ok jca@ (rsadowski@) quirks ~ Makefile ~ files/Quirks.pm > Register rename of extract_url into extracturl from a while back. > With a whitespace tweak from jasper (tb@) subversion ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) ~ Makefile ~ patches/patch-Makefile_in > Link against correct ruby library > Problem found by sthen@ > OK sthen@ (jeremy@) uuid ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) == emulators ========================================================= 06/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/emulators fceux ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) nestopia ~ Makefile > libretro needs c++ libs (sthen@) == games ============================================================= 07/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/games golly ~ Makefile > sync wantlib (sthen@) stepmania ~ Makefile ~ patches/patch-src_Makefile_in > Unbreak after pulseaudio update. > reported by naddy@ (didn't show up in my bulk for some reason) (ajacoutot@) warmux ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) == geo =============================================================== 08/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/geo geo ~ Makefile > +p5-Geo-Parse-OSM (landry@) mapserver ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Geo-Parse-OSM + Makefile + distinfo + pkg/DESCR + pkg/PLIST > New import: > Import p5-Geo-Parse-OSM 0.42. pgrouting ~ Makefile ~ distinfo ~ pkg/PLIST > Update to pgrouting 2.5.0. > See > https://github.com/pgRouting/pgrouting/wiki/Migration-Guide#migrating-from- > 24-to-25 > for details. (landry@) py-planet ~ Makefile ~ distinfo ~ pkg/PLIST > Update planet client to 1.1.0, besides bug fixes and minor > enhancements, now also supporting skysat data (sebastia@) qgis - patches/patch-python_core_qgscoordinatetransform_sip ~ Makefile ~ distinfo ~ patches/patch-src_app_qgisapp_cpp ~ pkg/PLIST > Update to QGIS 2.18.13. > Remove python/core/qgscoordinatetransform.sip patch, was fixed > differently upstream in https://issues.qgis.org/issues/17039 (landry@) spatialite ~ freexl/Makefile ~ freexl/distinfo > Update to freexl 1.0.4, fixing CVE-2017-2923 & CVE-2017-2924 (landry@) == graphics ========================================================== 09/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/graphics gifsicle ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) gnofract4d ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) p5-Cairo ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Imager ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Sane ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) py-Pillow ~ Makefile > Explicitely --disable-jpeg2000 otherwise if openjpeg is present, the build > fails (jpeg2000 support needs openjp2). (ajacoutot@) py-cairo ~ Makefile ~ distinfo ~ pkg/PFRAG.no-python3 ~ pkg/PFRAG.python3 > Update to py-cairo-1.15.3. (ajacoutot@) py-matplotlib ~ Makefile > add a whole raft of missing wantlib (sthen@) ~ Makefile > fix python3 flavor WANTLIB > Ok sthen@ (nigel@) shotwell ~ Makefile > sync GNOMEish WANTLIBs (sthen@) == infrastructure ==================================================== 10/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/infrastructure bin ~ register-plist > don't count @version as relevant when registering plists. (espie@) mk ~ arch-defines.mk > scaffolding for -V option, the only missing part is activating it in > bsd.port.mk (espie@) ~ bsd.port.mk > activate @version (espie@) ~ bsd.port.mk > Display a clear error message indicating that WRKOBJDIR must be on a > wxallowed filesystem for USE_WXNEEDED ports instead of erroring out > unhelpfully. Prompted by numerous questions about Python builds failing > with "configure: error: cannot run C compiled programs." on ports@ > Input, tested in bulks and ok sthen; ok danj; no veto from espie. (tb@) == lang ============================================================== 11/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/lang lang ~ Makefile > unhook oo2c and smlnj; oo2c is i386-only, smlnj is i386/powerpc only but > BROKEN-powerpc, neither build with clang. ok tb@ (sthen@) jimtcl ~ Makefile > hidden dep on libexecinfo (sthen@) ~ Makefile > missed bump (sthen@) jruby ~ Makefile + patches/patch-lib_ruby_stdlib_webrick_httpstatus_rb + patches/patch-lib_ruby_stdlib_webrick_log_rb TAGGED OPENBSD_6_1 > Backport security fix for CVE-2017-10784 to JRuby 9.1.8.0. (jeremy@) kawa ~ Makefile > use ${LOCALBASE} as $deity intended (jasper@) ~ Makefile > remove old BROKEN-i386 from when java wouldn't build reliably (sthen@) ~ Makefile > tidy autocrap handling (jasper@) mruby ~ Makefile > add WANTLIB (sthen@) myrddin ~ Makefile ~ distinfo ~ pkg/PLIST > Update myrddin to 0.2. Release notes: > https://myrlang.org/release-notes/r0p2.html (jturner@) oo2c - Makefile - distinfo - patches/patch-lib_src___oo2c_h - patches/patch-tests_lib_LibWeakRef1_Mod - patches/patch-tests_ssa_VTable3_cpp - pkg/DESCR - pkg/PLIST > remove oo2c/smlnj, if anyone wants to fix them the Attic is this way ---^^^ > (sthen@) python - 2.7/patches/patch-Python_random_c ~ 2.7/Makefile ~ 2.7/distinfo ~ 2.7/pkg/PLIST-main ~ 2.7/pkg/PLIST-tests ~ 2.7/pkg/PLIST-tools > update Python to 2.7.14. > tested in a bulk build by naddy@, thanks. (rpointel@) ruby ~ 2.4/Makefile + 2.4/patches/patch-ext_json_generator_generator_c + 2.4/patches/patch-ext_json_generator_generator_h + 2.4/patches/patch-lib_webrick_httpstatus_rb + 2.4/patches/patch-lib_webrick_log_rb + 2.4/patches/patch-sprintf_c TAGGED OPENBSD_6_1 > Backport security fixes for CVE-2017-10784, CVE-2017-0898, and > CVE-2017-14064 to ruby 2.4.1. (jeremy@) ~ 2.3/Makefile + 2.3/patches/patch-ext_json_generator_generator_c + 2.3/patches/patch-ext_json_generator_generator_h + 2.3/patches/patch-ext_openssl_ossl_asn1_c + 2.3/patches/patch-ext_psych_yaml_api_c + 2.3/patches/patch-ext_psych_yaml_emitter_c + 2.3/patches/patch-ext_psych_yaml_parser_c + 2.3/patches/patch-ext_psych_yaml_yaml_private_h + 2.3/patches/patch-lib_webrick_httpstatus_rb + 2.3/patches/patch-lib_webrick_log_rb + 2.3/patches/patch-sprintf_c TAGGED OPENBSD_6_1 > Backport security fixes for CVE-2017-14033, CVE-2017-10784, > CVE-2017-0898, and CVE-2017-14064 to ruby 2.3.3. (jeremy@) ~ 2.2/Makefile + 2.2/patches/patch-ext_json_generator_generator_c + 2.2/patches/patch-ext_json_generator_generator_h + 2.2/patches/patch-ext_openssl_ossl_asn1_c + 2.2/patches/patch-ext_psych_yaml_api_c + 2.2/patches/patch-ext_psych_yaml_emitter_c + 2.2/patches/patch-ext_psych_yaml_loader_c + 2.2/patches/patch-ext_psych_yaml_parser_c + 2.2/patches/patch-ext_psych_yaml_scanner_c + 2.2/patches/patch-ext_psych_yaml_yaml_private_h + 2.2/patches/patch-lib_webrick_httpstatus_rb + 2.2/patches/patch-lib_webrick_log_rb + 2.2/patches/patch-sprintf_c TAGGED OPENBSD_6_1 > Backport security fixes for CVE-2017-14033, CVE-2017-10784, > CVE-2017-0898, and CVE-2017-14064 to ruby 2.2.6. (jeremy@) ~ 2.1/Makefile + 2.1/patches/patch-ext_json_generator_generator_c + 2.1/patches/patch-ext_json_generator_generator_h + 2.1/patches/patch-ext_openssl_ossl_asn1_c + 2.1/patches/patch-ext_psych_yaml_api_c + 2.1/patches/patch-ext_psych_yaml_emitter_c + 2.1/patches/patch-ext_psych_yaml_loader_c + 2.1/patches/patch-ext_psych_yaml_parser_c + 2.1/patches/patch-ext_psych_yaml_scanner_c + 2.1/patches/patch-ext_psych_yaml_yaml_private_h + 2.1/patches/patch-lib_webrick_httpstatus_rb + 2.1/patches/patch-lib_webrick_log_rb + 2.1/patches/patch-sprintf_c TAGGED OPENBSD_6_1 > Backport security fixes for CVE-2017-14033, CVE-2017-10784, > CVE-2017-0898, and CVE-2017-14064 to ruby 2.1.9. (jeremy@) ~ 1.8/Makefile ~ 1.8/pkg/PLIST-ri_docs + 1.8/patches/patch-lib_webrick_httpstatus_rb + 1.8/patches/patch-lib_webrick_log_rb + 1.8/patches/patch-sprintf_c TAGGED OPENBSD_6_1 > Backport security fixes for CVE-2017-10784 and CVE-2017-0898 > to ruby 1.8.7. (jeremy@) smlnj - Makefile - distinfo - files/get-cm - patches/patch-base_runtime_include_asm-base_h - patches/patch-base_runtime_include_ml-timer_h - patches/patch-base_runtime_mach-dep_signal-sysdep_h - patches/patch-base_runtime_objs_mk_ppc-openbsd - patches/patch-base_runtime_objs_mk_x86-openbsd - patches/patch-config__arch-n-opsys - patches/patch-config__heap2exec - patches/patch-config__link-sml - patches/patch-config__ml-build - patches/patch-config__ml-makedepend - patches/patch-config__run-sml - pkg/DESCR - pkg/PLIST > remove oo2c/smlnj, if anyone wants to fix them the Attic is this way ---^^^ > (sthen@) == mail ============================================================== 12/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/mail dovecot ~ Makefile ~ pkg/PLIST-server > Build Dovecot's fts-solr plugin (solr itself is not currently in packages; > I've tested this against manually-installed solr 6.6.1 running with jdk 1.8 > on OpenBSD). > ok Brad (maintainer). (sthen@) evolution-rss ~ Makefile > sync GNOMEish WANTLIBs (sthen@) mutt ~ Makefile ~ distinfo > bugfix update to mutt-1.9.1 > - possible segfault with IMAP when syncing, along with trash folder and > imap_poll_timeout reconnection issues. (sthen@) opensmtpd-extras ~ Makefile > WANTLIB+=m for a bunch of things (chasing sqlite3 fts5 addition) (sthen@) razor-agents ~ Makefile > WANTLIB+=c for more perl XS things (sthen@) rspamd ~ Makefile ~ distinfo > update to rspamd-1.6.4, similar to a diff from [email protected] > (sthen@) ~ Makefile > take maintainer, in the hope it will prod portroach into noticing this port > :) (sthen@) == misc ============================================================== 13/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/misc shared-mime-info ~ Makefile ~ distinfo ~ pkg/PLIST > Update to shared-mime-info-1.9. (ajacoutot@) == multimedia ======================================================== 14/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/multimedia atomicparsley ~ Makefile > don't use g++ to link (sthen@) dvdstyler ~ Makefile > don't use g++ to link > sync wantlib (sthen@) get_flash_videos ~ Makefile ~ distinfo > Update to latest version. Use sthen@ suggestions for Makefile. > Ok sthen@ (nigel@) gstreamer1 ~ Makefile.inc ~ core/Makefile ~ core/distinfo ~ plugins-bad/Makefile ~ plugins-bad/distinfo ~ plugins-base/Makefile ~ plugins-base/distinfo ~ plugins-good/Makefile ~ plugins-good/distinfo ~ plugins-libav/distinfo ~ plugins-ugly/distinfo ~ py-gstreamer/distinfo > Update gstreamer1 stack to version 1.12.3. (ajacoutot@) ~ plugins-good/Makefile > Sync WANTLIB after recent pulseaudio update. (ajacoutot@) xine-lib ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) xine-ui ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) == net =============================================================== 15/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/net net ~ Makefile > Enable mininet. OK phessler@ sthen@ (akoshibe@) bitlbee ~ Makefile > sync wantlib (sthen@) ~ Makefile > Move gpg-error to the otr wantlib. > spotted by naddy, ok sthen (kili@) farstream ~ Makefile > sync wantlib (sthen@) icinga ~ core2/Makefile ~ core2/distinfo ~ core2/pkg/PLIST-main > update to icinga2-2.7.1 (sthen@) ircd-ratbox ~ Makefile > WANTLIB+=m for a bunch of things (chasing sqlite3 fts5 addition) (sthen@) irssi ~ Makefile > ncurses->ncursesw (sthen@) liboping ~ Makefile > fix WANTLIB (existing wantlib was in the wrong place so the WANTLIB+= > didn't > work) (sthen@) libvncserver ~ Makefile > add a bunch of missing unistring deps (sthen@) mcabber ~ Makefile > Drop gettext MODULE, sync WANTLIB > Based on the diff of Markus Hennecke (Maintainer). > lib depends, REVISION tweaks and ok jca@ (rsadowski@) monitoring-plugins ~ Makefile > add a bunch of missing unistring deps (sthen@) nagios ~ check_esxi_hardware/Makefile ~ check_esxi_hardware/pkg/PLIST > add a symlink to the location where icinga2's ITL definition for this check > expects to find it (sthen@) openconnect ~ Makefile > add a bunch of missing unistring deps (sthen@) openvpn-auth-ldap ~ Makefile > use COMPILER_LIBCXX for c++abi (objc) (sthen@) ~ Makefile > missed bump (sthen@) p5-Geo-IP ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-IO-Interface ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Net-DBus ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Net-IP-XS ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Net-LDNS ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Net-LibIDN ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) py-botocore ~ Makefile ~ distinfo > Update to py-botocore-1.7.13. (ajacoutot@) ~ Makefile ~ distinfo > Update to py-botocore-1.7.14. (ajacoutot@) rtorrent ~ Makefile > Drop gettext module (dcoppa@) samba - patches/patch-source3_rpc_server_srv_pipe_c - patches/patch-source4_heimdal_lib_krb5_ticket_c ~ Makefile ~ distinfo ~ patches/patch-lib_ldb_wscript > Update to samba-4.5.13, the latest release of the 4.5.x series > Putting this in now to help handle future possible security issues on > the 6.2 branch. Tested by Ian McWilliam. (jca@) ~ Makefile ~ distinfo > SECURITY update to samba-4.5.14 > o CVE-2017-12150 (SMB1/2/3 connections may not require signing where > they should) > o CVE-2017-12151 (SMB3 connections don't keep encryption across DFS > redirects) > o CVE-2017-12163 (Server memory information leak over SMB1) (jca@) + patches/patch-auth_credentials_credentials_c + patches/patch-libcli_smb_smbXcli_base_c + patches/patch-libcli_smb_smbXcli_base_h + patches/patch-libgpo_gpo_fetch_c + patches/patch-source3_lib_util_cmdline_c + patches/patch-source3_libsmb_clidfs_c + patches/patch-source3_libsmb_clientgen_c + patches/patch-source3_libsmb_libsmb_context_c + patches/patch-source3_libsmb_proto_h + patches/patch-source3_libsmb_pylibsmb_c + patches/patch-source3_smbd_reply_c TAGGED OPENBSD_6_1 > SECURITY patches backported from samba-4.5.14 > o CVE-2017-12150 (SMB1/2/3 connections may not require signing where > they should) > o CVE-2017-12151 (SMB3 connections don't keep encryption across DFS > redirects) > o CVE-2017-12163 (Server memory information leak over SMB1) (jca@) seafile ~ ccnet/Makefile ~ seafile/Makefile > WANTLIB+=m for a bunch of things (chasing sqlite3 fts5 addition) (sthen@) telepathy ~ telepathy-gabble/Makefile ~ telepathy-salut/Makefile > add a bunch of missing unistring deps (sthen@) ~ folks/Makefile > sync GNOMEish WANTLIBs (sthen@) wireshark ~ Makefile ~ pkg/PLIST-main + pkg/DESCR-gtk + pkg/PLIST-gtk > - add hidden dep on archivers/snappy > - reinstate gtk version, req by tb@ > - install mime/appdata files, missing from the !gtk build (sthen@) == print ============================================================= 16/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/print cups-filters ~ Makefile ~ distinfo ~ patches/patch-Makefile_in > Update to cups-filters-1.17.7. (ajacoutot@) texinfo ~ Makefile ~ distinfo > Update to Texinfo 6.5 > OK kili@ (feinerer@) == productivity ====================================================== 17/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/productivity aqbanking ~ Makefile > add a bunch of missing unistring deps (sthen@) glabels ~ Makefile > sync GNOMEish WANTLIBs (sthen@) == security ========================================================== 18/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/security cyrus-sasl2 ~ Makefile > WANTLIB+=m for a bunch of things (chasing sqlite3 fts5 addition) (sthen@) gpa ~ Makefile > sync WANTLIB and put it in the right place in the Makefile (sthen@) integrit ~ Makefile > missing WANTLIB (sthen@) letsencrypt ~ Makefile.inc ~ client/distinfo ~ py-acme/distinfo > update to certbot-0.18.2 (sthen@) libssh ~ Makefile ~ distinfo ~ patches/patch-ConfigureChecks_cmake > update libssh from 0.7.3 to 0.7.5 > ChangeLog 0.7.5: > Fixed a memory allocation issue with buffers > Fixed PKI on Windows > Fixed some SSHv1 functions > Fixed config hostname expansion > ChangeLog 0.7.4: > Added id_ed25519 to the default identity list > Fixed sftp EOF packet handling > Fixed ssh_send_banner() to confirm with RFC 4253 > Fixed some memory leaks > ok rpointel@ (rsadowski@) p5-Chipcard-PCSC ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Crypt-IDEA ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Crypt-OpenSSL-X509 ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Crypt-RIPEMD160 ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) sslscan ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) xmlsec ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) == sysutils ========================================================== 19/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/sysutils sysutils ~ Makefile > +py-parallel-ssh (phessler@) awscli ~ Makefile ~ distinfo > Update to awscli-1.11.155. (ajacoutot@) ~ Makefile ~ distinfo > Update to awscli-1.11.156. (ajacoutot@) librelp ~ Makefile > add a bunch of missing unistring deps (sthen@) libvirt ~ Makefile > add a bunch of missing unistring deps (sthen@) p5-Proc-ProcessTable ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Sys-Virt ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) py-parallel-ssh + distinfo + Makefile + pkg/PLIST + pkg/DESCR > New import: > Asynchronous parallel SSH client library. riemann-c-client ~ Makefile > add a bunch of missing unistring deps (sthen@) rsyslog ~ Makefile > add a bunch of missing unistring deps (sthen@) == telephony ========================================================= 20/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/telephony asterisk ~ Makefile ~ distinfo > update to asterisk-13.17.2 - fix AST-2017-008 RTP/RTCP problems, followup > to AST-2017-005. > The RTP/RTCP stack will now validate RTCP packets before processing > them. Packets failing validation are discarded. RTP stream qualification > now requires the intended series of packets from the same address > without seeing packets from a different source address to accept a new > source address. (sthen@) baresip ~ re/Makefile ~ re/distinfo ~ re/patches/patch-Makefile > Update to re 0.5.5 > "go ahead" czarkoff@ (feinerer@) ~ baresip/Makefile ~ baresip/distinfo ~ baresip/patches/patch-src_config_c > Update to baresip 0.5.5 > "go ahead" czarkoff@ (feinerer@) kamailio - patches/patch-utils_kamctl_kamdbctl_pgsql ~ Makefile ~ distinfo ~ patches/patch-src_Makefile_defs ~ patches/patch-src_Makefile_libs ~ patches/patch-src_core_msg_translator_c ~ patches/patch-src_core_pt_c ~ patches/patch-src_core_tcp_read_c ~ patches/patch-src_main_c ~ patches/patch-src_modules_nat_traversal_nat_traversal_c ~ patches/patch-src_modules_rls_utils_c ~ patches/patch-src_modules_tls_tls_init_c ~ patches/patch-src_modules_xhttp_pi_xhttp_pi_fnc_c + patches/patch-src_core_core_cmd_c + patches/patch-src_core_socket_info_c + patches/patch-src_modules_tls_tls_domain_c + patches/patch-src_modules_tls_tls_init_h + patches/patch-src_modules_tls_tls_locking_c > update to kamailio-5.0.3 and fix loading modules linked with srdb1, srdb2, > trie, srutils on clang arches, from Roman Kravchuk (maintainer) (sthen@) == textproc ========================================================== 21/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/textproc iksemel ~ Makefile > add a bunch of missing unistring deps (sthen@) ispell ~ Makefile > termcap->ncursesw WANTLIB, plus some other minor Makefile changes I had in > my tree (sthen@) p5-Pod-Spell ~ Makefile ~ pkg/PLIST > Add p5-Path-Tiny runtime dependency, adjust PLIST > Ok sthen@ (nigel@) p5-Text-CSV_XS ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Text-Reflow ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) redland-bindings ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) == www =============================================================== 22/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/www www ~ Makefile > +ttyd (phessler@) apache-httpd ~ Makefile + patches/patch-server_core_c > patch apache httpd CVE-2017-9798, backported from upstream's branches/2.4.x > This is a use after free error that causes a corrupted Allow header to > be constructed in response to HTTP OPTIONS requests. It can leak pieces > of arbitrary memory from the server process that may contain secrets. > The memory pieces change after multiple requests, so for a vulnerable > host an arbitrary number of memory chunks can be leaked. > The bug appears if a webmaster tries to use the "Limit" directive with > an invalid HTTP method. (sthen@) ~ Makefile + patches/patch-server_core_c TAGGED OPENBSD_6_1 > patch apache httpd CVE-2017-9798, backported from upstream's branches/2.4.x > This is a use after free error that causes a corrupted Allow header to > be constructed in response to HTTP OPTIONS requests. It can leak pieces > of arbitrary memory from the server process that may contain secrets. > The memory pieces change after multiple requests, so for a vulnerable > host an arbitrary number of memory chunks can be leaked. > The bug appears if a webmaster tries to use the "Limit" directive with > an invalid HTTP method. (sthen@) buku ~ Makefile ~ distinfo > Update to buku 3.4 (feinerer@) chromium ~ Makefile ~ distinfo > update to 61.0.3163.100 (robert@) epiphany ~ Makefile > sync GNOMEish WANTLIBs (sthen@) liferea ~ Makefile ~ distinfo ~ pkg/PLIST > update to liferea-1.12rc3, from trondd at kagu-tsuchi,com with tweaks from > me (sthen@) newsbeuter ~ Makefile + patches/patch-src_controller_cpp + patches/patch-src_pb_controller_cpp > add two upstream patches to sanitize input in the bookmark command > and podbeuter feature. > ok abieber (tj@) + patches/patch-src_controller_cpp + patches/patch-src_pb_controller_cpp TAGGED OPENBSD_6_1 > add two upstream patches to sanitize input in the bookmark command > and podbeuter feature. > ok abieber (tj@) ~ Makefile TAGGED OPENBSD_6_1 > bump REVISION, missed in previous. (tj@) nghttp2 ~ Makefile ~ distinfo > update to nghttp2-1.26.0 (sthen@) p5-CSS-Minifier-XS ~ Makefile > WANTLIB += c perl (sthen@) p5-JavaScript-Minifier-XS ~ Makefile > WANTLIB += c perl (sthen@) p5-libapreq2 ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) sope ~ Makefile > use COMPILER_LIBCXX; actually this just needs c++abi (for objc) on a clang > system, but this is the most straightforward to do it (sthen@) squid ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) ttyd + Makefile + distinfo + pkg/PLIST + pkg/DESCR > New import: > ttyd is a simple command-line tool for sharing terminal over the web, ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) varnish ~ Makefile ~ distinfo ~ pkg/PLIST > Update for Varnish to 5.2.0 > https://varnish-cache.org/docs/5.2/whats-new/changes-5.2.html > OK rsadowski@ (gonzalo@) == x11 =============================================================== 23/23 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/x11 gnome ~ settings-daemon/Makefile ~ empathy/Makefile ~ control-center/Makefile ~ shell/Makefile > Sync WANTLIB after recent pulseaudio update. (ajacoutot@) ~ bijiben/Makefile ~ devhelp/Makefile ~ gjs/Makefile ~ builder/Makefile ~ calendar/Makefile ~ contacts/Makefile ~ documents/Makefile ~ initial-setup/Makefile ~ online-accounts/Makefile ~ power-manager/Makefile ~ todo/Makefile ~ libgepub/Makefile ~ seahorse-nautilus/Makefile ~ sushi/Makefile ~ yelp/Makefile > sync GNOMEish WANTLIBs (sthen@) gtk+2 ~ Makefile > WANTLIB+=unistring for -cups (sthen@) gtk2-murrine-engine ~ Makefile > Drop gettext MODULE, sync WANTLIB (dcoppa@) kde ~ base3/Makefile > libidn2 was only for kdebase3,-samba (via gnutls) - kdebase3,-main should > still be libidn. (sthen@) lumina ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) mate ~ libmatemixer/Makefile > Sync WANTLIB after recent pulseaudio update. (ajacoutot@) ~ atril/Makefile > sync GNOMEish WANTLIBs (sthen@) mlterm - patches/patch-uitoolkit_fb_ui_font_c ~ Makefile ~ distinfo > Update to mlterm-3.8.3 (dcoppa@) p5-Gtk2-GladeXML ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Gtk2-ImageView ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) p5-Tk ~ Makefile > add c to WANTLIB for perl XS modules (sthen@) rxvt-unicode ~ Makefile > add missing c++ wantlib (sthen@) spice-gtk ~ Makefile > Sync WANTLIB after recent pulseaudio update. (ajacoutot@) virt-viewer ~ Makefile > Sync WANTLIB after recent pulseaudio update. (ajacoutot@) x2goclient ~ Makefile ~ distinfo > update X2Go Client to 4.1.0.1 (rsadowski@) xfce4 ~ xfce4-pulseaudio/Makefile > Sync WANTLIB after recent pulseaudio update. (ajacoutot@) ~ xfce4-mailwatch/Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) xwallpaper ~ Makefile > sync WANTLIB and bump, gc a few gettext MODULES while there (sthen@) =============================================================================== _______________________________________________ owc mailing list [email protected] http://www.squish.net/mailman/listinfo/owc
