Most USES use a colon for build/run(/test) suffixes. Change kde.mk,
qt.mk and pyqt.mk to do the same, and update all ports using that.
Document in CHANGES.
PR: 266034
Exp-run by: antoine
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D36349
Thursday, 8 September 2022
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Today they all get new bugfix source releases with updated translations,
including:
* kmail: Searching for messages does work again (Commit, fixes bugs
#458202 and #458245).
* kate: Fix a crash when there are no search results (Commit)
* krdc: Access dates are displayed properly now (Commit, fixes bug
#458587)
Announcement: https://kde.org/announcements/gear/22.08.1/
Commit b7f05445c0 has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
Thursday, 18 August 2022
KDE Gear ⚙️ 22.08 has Landed!
KDE Gear ⚙️ is the collection of KDE apps, frameworks and libraries that
all release new versions at the same time. Version 22.08 brings updates
for KDE programs for working, developing your creativity and enjoying
your free time without having to submit yourself to extortionate
licenses, intrusive advertising, or surrender your privacy.
Discover the most important changes added in the last four months to
software designed to make your life better!
Full announcement:
https://kde.org/announcements/gear/22.08.0/
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Today they all get new bugfix source releases with updated translations, including:
* elisa: Fix the seek slider with newer versions of qqc2-desktop-style
* konsole: Better recognition for URIs
* korganizer: Fix a crash when completing a to-do in the summary view
Changelog: https://kde.org/announcements/changelogs/gear/22.04.3/
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Today they all get new bugfix source releases with updated translations, including:
* ark: Support ‘7zip’ as well as ‘p7zip’.
* konsole: Fix scroll position jumps regression.
* okular: Fix crash while undoing with the menu on an empty
annotation.
Distro and app store packagers should update their application packages.
Full Changelog: https://kde.org/announcements/changelogs/gear/22.04.2/
Thursday, 12 May 2022. Over 120 individual programs plus dozens of
programmer libraries and feature plugins are released simultaneously as
part of KDE Gear.
Today they all get new bugfix source releases with updated translations,
including:
* dolphin: The terminal panel will keep in sync with quick folder
changes now
* kate: Fix crash on session restore
* kalendar: Fix ’next week’ button in the week’s view
The full changelog can be found at
https://kde.org/announcements/changelogs/gear/22.04.1/
Thursday, 21 April 2022
Welcome to KDE Gear ⚙️ 22.04!
Skip to What’s New
KDE Gear ⚙️ 22.04 brings you all the updates added to a long list of KDE
apps over the last four months. KDE programs allow you to work, create
and play without having to submit yourself to extortionate licenses and
intrusive advertising, or surrender your privacy to unscrupulous
corporations.
Below you will discover a selection of the changes added in the last
four months to software designed to make your life better. But remember,
there is much, much more: games, social media apps, utilities for
communicating, developing and creating stuff… All these things have been
worked on to give you more stability and boost your productivity.
If you want to see a full list of everything we have done, check out the
complete changelog.
WARNING: There’s a lot!
All the details can be found here:
https://kde.org/announcements/gear/22.04.0/
Thursday, 3 March 2022
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Today they all get new bugfix source releases with updated translations,
including:
* kcron: Improve temporary file handling
* kio-extras: SFTP can use random access
* kontact: Fix Manager Crash when clicking New
Distro and app store packagers should update their application packages.
Changelog:
https://kde.org/announcements/changelogs/gear/21.12.3/
Release Notes:
https://community.kde.org/KDE_Gear/21.12_Release_notes
Thursday, 3 February 2022
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Today they all get new bugfix source releases with updated translations.
Full changelog:
https://kde.org/announcements/changelogs/gear/21.12.2/
Thursday, 6 January 2022
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Today they all get new bugfix source releases with updated translations.
Distro and app store packagers should update their application packages.
Changelog:
https://kde.org/announcements/changelogs/gear/21.12.1/
KDE Gear 21.12 has landed and comes with a massive number of updates and
new versions of applications and libraries. Literally, dozens of classic
KDE everyday tools and the specialised sophisticated apps you use to
work, be creative and play, are getting refreshers with design
improvements, new features and performance and stability enhancements.
What's new:
https://kde.org/announcements/gear/21.12.0/#whatsnew
Changelog:
https://kde.org/announcements/changelogs/gear/21.12.0/
Thursday, 4 November 2021
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Changelog:
https://kde.org/announcements/changelogs/gear/21.08.3/
CPE_VENDOR=kde is already set in Uses/kde.mk so adding cpe after
kde in our USES line makes sure that it's picked up properly.
Approved by: portmgr (blanket)
Thursday, 7 October 2021
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Today they all get new bugfix source releases with updated translations,
including:
* kmail: Fix an infinite SSL error dialog loop
* konqueror: Make it compatible with KIO 5.86.0 and don’t open every
URL in a new window
* libksane: Fix multi page detection with certain scanners
Full announcement:
https://kde.org/announcements/gear/21.08.2/
Thursday, 2 September 2021
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Today they all get new bugfix source releases with updated translations,
including:
* konsole: Fix KXmlGUI toolbars and Konsole MainWindow size.
* elisa: Fix the “Files” view.
* skanlite: Fix image saving when preview is not shown.
Full announcement:
https://kde.org/announcements/gear/21.08.1/
Full Changelog:
https://kde.org/announcements/changelogs/gear/21.08.1/
Thursday, 12 August 2021
KDE Gear 21.08 improves KDE apps across the board, bringing you quick
and responsive utilities, creativity programs with powerful features,
and secure tools for all your work and play needs.
If this is your first time with KDE software, discover a whole new world
of free and secure programs, packed with incredible possibilities. If
you are already a KDE regular, check out all the fresh innovations we
have added to your favorite apps.
Either way, go forth and try new things!
Full announcement:
https://kde.org/announcements/gear/21.08.0/
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Today they all get new bugfix source releases.
Full changelog:
https://kde.org/announcements/changelogs/gear/21.04.3/
Thursday, 10 June 2021
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
The full changelog can be found here:
https://kde.org/announcements/changelogs/gear/21.04.2/
May 13, 2021. Over 120 individual programs plus dozens of programmer
libraries and feature plugins are released simultaneously as part of KDE
Gear
Today they all get new bugfix source releases.
Changelogs:
https://kde.org/announcements/changelogs/releases/21.04.1/
KDE Gear 21.04
Thursday, 22 April 2021
Welcome to KDE Gear ⚙️ 21.04!
KDE produces literally dozens of apps for work, play, education, and
creativity. Kontact, for example, gives you control over all your email,
contact, and agenda; Itinerary keeps you up to date with everything you
need regarding your trips; the KAlgebra graphing calculator works
equally well on your desktop and your phone; Cantor provides you with an
intuitive way of analyzing data and graphing the results; and Kdenlive
makes cutting and building sophisticated-looking videos not only easy,
but fun as well.
These are but a few of the apps releasing new updates today. When
combined with the KDE’s powerful Plasma desktop, they provide you with
most, if not all, the tools you need to be productive in a versatile and
flexible Linux^WFreeBSD environment.
But you don’t even need to run Linux! Many of the apps in this
announcement work on Windows, macOS, and Android as well. This is what
convergent means for KDE: use your favorite apps anywhere, on any
system, on your work computer, mobile or even on your TV!
And, remember: KDE’s apps, the Plasma desktop, Plasma Mobile, Plasma
BigScreen and all the rest of KDE’s software are free and open source.
No licensing, no hidden costs, no spying. Share them with your friends,
install them at work, or use them in your school lab. It is your
software to enjoy where and how you want.
Full announcement and changelogs:
https://kde.org/announcements/gear/21.04/
20.12.3 Releases
Over 120 individual programs plus dozens of programmer libraries and feature
plugins are released simultaneously as part of KDE’s release service.
Some of our projects release on their own timescale and some get released
en-masse. The 20.12.2 bundle of projects was released today with dozens of
bugfixes and will be available through app stores and distros soon. See the
20.12.2 releases page for details.
Some of the fixes in today’s bugfix releases include:
* Ark no longer crashes when closing the window while loading a TAR archive
* Dolphin calculates the folder size on FUSE and network file systems correctly now
* Konsole no longer crashes when exiting all tabs at the same time
* Dictionaries can be added in Kiten’s config dialog
* Umbrello doesn’t crash anymore if exiting when a widget in a diagram is selected
Release Notes:
https://community.kde.org/Releases/20.12_Release_Notes
Full Changelog:
https://kde.org/announcements/fulllog_releases-20.12.2/
- astro/libkgeomap has been removed as there are no consumers left
- deskutils/kdepim-apps-libs has been reintegrated into other ports
There are a handful of new ports available:
- astro/kosmindoormap: Library and QML component for rendering multi-level OSM indoor maps
- deskutils/itinerary: KDE Itinerary is a digital travel assistant
- devel/kpublictransport: Access realtime public transport data
- graphics/kontrast: Color contrast checker
- textproc/markdownpart: KPart for rendering Markdown content
Some of our projects release on their own timescale and some get released
en-masse. The 20.08.3 bundle of projects was released today with dozens of
bugfixes and will be available through app stores and distros soon. See the
20.08.3 releases page for details.
Some of the fixes in today’s releases:
* Gwenview no longer accidentally shows the thumbnail view as a separate window with newer Qt versions
* Sending SMS with KDEConnect has been restored
* Fixed a possible Okular crash when selecting text in annotations
Announcement:
https://kde.org/announcements/releases/2020-11-apps-update/
Changelog:
https://kde.org/announcements/fulllog_releases-20.08.3/
Dozens of KDE apps are getting new releases from KDE’s release service. New
features, usability improvements, re-designs and bug fixes all contribute to
helping boost your productivity and making this new batch of applications more
efficient and pleasant to use.
KDE Project Security Advisory
=============================
Title: Ark: maliciously crafted TAR archive with symlinks can install files outside the extraction directory.
Risk Rating: Important
CVE: CVE-2020-24654
Versions: ark <= 20.08.0
Author: Elvis Angelaccio <elvis.angelaccio@kde.org>
Date: 27 August 2020
Overview
========
A maliciously crafted TAR archive containing symlink entries
would install files anywhere in the user's home directory upon extraction.
Proof of concept
================
For testing, an example of malicious archive can be found at
https://github.com/jwilk/traversal-archives/releases/download/0/dirsymlink.tar
Impact
======
Users can unwillingly install files like a modified .bashrc, or a malicious
script placed in ~/.config/autostart.
Workaround
==========
Before extracting a downloaded archive using the Ark GUI, users should inspect it
to make sure it doesn't contain symlink entries pointing outside the extraction folder.
The 'Extract' context menu from the Dolphin file manager shouldn't be used.
Solution
========
Ark 20.08.1 skips maliciously crafted symlinks when extracting TAR archives.
Alternatively, 8bf8c5ef07 can be applied to previous
releases.
Credits
=======
Thanks to Fabian Vogt for reporting this issue and for fixing it.
MFH: 2020Q3
Security: CVE-2020-24654
Dozens of KDE apps are getting new releases from KDE’s release service. New
features, usability improvements, re-designs and bug fixes all contribute to
helping boost your productivity and making this new batch of applications more
efficient and pleasant to use.
Full announcement:
https://kde.org/announcements/releases/2020-08-apps-update/
KDE Project Security Advisory
=============================
Title: Ark: maliciously crafted archive can install files outside the extraction directory.
Risk Rating: Important
CVE: CVE-2020-16116
Versions: ark <= 20.04.3
Author: Elvis Angelaccio <elvis.angelaccio@kde.org>
Date: 30 July 2020
Overview
========
A maliciously crafted archive with "../" in the file paths
would install files anywhere in the user's home directory upon extraction.
Proof of concept
================
For testing, an example of malicious archive can be found at
https://github.com/jwilk/traversal-archives/releases/download/0/relative2.zip
Impact
======
Users can unwillingly install files like a modified .bashrc, or a malicious
script placed in ~/.config/autostart
Workaround
==========
Users should not use the 'Extract' context menu from the Dolphin file manager.
Before extracting a downloaded archive using the Ark GUI, users should inspect it
to make sure it doesn't contain entries with "../" in the file path.
Solution
========
Ark 20.08.0 prevents loading of malicious archives and shows a warning message
to the users.
Alternatively,
0df592524f
can be applied to previous releases.
Credits
=======
Thanks to Dominik Penner for finding and reporting this issue and thanks to
Elvis Angelaccio and Albert Astals Cid for fixing it.
From the changelog [1]:
Some of the fixes included in this release are:
* kio-fish: Only store password in KWallet if the user asked for it.
* The Umbrello Fixes for adding multiline c++ comment support.
* The scrolling behavior in the Okular document viewer has been
improved and is more usable with free-spinning mouse wheels
* A regression that sometimes caused the JuK music player to
crash on start has been fixed
* The Kdenlive video editor has received many stability updates,
including a fix to the DVD chapter creation and a fix that
improves the handling of timecodes, improved handling of missing
clips, draw “photo” frame on image clips to differentiate from
video clips., and previews in the timeline
* KMail now correctly handles existing maildir folders when adding
a new maildir profile and no longer crashes when adding too many
recipients
* Import and export of Kontact settings has been enhanced to include
more data
[1] https://kde.org/announcements/changelog-releases.php?version=20.04.1
KDE's April 2020 Apps Update
A new bundle of KDE applications is here! In these releases, you can expect to
find more features, stability improvements, and more user-friendly tools that
will help you work more effectively.
There are dozens of changes to look forward to in most of your favorite
applications. Take Dolphin, for example. Windows Samba shares are now fully
discoverable.
On the topic of playing music: the Elisa music player is adding features by
leaps and bounds. This release brings a new “Now Playing” view, easy
accessibility through the system tray, and an option to minimize the playlist
whenever you want. Thanks to the recently-added visual shuffle mode, it’s much
easier to rearrange your music in the playlists.
These are just the highlights of what’s new in KDE’s applications this month.
Read on to find out about everything we’ve prepared for you.
Announcement:
https://kde.org/announcements/releases/2020-04-apps-update/
New versions of KDE applications landing in December
The release of new versions for KDE applications is part of KDE’s continued
effort to bring you a complete and up-to-date catalog of fully-featured,
beautiful and useful programs for your system.
Available now are new versions of KDE’s file browser Dolphin; Kdenlive, one of
the most complete open source video editors; the document viewer Okular; KDE’s
image viewer, Gwenview; and all of your other favorite KDE apps and utilities.
All of these applications have been improved, making them faster and more
stable and they boast exciting new features. The new versions of KDE
applications let you be productive and creative, while at the same time making
use of KDE software easy and fun.
We hope you enjoy all the novel features and improvements worked into all of
KDE’s apps!
Announcement: https://kde.org/announcements/releases/2019-12-apps-update/
November 07, 2019.
Today KDE released the third stability update for KDE Applications 19.08. This
release contains only bugfixes and translation updates, providing a safe and
pleasant update for everyone.
More than a dozen recorded bugfixes include improvements to Kontact, Ark,
Cantor, K3b, Kdenlive, Konsole, Okular, Spectacle, Umbrello, among others.
Improvements include:
* In the video-editor Kdenlive, compositions no longer disappear when
reopening a project with locked tracks
* Okular's annotation view now shows creation times in local time zone
instead of UTC
* Keyboard control has been improved in the Spectacle screenshot utility
You can find the full list of changes here:
https://kde.org/announcements/fulllog_applications-aether.php?version=19.08.3
