2022-02-28 lang/bf2c: No development since 2013
2022-02-28 lang/nbc: No releases since 2011, for previous generation LEGO Mindstorms
2022-02-28 textproc/gutenmark: No releases since 2011
Sunday, 13 February 2022
KDE today announces the release of KDE Frameworks 5.91.0.
KDE Frameworks are 83 addon libraries to Qt which provide a wide variety
of commonly needed functionality in mature, peer reviewed and well
tested libraries with friendly licensing terms. For an introduction see
the KDE Frameworks release announcement.
This release is part of a series of planned monthly releases making
improvements available to developers in a quick and predictable manner.
Announcement:
https://kde.org/announcements/frameworks/5/5.91.0/
PR: 261934
Exp-run by: antoine
(In preparation of the release the version number has moved from
12.0.0 to 12.0.1.)
One of the files touched by files/patch-gfortran-libgcc has been
renamed from .c to .cc, so tweak our patch accordingly. No functional
change there.
Unfortunately upstream doesn't provide a changelog but its mainly
a few build bug files and pkgconfig file is now provided by upstream
See https://github.com/svaarala/duktape/commits/v2.7.0 for more
information
Filter:
Fix#81708: UAF due to php_filter_float() failing for ints
(CVE-2021-21708)
CVE is not yet published.
Approved by: tz (private email)
Sponsored by: Bounce Experts
Core:
Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
Fixed bug #7896 (Environment vars may be mangled on Windows).
FFI:
Fixed bug #7867 (FFI::cast() from pointer to array is broken).
Filter:
Fix#81708: UAF due to php_filter_float() failing for ints.
FPM:
Fixed memory leak on invalid port.
MBString:
Fixed bug #7902 (mb_send_mail may delimit headers with LF only).
MySQLnd:
Fixed bug #7972 (MariaDB version prefix 5.5.5- is not stripped).
Sockets:
Fixed ext/sockets build on Haiku.
Fixed bug #7978 (sockets extension compilation errors).
Standard:
Fixed bug #7875 (mails are sent even if failure to log throws exception).
Approved by: tz (private email)
Sponsored by: Bounce Experts
Core:
Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
Fixed bug #7896 (Environment vars may be mangled on Windows).
Fixed bug #7883 (Segfault when INI file is not readable).
FFI:
Fixed bug #7867 (FFI::cast() from pointer to array is broken).
Filter:
Fix#81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
FPM:
Fixed memory leak on invalid port.
Fixed bug #7842 (Invalid OpenMetrics response format returned by FPM status page.
MBString:
Fixed bug #7902 (mb_send_mail may delimit headers with LF only).
MySQLnd:
Fixed bug #7972 (MariaDB version prefix 5.5.5- is not stripped).
pcntl:
Fixed pcntl_rfork build for DragonFlyBSD.
Sockets:
Fixed bug #7978 (sockets extension compilation errors).
Standard:
Fixed bug #7899 (Regression in unpack for negative int value).
Fixed bug #7875 (mails are sent even if failure to log throws exception).
Relnotes: https://www.php.net/ChangeLog-8.php#8.1.3
lang/php8[01] builds fine with libressl*. Reverting previous partial
commit. Although it takes minor tweaking on unsetting TLS_SRP on
ftp/curl.
PR: 261903
Reported by: vishwin rozhuk.im@gmail.com
Approved by: tz (private email)
Sponsored by: Bounce Experts
After the 91fdbed776 commit fixing the
issue for MySQL80 introduced another problem for the ports that depends
on php8[01]-openssl port couldn't be built as the fix prevented
php8[01]-openssl from being installed as it's already built with
default php installation. As the problem has grown much bigger now and
php80 is currently the DEFAULT php version so we are switching the
behavior of php8[01] ports making the openssl module as default.
- Remove non-default OPTION MYSQL80 from lang/php8[01]
- Remove ports security/php8[01]-openssl
- Remove OPTION OPENSSL from lang/php8[01]-extensions
- Mark lang/php8[01] to IGNORE with libressl and libressl-devel
Although php builds fine with those most of the extensions do not
as they have dependency on curl. So mark it early.
- OPTIONIZE lang/php80
- Change openssl_DEPENDS to conditional for php74 only as this module
is default from php80 with this commit. php74 do not have the issue
where it fails to connect to MySQL80 due to new caching_sha2_password
- Remove hash_DEPENDS from php.mk as it is a default module for all php
- Change json_DEPENDS to conditional for php74 only as this module is
default from php80
PR: 261797 259793 252420
Reported by: sean@rogue-research.commartin@waschbuesch.de
Approved by: tz (private email) ale (private email)
Sponsored by: Bounce Experts
This is needed for sysutils/polkit's duktape support, but also makes
it easier for other consumers to use the library.
While here, cosmetic cleanups.
PR: 254274
Reviewed by: diizzy
Tested by: vishwin
Approved by: Alfonso S. Siciliano <alfix86[at]gmail[dot]com> (maintainer),
fluffy (mentor)
Thursday, 3 February 2022
Over 120 individual programs plus dozens of programmer libraries and
feature plugins are released simultaneously as part of KDE Gear.
Today they all get new bugfix source releases with updated translations.
Full changelog:
https://kde.org/announcements/changelogs/gear/21.12.2/
The definition of CONFLICTS_INSTALL already included ${PKGNAMESUFFIX},
but in a block that was conditional on ${PKGNAMESUFFIX} not being
defined, defying the purpose.
After this change all ports that refer to the lang/php?? interpreter
ports get an automatic CONFLICTS_INSTALL definition that prevents the
installation of the same module for multiple interpreter versions.
This change adds correct CONFLICTS_INSTALL definitions to hundreds of
PHP ports that previously lacked any such definition.
PHP modules can override this generated CONFLICTS_INSTALL definition
in their Makefiles, if required.
Approved by: portmgr (implicit)
