Commit graph

137 commits

Author SHA1 Message Date
Raphael Kubo da Costa
c010d72f7b Add fixes for CVE-2015-8665, CVE-2015-8683 and other vulnerabilities.
Besides fixing the two CVEs mentioned above, this change also pulls two
other commits from libtiff upstream fixing other out-of-bounds reads that do
not have corresponding CVEs and were reported directly in libtiff's bug
tracker.

PR:		205923
Approved by:	portmgr (antoine)
Obtained from:	libtiff CVS repository
Security:	b65e4914-b3bc-11e5-8255-5453ed2e2b49
Security:	bd349f7a-b3b9-11e5-8255-5453ed2e2b49
2016-01-05 15:04:58 +00:00
Antoine Brodin
83302ffe4f Update to 4.0.6
PR:		203851
2015-10-21 17:32:24 +00:00
Antoine Brodin
adcbbbb487 Update to 4.0.4 2015-06-26 18:41:49 +00:00
Antoine Brodin
6e5719ca80 Convert to USES=jpeg 2015-06-22 18:33:20 +00:00
Antoine Brodin
6bae0496e5 tools/tiffdither.c: check memory allocations to avoid writing to
NULL pointer. Also check multiplication overflow. Fixes #2501,
CVE-2014-8128. Derived from patch by Petr Gajdos.

Reported by:	naddy
Obtained from:	147b2698c8
MFH:		2015Q1
2015-03-29 17:31:49 +00:00
Antoine Brodin
684a4be48a - Update to 4.0.4beta
- Add CPE information

PR:		198862
MFH:		2015Q1
Security:	CVE-2014-8127 CVE-2014-8128 CVE-2014-8129 CVE-2014-8130 CVE-2014-9655 CVE-2015-1547
2015-03-26 23:32:19 +00:00
Dirk Meyer
670d53ad9e - remove BROKEN
- reset MAINTAINER
2014-12-10 15:10:08 +00:00
Dirk Meyer
e96ee58d94 - fatal regression
shared lib version going backwards
2014-12-10 14:45:15 +00:00
Tijl Coosemans
60945f0277 Replace USES=libtool:oldver with USES=libtool or USES=libtool:keepla in
the 32 ports that still use it.  Bump PORTREVISION on their dependent
ports except the ones that depend on these:

audio/libogg
audio/libvorbis
devel/pcre
ftp/curl
graphics/jpeg
graphics/libart_lgpl
graphics/tiff
textproc/expat2
textproc/libxslt

In these cases the same trick as in the recent gettext update is used.
The ports install a symlink with the old library version.  When enough
of their dependent ports have had regular updates the remaining ones can
get a PORTREVISION bump and the links can be removed.

Also remove the devel/pcre dependency from USE_GNOME=glib20.  It causes
over 2200 packages to depend on devel/pcre while less than 200 actually
link with it.  The glib20 package still depends on devel/pcre so this
should not make a difference for ports with USE_GNOME=glib20.  Also,
libdata/pkgconfig/glib-2.0.pc lists pcre as a private library so
USE_GNOME=glib20 should not propagate it.

PR:		195724
Exp-run by:	antoine
Approved by:	portmgr (antoine)
2014-12-08 16:48:38 +00:00
Dirk Meyer
ea50968218 - cleanup after r373197 2014-12-02 22:21:12 +00:00
Baptiste Daroussin
c1e98c9625 Make mandoc happy 2014-11-24 09:32:58 +00:00
Dirk Meyer
5df40b141c - use strip logic from bsd.port.mk
PR:		193918
Submitted by:	takefu@airport.fm
2014-11-23 08:47:41 +00:00
Baptiste Daroussin
a76a739bfe Cleanup plist 2014-10-20 17:04:20 +00:00
Dirk Meyer
51d5807ab2 - cleanup r361950 2014-07-18 19:36:21 +00:00
Adam Weinberger
3ea4f8af7b Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS. 2014-07-15 15:30:08 +00:00
Tijl Coosemans
d1fcd0bb4b Bump PORTREVISION for jbigkit library version bump.
Approved by:	portmgr (implicit)
2014-06-22 16:46:17 +00:00
Dirk Meyer
f5d9561791 - drop option X11
- remove "tiffgt" from port
PR:		190816
2014-06-10 16:10:54 +00:00
Tijl Coosemans
c68b48332a Convert to USES=libtool. 2014-05-06 15:43:21 +00:00
Niclas Zeising
39fc32e828 The FreeBSD x11@ and graphics team proudly presents
a zeising, kwm production, with help from dumbbell, bdrewery:

NEW XORG ON FREEBSD 9-STABLE AND 10-STABLE

This update switches over to use the new xorg stack by default on FreeBSD 9
and 10 stable, on osversions where vt(9) is available.
It is still possible to use the old stack by specifying WITHOUT_NEW_XORG in
/etc/make.conf .
FreeBSD 8-STABLE and released versions of FreeBSD still use
the old version.
A package repository with binary packages for new xorg will
be available soon.

This patch also contains updates of libxcb and related ports, pixman, as well
as some drivers and utilities.

Bump portrevisions for xf86-* ports, as well as virtualbox-ose-additions due
to xserver version change.

Apart from these updates, the way shared libraries are handled has been
changed for all xorg ports, as well as libxml2 and freetype, which means
ltverhack is gone and as a consequence shared libraries have been bumped.
The plan is that this change will make library bumps less likely in the
future.
All affected ports have had their portrevisions bumped as a consequence of
this.

Fix some issues where WITH_NEW_XORG weren't detected properly on CURRENT.

Update instructions, hardware support, and more notes can be found on
https://wiki.freebsd.org/Graphics

Thanks to:	all testers, bdrewery and the FreeBSD x11@ team
exp-run by:	bdrewery [1]
PR:		ports/187602 [1]
Approved by:	portmgr (bdrewery), core (jhb)
2014-04-16 18:28:47 +00:00
Dirk Meyer
954b32d73f - remove broken MANPREFIX
- update LICENSE
2014-03-04 06:52:19 +00:00
Dirk Meyer
b0cffb142c - use X11_CONFIGURE_WITH, X11_USE 2013-12-15 12:22:29 +00:00
Dirk Meyer
48ae07e1dd - use STAGEDIR 2013-11-14 17:14:33 +00:00
Dirk Meyer
1e3119b07e - fix misplaced NO_STAGE in slaveports and ifdefs 2013-09-21 11:06:03 +00:00
Baptiste Daroussin
eb08c5441c Add NO_STAGE all over the place in preparation for the staging support (cat: graphics) 2013-09-20 18:35:44 +00:00
Dirk Meyer
5fbd77e51d - make portlint happier
PR:		176919
2013-04-22 20:04:57 +00:00
Dirk Meyer
dcfd7332ce graphics/tiff
- update to 4.0.3
2012-12-09 21:30:02 +00:00
Koop Mast
5aa7246575 Switch from libglut to freeglut and retire libglut. Libglut hasn't been
developed in years and has been dropped from the MESA 8.0 distribution.
Freeglut is a rewrite of glut and is actively developed and is used by
many linux distributions instead of libglut.

Bump all ports that directly depend on libglut because of the shlib version
change.

There are some extra items in this patch.

*) Because freeglut doesn't have the same dependancies as libglut, some ports
	need extra dependencies added to USE_XORG to make them build.
*) Mark graphics/f90gl broken, f90gl depends on a header that is only shipped
	with libglut.
*) Remove option for libglut/freeglut selection in games/cake, only freeglut
	remains now.
*) While here fix a png related build issue games/vegastrike.

Thanks to miwi for running the exp-run.

Approved by:	portmgr (miwi)

Collaboration with:	zeising@
Obtained from:	xorg-dev staging area.
2012-08-04 22:52:02 +00:00
Dirk Meyer
fe8d74b25a - update to 4.0.2 2012-06-23 14:52:05 +00:00
Dirk Meyer
7ad83a4877 - Security patch
Security: http://www.debian.org/security/2012/dsa-2447
Security: CVE-2012-1173
Obtained from:	Frank Warmerdam
2012-04-13 04:09:25 +00:00
Dirk Meyer
a9c0c08c5d - update to 4.0.1 2012-04-11 21:02:50 +00:00
Dirk Meyer
3b160b226e - update to 4.0.0 release 2011-12-27 21:43:45 +00:00
Dirk Meyer
8283dd8766 - extend MASTER_SITES 2011-08-06 18:29:55 +00:00
Dirk Meyer
34ea35b4cd - fix pkg-plist
Reported by:	Alex Dupre
2011-06-13 18:18:13 +00:00
Dirk Meyer
5dc5116eb9 - drop dependency on pkg-config
- change path of libtiff-4.pc
Submitted by:	Max Brazhnikov
2011-06-13 02:35:41 +00:00
Dirk Meyer
d1c3c90043 - update to 4.0.0beta7 2011-06-11 14:38:59 +00:00
Ade Lovett
4a8684e352 Sync to new bsd.autotools.mk 2010-12-04 07:34:27 +00:00
Dirk Meyer
9cd7bb4f8b - update to tiff 4.0.0
- add LICENSE
PR:		149611
2010-08-26 16:17:20 +00:00
Dirk Meyer
e7716d8d62 - Security update to 3.9.4 to fix tiff2rgba
Security: http://www.remotesensing.org/libtiff/v3.9.4.html
Security: http://www.ocert.org/advisories/ocert-2009-012.html
Security: CVE-2009-2347
PR:		147900
2010-06-16 09:32:43 +00:00
Dirk Meyer
b4c2b5f4c9 - Security update to 3.8.3
Security: CVE-2010-1411
PR:		147811
2010-06-12 16:45:42 +00:00
Dirk Meyer
a5e56eb2c5 - mark FORBIDDEN, buffer overrun 2010-06-12 12:03:45 +00:00
Dirk Meyer
ca9c60461c - update to jpeg-8 2010-02-05 11:46:55 +00:00
Dirk Meyer
f2945f5b54 - update to 3.9.2 2009-11-06 19:57:51 +00:00
Dirk Meyer
18caa9c78f - include libjbig
PR:		139864
Submitted by:	Tijl Coosemans
2009-10-24 12:35:17 +00:00
Dirk Meyer
9dd482a0f2 Remove stale patches.
Reported by:	Andrei Lavreniyuk
PR:		138808
2009-09-14 12:50:00 +00:00
Dirk Meyer
d33794819c - update to 3.9.1 2009-09-14 10:28:33 +00:00
Jeremy Messenger
789d75c728 -Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:	marcus and kwm
Pointyhat-exp:	a few times by pav
Tested by:	pgollucci, "Romain Tartière" <romain@blogreen.org>, and
		a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:	marcus
Approved by:	portmgr
2009-08-02 19:36:34 +00:00
Dirk Meyer
3bbc108312 - update to jpeg7
Tested by:	pav on pointyhat
2009-07-18 11:11:29 +00:00
Dirk Meyer
0a78365e08 - add LICENSE: 2009-02-15 16:44:55 +00:00
Florent Thoumie
340b57f8be - Update X.org ports to 7.4+ (few ports are more recent than the katamari).
- Bump PORTREVISION for all ports depending on libglut since the shlib
version number went from 4 to 3.
- Bump PORTREVISION for all ports depending on libXaw as libXaw.so.8 isn't
installed anymore.
- Couple of ports fixes (mostly missing xorg components added to USE_XORG).
2009-01-23 16:28:36 +00:00
Dirk Meyer
84e8e3ef0f - better fix for manpages
Submitted by:	Christian Weisgerber (naddy)
2008-10-26 13:11:01 +00:00