ABI backwards compatible. It is unnecessary to have more than one same
libraries (ie: neon28 and neon29) as it creates issue in our ports tree such
as CONFLICTS and made our Makefile complicate.
- Remove www/neonpp and www/neon28.
- Add USE_GNOME=ltverhack; it corrects the shared library version by change
from libneon.so.29 to libneon.so.27. It won't get bump again with no reason
unless ABI changes.
- Bump the PORTREVISION on all ports and chase the shared library change.
- Add info in the UPDATING for how to rebuild on all ports that depend on
neon.
PR: ports/148295
Approved by: lev (maintainer timeout, no respone for months),
portmgr
Tested by: pointyhat-exp by pav
from the author follows.
Bug 1: Infinite loop in MS-ZIP decoder [1]
The MS-ZIP and Quantum decoders read bits in roughly the same way as the LZX
decoder, however they don't have "inject two fake bytes" code.
In the situation where read() provides zero bytes, e.g. at the end of file or
end of a CAB block, the LZX decoder handles this by injecting two fake bytes,
then returns an error on subsequent calls. MS-ZIP and Quantum instead return
zero bytes without error. However, all three decoders are written to presume
they will get at least one byte. So this could lead to an infinite loop in
MS-ZIP and Quantum. An infinite loop has definitely been seen in MS-ZIP -
there is a while loop in inflate() of an uncompressed block (block type 0)
which won't end until enough input is provided.
Partial solution: change "if (read < 0)" to "if (read <= 0)" in mszipd.c and
qtmd.c.
- http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=90
However, this breaks compatibility with a number of MS-ZIP/Quantum encoded
files. A full solution would be to implement the same bit-reading system as
LZX. I've done this now, merging all the bit-reading and huffman-reading
code into two new files; readbits.h and readhuff.h
- http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=95
There are several further changes made to integrate readbits.h and readhuff.h,
I recommend you look at the latest version in the source repository.
- http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/
Bug 2: Segmentation fault in "cabextract -t"
This bug may not affect you, depending on your implementation of
mspack_system->write(). It does cause a segfault in cabextract's
cabx_write() in "-t" (test archive) mode.
In the Quantum decoder, when the window wrap is reached, all currently
unwritten data is flushed to disk. Sometimes, less data is needed than
is flushed, which makes the variable out_bytes negative.
When the main decoding loop finishes, a final call to write() is made if
out_bytes is not zero. In that situation, it calls mspack_system->write() with
a negative byte count, e.g. -129 bytes. You should reject this. In
cabextract's "-t" mode, this is not caught, but instead converted to an
unsigned integer and passed to md5_process_bytes(), which tries to
read e.g. 4294967167 bytes, causing it to read beyond the end of
valid process space and thus segfault.
Solution:
- Break out to the end of the decoding loop immediately if the flush would be more than needed.
http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/qtmd.c?r1=114&r2=113
- Add checking of the "bytes" argument in mspack_system read() / write() implementations, just to be sure.
http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=118
Security: SA40719 [1]
perl script.
Benefits:
- perl is no longer required as a dependency
- other contents than data.tar.gz (data.tar, data.tar.bz2, data.tar.lzma,
data.tar.xz) is now properly dealt with
- deb package isn't sucked into memory anymore
Submitted by: Alex Kozlov <spam@rm-rf.kiev.ua>
compressor based on the LZMA algorithm, with very safe integrity
checking and a user interface similar to the one of gzip or bzip2.
Plzip uses the lzip file format; the files produced by plzip are
fully compatible with lzip-1.4 or newer.
WWW: http://www.nongnu.org/lzip/plzip.html
Albert Vernon <f3cun3c02@sneakemail.com>
PR: ports/146884
Submitted by: Albert Vernon <f3cun3c02 at sneakemail.com>
and decompression functions, including integrity checking of the
uncompressed data. The compressed data format used by the library
is the lzip format.
WWW: http://www.nongnu.org/lzip/lzlib.html
Albert Vernon <f3cun3c02@sneakemail.com>
PR: ports/146882
Submitted by: Albert Vernon <f3cun3c02 at sneakemail.com>
- remove USE_AUTOTOOLS
As we want to use xz for extraction of port's distfiles,
it cannot depend on autoconf.
PR: ports/147280
Approved by: maintainer (private e-mail)
ports which makes possible the direct translation of Cabal package
descriptions to FreeBSD ports. It promises both easier addition and
maintenance for Cabal-based ports.
release can be found at http://library.gnome.org/misc/release-notes/2.30/ .
This release brings initial PackageKit support, Upower (replaces power
management part of hal), cuse4bsd integration with HAL and cheese, and a
faster Evolution.
Sadly GNOME 2.30.x will be the last release with FreeBSD 6.X support. This
will also be the last of the 2.x releases. The next release will be the
highly-anticipated GNOME 3.0 which will bring with it a new UI experience.
Currently, there are a few bugs with GNOME 2.30 that may be of note for our
users. Be sure to consult the UPGRADING note or the 2.30 upgrade FAQ at
http://www.freebsd.org/gnome/docs/faq230.html for specific upgrading
instructions, and the up-to-date list of known issues.
This release features commits by avl, ahze, bland, marcus, mezz, and myself.
The FreeBSD GNOME Team would like to thank Anders F Bjorklund for doing the
initual packagekit porting.
And the following contributors & testers for there help with this release:
Eric L. Chen
Vladimir Grebenschikov
Sergio de Almeida Lenzi
DomiX
walder
crsd
Kevin Oberman
Michal Varga
Pavel Plesov
Bapt
kevin
and ITetcu for two exp-run
PR: ports/143852
ports/145347
ports/144980
ports/145830
ports/145511
* a bugfix that closes a memory leak triggered by corrupted PAR2 files.
That fix is included in some linux vendors' libpar2 packages, and is
well-tested.
* The other adds additional functionality: a method to cancel a file
repair in progress. This patch can be disabled through a config option.
It is enabled by default because the only application in the ports tree
that links against libpar2 is news/nzbget. Nzbget makes use of this
functionality if it is available.
PR: 146125
Submitted by: Jeff Burchell <toxic@doobie.com> (maintainer)
* Fix the build framework so it can successfully #define a wrapper for
stat() on those systems where namei() behaves strangely--independent
of architecture.
Version: lbzip2-0.23
Focus: Minor feature enhancements
Date: 03-Mar-2010
Changes: In this release, if lbzip2 intends to exit with status 1 due to any
fatal error, but any SIGPIPE or SIGXFSZ with inherited SIG_DFL action
was generated for lbzip2 previously, then lbzip2 terminates by way of
one of said signals, after cleaning up any interrupted output file.
This should improve compatibility with GNU tar, when it spawns lbzip2
as a filter, and closes the pipe between them early, before it
receives an EOF from lbzip2.
in the beecrypt upstream distribution
- Bumped PORTREVISION
PR: ports/144246
Submitted by: glarkin
Approved by: Anders F Bjorklund <afb@rpm5.org> (maintainer)
Feature safe: yes
Version: lbzip2-0.22
Focus: Minor bugfixes
Date: 18-Feb-2010
Changes: Building lbzip2 on Debian unstable discovered that the "lfs.sh" build
script, due to a typo, did not invoke the "getconf" utility in a
SUSv2-conformant way. This bug has been corrected.
Version: lbzip2-0.21
Focus: Minor bugfixes
Date: 17-Feb-2010
Changes: Code examination revealed that lbzip2-0.18 introduced a race between
the following two code paths: (1) the muxer thread displays an error
message when it encounters a write error, (2) the main thread, in
preparation to terminate the process, frees the output file name after
an INT or TERM signal is delivered to it. This bug had negligible
chance to occur, but it was fixed nonetheless.
Feature safe: yes
- Allow installation on 64-bit systems even if 32-bit libraries are not
present (binary is statically linked) but we have kernel support for
32-bit compatibility
PR: ports/143176 [1]
Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net> [1]
e-mail addresses from the pkg-descr file that could reasonably
be mistaken for maintainer contact information in order to avoid
confusion on the part of users looking for support. As a pleasant
side effect this also avoids confusion and/or frustration for people
who are no longer maintaining those ports.
Version: lbzip2-0.19
Focus: Minor bugfixes
Date: 01-Dec-2009
Changes: This release works around a GNU/kFreeBSD standards-compliance problem.
GNU/kFreeBSD does not define some STREAMS-related errno macros
mandated by SUSv2. Consequently, lbzip2-0.18 cannot be built on
GNU/kFreeBSD. This version checks if those (and some other) macros are
defined before relying them.
Version: lbzip2-0.18
Focus: Major feature enhancements
Date: 29-Nov-2009
Changes: After adding sanity checks to both decompressors, the following
features were implemented: removal of input FILE operands; options
--keep and --force; copying of owner, group, permission bits, access
time, modification time to regular output files. Logging was cleaned
up and internally categorized into INFO, WARNING and FATAL levels; a
separate exit status was introduced for the case when a warning
message was printed. The decompressor robustness tests were
re-executed. The author has finally replaced bzip2 with lbzip2 on his
system.
release can be found at http://library.gnome.org/misc/release-notes/2.28/ .
Officially, this is mostly a polishing release in preparation for GNOME 3.0
due in about a year.
On the FreeBSD front, though, a lot went into this release. Major thanks
goes to kwm and avl who did a lot of the porting work for this release.
In particular, kwm brought in Evolution MAPI support for better Microsoft
Exchange integration. Avl made sure that the new gobject introspection
repository ports were nicely compartmentalized so that large dependencies
aren't brought in wholesale.
But, every GNOME team member (ahze, avl, bland, kwm, mezz, and myself)
contributed to this release.
Other major improvements include an updated HAL with better volume
probing code, ufsid integration, and support for volume names containing
spaces (big thanks to J.R. Oldroyd); a new WebKit; updated AbiWord;
an updated Gimp; and a preview of the new GNOME Shell project (thanks to
Pawel Worach).
The FreeBSD GNOME Team would like to that the following additional
contributors to this release whose patches and testing really helped
make it a success:
Andrius Morkunas
Dominique Goncalves
Eric L. Chen
J.R. Oldroyd
Joseph S. Atkinson
Li
Pawel Worach
Romain Tartière
Thomas Vogt
Yasuda Keisuke
Rui Paulo
Martin Wilke
(and an extra shout out to miwi and pav for pointyhat runs)
We would like to send this release out to Alexander Loginov (avl) in
hopes that he feels better soon.
PR: 136676
136967
138872 (obsolete with new epiphany-webkit)
139160
134737
139941
140097
140838
140929
MASTER_SITE_BACKUP with ${MASTER_SITES:S/%SUBDIR%/${MASTER_SITE_SUBDIR}/}
at the end and MASTER_SITE_OVERRIDE ?= ${MASTER_SITE_BACKUP} are used
together in /etc/make.conf.
So, use simple workaround: replace ( and ) by their URL-encoded %-codes.
(There is the bug in that area still remains, but not fatal:
the combination above don't understand properly ending :tags sometimes
and tries mass fetching with ending :tags unstripped.
Someone should look at that whole bsd.ports.mk/bsd.sites.mk mess)
While I am here, slightly rearrange ending :tags.
This is the last beta release before XZ Utils 5.0.0. No big changes
are planned before the first stable release.
XZ Utils is the official successor to LZMA Utils.
Feature safe: yes
- Merge all SF mirrors to MASTER_SITE_SOURCEFORGE, resort according to quick download speed survey
- Fix MASTER_SITES for all port that have used SOURCEFORGE_EXTENTED
Approved by: portmgr (pav)
a bugfix, translation and maintenance update. Release note can be found
at http://kde.org/announcements/announce-4.3.1.php
We would like to thank all our contributors and testers. My personal
thanks to miwi and makc for coaching me through my first KDE commit.
PackdDir creates and unpacks PackdDir archives,
which are used in Quake (I and II) and others.
WWW: http://www.nongnu.org/packddir/
PR: ports/138078
Submitted by: Ayumi M <ayu at commun.jp>
