Security: CAN-2005-3193
Security: http://www.kde.org/info/security/advisory-20051207-1.txt
Security: kpdf, the KDE pdf viewer and KOffice' pdf filter share code with
xpdf. xpdf contains multiple integer overflow vulnerabilities that
allow specially crafted pdf files, when opened, to overflow a heap
allocated buffer and execute arbitrary code.
Important changes:
==================
- Kmail and knode have been moved from kdenetwork to kdepim. This
means you will have to install kdepim if you want to continue using
kmail or knode. This is to ease integration with korganizer, in
the new 'Kontact' application.
- The arabic translations for KDE and KOffice have been moved from
misc to the arabic category.
- There is a new module called kdeaccessibility in the accessibility
category. It contains a few utilities for disabled users like a
magnification lens and a text-to-speech frontend.
- In KDM, you need to select the 'CUSTOM' session profile in order
to have your .xsession executed. This is particularly important if
you're using the aegypten tools
(http://freebsd.kde.org/howtos/aegypten-kmail.php).
- We have started making more parts of the ports optional. In kdepim,
both Kandy and KPilot can be turned off with ports-knobs. This
process will continue in the 3.2 series.
rigorous testing performed on the part of the KDE/FreeBSD Project
over the last three weeks. Thanks to everyone who helped test!
General changes:
[1] Follow KDE2 style by moving KDE core specific macros and
the like to x11/kde3/Makefile.kde.
[2] Fix a variety of comments or miscellaneous data to reflect
that this is KDE3 and not KDE2.
[3] Account for more empty directories in the PLISTs.
deskutils/kdepim3:
[4] More #include <malloc.h> -> #include <stdlib.h>.
audio/arts:
[5] Upgrade to 1.0.1.
[6] Point at MASTER_SITE_KDE not my own mirror.
audio/kdemultimedia3:
[7] Account for the removal of the <machine/soundcard.h> symlink.
Simply point all such includes at <sys/soundcard.h>.
editors/koffice-kde3:
[8] Get rid of #include <values.h> preemptively.
devel/kdesdk3:
[9] Remove cervisia from build if building on -CURRENT due to
C++-unsafe sys/wait.h. The header is believed to have been
fixed in newer -CURRENT (>= Jun 5) but we have not tested that.
devel/kdevelop:
[10] Upgrade to 2.1.1 and use KDE 3 version.
[11] Remove a number of suggested dependencies that no longer fit.
[12] Account for where the docs for Qt went since they got moved
to fit in hier(7) better.
graphics/kdegraphics3:
[13] Turn off kuickshow by default because it depends on imlib,
which in turn depends on gtk/glib. This will be revisited
when we split up the KDE ports a bit.
games/kdegames3:
[14] Fix compile error on -CURRENT where kpat/freecell-solver/md5.h
tried to define uint32_t after sys/types.h already had.
sysutils/kdeadmin3:
No particular changes.
misc/kdeaddons3:
No particular changes.
misc/kdeedu3:
[15] Re-add the huge number of missing @dirrm's.
misc/kdeutils3:
No particular changes.
misc/kde3-i18n-* and */kde3-i18n:
For the most part, no particular changes. A huge number of I18N
message updates went into this release, though.
french/kde3-i18n:
[16] Fix build Makefile error due to tarball builder's env.
net/kdenetwork3:
No particular changes.
x11-clocks/kdetoys3:
No particular changes.
x11/kdebase3:
[17] Account for mkfontdir "soft" build-time dependency. If
mkfontdir is available, use it to build fonts.dir where
kdebase installs fonts. Otherwise, don't bother.
[18] Patch ElectricEyes.desktop to use the name of the program
that FreeBSD uses when you install the port for it.
[19] Patches for KDM merged into KDE 3.0.1.
[20] Properly fix kdm/backend/xdmcp.c string format error.
x11/kdelibs3:
[21] Support the KDE3 version check to make sure no one
tries to install KDE2 then KDE3. The 'kde-version-check'
target is centralized in x11/kde3/Makefile.kde.
[22] Remove patch for kdeprint/configure.in.in.
[23] Add patch to fix critical icon loader bug.
x11/kde3:
[24] Add Makefile.kde for centralizing KDE core-specific macros
that don't belong in bsd.kde.mk.
x11-toolkits/qt30:
[25] Mark broken on any XFree86 version < 4 due to packing list
related problems if we tried to support XFree86 3.
[26] Error out if the user has Qt2 installed already.
x11-wm/kdeartwork3:
[27] Add USE_MESA to explicitly support the 3D screensavers.
[28] Re-add a large number of missing @dirrm's.
Credits:
[1] [4] [5] [6] [7]
[9] [10] [14] [16]
[21] [22] [24] [26]: will
[2] [3] [8] [15] [17]
[19] [25] [27] [28]: alane
[11] [12]
Submitted by: Lauri Watts <lauri@kde.org>
[13] Found by: mi
Removed by: will
[18] [23]
Submitted by: Andy Fawcett <andy@athame.co.uk>
Tested by: [in addition to the above, in no particular order]
knu
Mattias Douhan <matt@athame.co.uk>
Bradley T. Hughes <bhughes@trolltech.com>
Erik H. Bakke <ebakke@trolltech.com>
David Johnson <david@usermode.org>
JJ Behrens <jj@nttmcl.com>
Michael W. Collette <metrol@metrol.net>
Adriaan de Groot <adridg@sci.kun.nl>
Mark Rowlands <mark.rowlands@minmail.net>
Mark Stosberg <mark@summersault.com>
Dave Cantrell <phaedrus@alltel.net>
Mark Miller <joup@bigfoot.com>
Wesley Morgan <morganw@chemikals.org>
Arjan van Leeuwen <avl@operamail.com>
original versions of these ports, so some PORTREVISIONs were bumped. See
http://freebsd.kde.org/ and mailing lists linked to from there for info
on the packages generated to test these ports.
bsd.kde.mk has already been updated a few days ago to work with these.
Some patches applied to fix a few bugs were:
deskutils/kdepim3:
[1] Remove kpilot from build because it wasn't ready at release.
editors/koffice-kde3:
[2] Fix compile time bugs for FreeBSD.
misc/kdeedu3:
[3] Fix compile problem with kvoctrain.
x11/kdebase3:
[4] Fix KDM CPU usage and login bug.
Some caveats:
* All PLISTs are broken for deinstall due to script bug that I
didn't notice until very recently. This will be fixed when I
commit an update tomorrow. These ports should still install
perfectly fine though. They should also deinstall without
giving errors, but will leave directories behind.
* You can't install this with any other version of QT or KDE
already installed. I am not sure the checks are 100% working,
but fixes for these will be forthcoming. This is mainly due
to a policy decision made by kde@ to make QT/KDE ports install
the way the rest of the world expects it to while also still
conforming to FreeBSD's hier(7). For reference on this decision,
please consult the KDE/FreeBSD mailing list archives. This
decision fixes 2-year-old bug reports relating to how we handled
this for KDE2 vs KDE1.
Submitted by: [1] Adrian de Groot <adridg@cs.kun.nl>,
[2] David Faure <faure@kde.org>,
Andy Fawcett <andy@athame.co.uk>
Lauri Watts <lauri@kde.org>
[3] Lauri Watts <lauri@kde.org>
[4] Alan Eldridge <alane@geeksrus.net>
Oswald Buddenhagen <ossi@kde.org>
Reviewed by: kde
* All patches except sysutils/kdeadmin/files/patch-rpmMessages.c:
- Either obsoleted or merged into KDE.
* All pkg-plists:
- Huge diffs are due to mass conversion from static HTML pages
to XML/XSL versions.
* audio/kdemultimedia2:
- aRts + Noatun, etc. now work and play MP3s et al properly,
using the mpg123 aRtsplugin. Remove mpeglib[,_artsplug]
from compile.
* converters/kdesupport2:
- Obsolete. No longer used in this version of KDE.
* deskutils/kdepim:
- Use autoconf and account for brokenness in the configure
script by replacing invocations of INSTALL under libical
with the proper incantations.
- Per David O'Brien's request, move libimap to libkimap;
this was performed by Rik Hemsley <rikkus@kde.org>.
* devel/kdesdk:
- New module with some helpful tools. One in particular that
seems demanded is ``kbabel'', which, as I've been told, is
a translator's wet dream.
- Workaround dumb problem in kbabel's libgettext (which I could
not figure out how to remove) by replacing its error() with
errc(). KBabel seems to run fine with this patch.
* devel/kdevelop:
- Fix lame check for libkdeui.so.* by replacing it with just
a check for libkdeui.so. It's been/being removed from
kdevelop after 2.2.
* editors/koffice:
- Fix kivio compile errors by substituting in PTHREAD_LIBS
in the correct place. Compensate for kivio's dependency
on pthreads by changing kivio to use LD_PRELOAD=/usr/lib/libc_r.so
in kivio.desktop.
* games/kdegames2:
- Some new games.
* graphics/kdegraphics2:
- Fix link errors in libkscan and kamera where they
require gettext (ie: add -lintl).
- Fix compile error in kamera.cpp which is dependent on a
correctly done gphoto2.. of course, this will only help
people who've manually installed gphoto2 themselves.
* net/kdenetwork2:
- Mimelib was moved here (reason for removal of kdesupport2).
* misc/kdeaddons:
- New module to FreeBSD ports; some simple addons for KDE2.
Suggested by Lauri Watts <lauri@kde.org>.
* misc/kdeutils2:
- Added a couple manpages.
* x11-clocks/kdetoys2:
- Some new apps.
* sysutils/kdeadmin:
- Remove kuser from compile because it has some problems. ;\
* x11/kdelibs2:
- Add libFAM dependency to help people who run FAM; FAM
increases the overall desktop responsiveness.
Submitted by Lauri Watts <lauri@kde.org>.
- Add CUPS dependency to bring in KDE's new print system.
- Add bzip2/libxml2 dependencies to support the new help kioslave.
- Disable installation of libltdl stuff to prevent conflicts
with other stuff. Submitted by wjv.
- Add pkg-req script to avoid conflicts with kdelibs11; add
to Makefile too. Submitted by benno.
- Be sure to remove the pth header conflicts stuff from the
arts/mcop_mt section.
- Fix problem with configure trying to find -lfam in the
wrong place.
- Remove kspell and api subdirs from doc; we don't need them,
and there are problems trying to build/install them.
Submitted by Lauri Watts <lauri@kde.org>.
* x11/kdebase2:
- Solve link permissions problem by changing the modes on
files installed by kdesktop/init/Templates to 644.
Submitted by Jim Durham <durham@w2xo.pgh.pa.us>.
* x11/kde2:
- Bump version; no other changes.
Special thanks to Lauri Watts <lauri@kde.org> for helping me test
packages generated by these changes on a virgin system. I believe
that this is the best-tested update I've ever done for KDE, and it
really shines this time around.
I just noticed there are a couple other PRs in the PR db that need
to be addressed. I will take care of those by tomorrow. Sorry...
PR: 22735, 28549
Blanket approval by: demon (kdesdk, kdevelop)
