Commit graph

313008 commits

Author SHA1 Message Date
rillig
8f5b373f2f mk/check/check-portability: check plain Makefiles as well
Like Makefile.in, these files contain shell commands but don't start with
a #! line.

Suggested by gdt via private mail.
2020-03-12 19:09:41 +00:00
rillig
0418380975 mk/check/check-portability: don't check Makefile.am
These files typically come with a corresponding Makefile.in file, and the
same portability issue is in the .in file as well. For building the
package it is only necessary to patch the .in file. Patching the .am file
as well would mean additional work for the pkgsrc package maintainer.

Nevertheless, such fixes should be reported upstream. The upstream
maintainer is more interested in a patch for Makefile.am, since the .in
file is only generated.

Suggested by wiz via private mail.
2020-03-12 18:54:59 +00:00
wiz
981e86e950 ORBit: remove
Long replaced by ORBit2
2020-03-12 18:52:57 +00:00
rillig
a05002b399 mk/check/check-portability: support file names with spaces
Before, file names that start or end with spaces were trimmed by read(1),
as specified by POSIX 2004 and POSIX 2018.

https://pubs.opengroup.org/onlinepubs/9699919799/utilities/read.html

This edge case bug had been present since the very beginning of this
code, in November 2006.

Filenames containing backslashes or newlines are still not supported, and
probably never will be intentionally supported.
2020-03-12 18:40:06 +00:00
wiz
e9dc3f0eed doc: Updated www/w3m-img to 0.5.3.0.20190105 2020-03-12 18:23:14 +00:00
wiz
965fa092d5 doc: Updated www/w3m to 0.5.3.0.20190105 2020-03-12 18:23:05 +00:00
wiz
f25c9174a4 w3m: update to 0.5.3.20190105
Debian's w3m 0.5.3+git20190105

* bug fixes
 - do not use deprecated features with OpenSSL 1.1
 - fix dependency for Imlib2
 - fix that the mark_all_pages option works
 - respect the simple_preserve_space option for table cells
 - fix error handling for ~/.w3m/request.log and localcgi_post()
* new feature
 - w3mman supports specifying a section number during a keyword search
2020-03-12 18:22:54 +00:00
wiz
9a8a7e8d91 libssh2: add upstream bug report 2020-03-12 17:46:22 +00:00
wiz
4e0eb9c3f6 icecast: skip configure.in in portability check
Already patched in configure.
2020-03-12 17:42:10 +00:00
wiz
435eee5c4c fig2dev: fix unportable test(1) operator. 2020-03-12 17:40:44 +00:00
wiz
dcca4f744b libexttextcat: fix unportable test(1) operator 2020-03-12 17:39:28 +00:00
wiz
725e99bc9b ragel: fix unportable test(1) operator in test run script
The script uses bash as interpreter, and pkgsrc doesn't run them
yet, so we could skip instead...
2020-03-12 17:36:35 +00:00
wiz
314c35d92d hal-info: skip portability check in configure.in
Already patched in configure.
2020-03-12 17:34:33 +00:00
tnn
1a526553f9 zstd: CHECK_PORTABILITY_SKIP in test suite 2020-03-12 17:34:26 +00:00
wiz
aafdd3fde9 mysql57*: skip portability check for a Debian packaging file 2020-03-12 17:31:17 +00:00
wiz
f78c83d35b libssh2: fix unportable test(1) operator in Makefile.in
Skip check for Makefile.am.
2020-03-12 17:28:10 +00:00
wiz
45c32bbe91 ORBit2: check portability skip for configure.in
pkgsrc already patches configure
2020-03-12 17:26:21 +00:00
wiz
d5e62c1414 doc: Updated misc/xdg-utils to 1.1.3nb2 2020-03-12 17:23:20 +00:00
wiz
7ab5b3a8c8 xdg-utils: update to 1.1.3nb2.
Fix unportable test(1) operator in installed script.
2020-03-12 17:23:12 +00:00
wiz
e585951470 gstreamer1: fix unportable test(1) operator 2020-03-12 17:21:20 +00:00
gdt
07e6158dc6 textprox/py-sphinxcontrib*: Drop EXTRACT_USING=bsdtar
This is no longer necessary as NetBSD uses bsdtar by default.
(As discussed on tech-pkg.)
2020-03-12 17:20:43 +00:00
wiz
d7e01870eb shared-mime-info: ignore portability issue in Makefile.am
Already patched in Makefile.in
2020-03-12 17:19:53 +00:00
wiz
2411b2c187 luatex: fix unportable test(1) operator 2020-03-12 17:18:30 +00:00
gdt
8088666ab9 mk/platform/NetBSD.mk: Default to bsdtar
Native tar on NetBSD <=8 (and later, if MKBSDTAR is no) does not
handle archive formats increasingly being seen in pkgsrc.  bsdtar
("libarchive tar") does, and is natively provided on NetBSD >=9.

pkgsrc already has a mechanism to use /bin/tar as the bsdtar tool when
it is bsdtar, so this change should not cause anything different on
NetBSD >= 9.   On <=8, it will depend on archivers/bsdtar, which can
be built without using an extract tool, and which will then be broadly
usable.

As broadly discussed over multiple days on tech-pkg.
2020-03-12 17:01:39 +00:00
gdt
e06c5526b7 mk: Disable default assignment of EXTRACT_USING
This is unnecessary, becuse extract/extract.mk has the same default
assignment.  It is harmful, because it prevents setting a value in
platform/Foo.mk.

Change the comment to say this is platform specific (which will be
true soon).
2020-03-12 16:57:23 +00:00
gdt
b9c8f5d661 extract.mk: Fix comment about nbtar
Maybe long ago nbtar was pkgsrc's pax-as-tar, but now this is just
${TOOL_PLATFORM.tar} which might be anything.
2020-03-12 16:55:31 +00:00
adam
8d4d6b7b91 Updated textproc/py-ujson, security/py-asyncssh 2020-03-12 16:43:36 +00:00
gdt
359b11e48e databases/mongodb3: Update patch comment
Change text about the fdatasync issue based on information from Paul
Ripke.
2020-03-12 16:36:53 +00:00
adam
5647e02927 py-asyncssh: updated to 2.2.0
Release 2.2.0

Added support for U2F/FIDO2 security keys, with the following capabilities:
ECDSA (NISTP256) and Ed25519 key algorithms
Key generation, including control over the application and user the key is associated with and whether touch is required when using the key
Certificate generation, both as a key being signed and a CA key
Resident keys, allowing security keys to be used on multiple machines without any information being stored outside of the key
Access to and management of keys loaded in an OpenSSH ssh-agent
Support for both user and host keys and certificates
Support for “no-touch-required” option in authorized_keys files
Support for “no-touch-required” option in OpenSSH certificates
Compatibility with security key support added in OpenSSH version 8.2
Added login timeout client option and limits on the length and number of banner lines AsyncSSH will accept prior to the SSH version header.
Improved load_keypairs() to read public key files, confirming that they are consistent with their associated private key when they are present.
Fixed issues in the SCP server related to handling filenames with spaces.
Fixed an issue with resuming reading after readuntil() returns an incomplete read.
Fixed a potential issue related to asyncio not reporting sockname/peername when a connection is closed immediately after it is opened.
Made SSHConnection a subclass of asyncio.Protocol to please type checkers.
2020-03-12 16:36:31 +00:00
nia
af761db78c doc: Removed security/gnome-keyring-sharp 2020-03-12 16:35:10 +00:00
nia
f1af7ca5d5 gnome-keyring-sharp: Remove - archived upstream, no users in pkgsrc 2020-03-12 16:34:05 +00:00
adam
bc6c120ae0 py-ujson: updated to 2.0.1
2.0.1

Fixed
Fix Windows build and test Python 3.5-3.8 on Windows


2.0.0

Added
Include license file in manifest
added "static" to C functions, where possible
bring back benchmark introduction
Add syntax highlighting to README
Test on new Travis CPUs
Test on GitHub Actions
Test on Python 3.9-dev to avoid surprises
Use Release Drafter to draft releases
Deploy from GitHub Actions instead of Travis CI
Autodeploy to PyPI from Travis CI
Lint with pre-commit: Black, isort, Flake8

Changed
Use Google's double-conversion lib to fix floating-point precision when converting doubles to and from strings, improves double encoding by 4-5x
Reduce default buffer on stack size
Update ultrajsondec.c
Indent dict values
Test with pytest
Less Travis
Update links
Tests: Remove unused, unmaintained blist
Only deploy sdist from Travis CI

Removed
Drop EOL Python 2.5-2.6, 3.2-3.4 and add 3.7-3.8
Remove serialization of date/datetime objects
Remove double_precision encoding option and precise_float decoding option
Remove generic serialization of objects/iterables
Remove support for __json__ method on str
Remove blist tests

Fixed
Fix for sort_keys bug and a typo
Fix for overflowing long causing invalid JSON
Following std JSON handling of None dict key
Fix for incorrect order when using OrderedDict
Fix reference counting bug for dict values
Fix a couple of memory leaks.
Correct JSON decoding implementation to die on trailing commas in Objects
fixup dconv_wrapper linkage
Fix Warning: 'classifiers' should be a list, got type 'filter'
Remove redundant license parameter
do not forcefully remove the build directory manually
Merged pull request to fix memory leak.
http -> https
2020-03-12 16:32:31 +00:00
adam
5d474d29ff Updated devel/libuv, www/py-asgiref, www/py-django3, www/py-django2, www/py-django, www/py-google-api-python-client 2020-03-12 16:24:00 +00:00
adam
b78190e3e9 py-google-api-python-client: updated to 1.17.12
Version 1.7.12

Bugfix release

Implementation Changes
- Look for field 'detail' in error message.
- Exclude 308s from httplib2 redirect codes list

Documentation
- Remove oauth2client from docs
- Fix typo.
- Remove compatibility badges.
- Fix TypeError: search_analytics_api_sample.py
- Correct response access
- Fix link to API explorer
- Fix argument typo in oauth2 code example
- Recommend install with virtualenv
- Fix capitalization in docs/README.md
- Remove compatibility badges
- Remove mentions of pycrypto
- Fix typo in model.py
- Add note about Google Ads llibrary

Internal / Testing Changes
- Blacken
- Move kokoro configs
2020-03-12 16:23:31 +00:00
adam
d848da298b py-django: updated to 1.11.29
Django 1.11.29 fixes a security issue in 1.11.28.

CVE-2020-9402: Potential SQL injection via tolerance parameter in GIS functions and aggregates on Oracle

GIS functions and aggregates on Oracle were subject to SQL injection, using a suitably crafted tolerance.
2020-03-12 16:22:38 +00:00
adam
63e107cb2b py-django2: updated to 2.2.11
Django 2.2.11 fixes a security issue and a data loss bug in 2.2.10.

CVE-2020-9402: Potential SQL injection via tolerance parameter in GIS functions and aggregates on Oracle

GIS functions and aggregates on Oracle were subject to SQL injection, using a suitably crafted tolerance.

Bugfixes

Fixed a data loss possibility in the select_for_update(). When using related fields or parent link fields with Multi-table inheritance in the of argument, the corresponding models were not locked
2020-03-12 16:21:02 +00:00
adam
db9691f470 py-django3: updated to 3.0.4
Django 3.0.4 fixes a security issue and several bugs in 3.0.3.

CVE-2020-9402: Potential SQL injection via tolerance parameter in GIS functions and aggregates on Oracle

GIS functions and aggregates on Oracle were subject to SQL injection, using a suitably crafted tolerance.

Bugfixes

Fixed a data loss possibility when using caching from async code.
Fixed a regression in Django 3.0 that caused a file response using a temporary file to be closed incorrectly.
Fixed a data loss possibility in the select_for_update(). When using related fields or parent link fields with Multi-table inheritance in the of argument, the corresponding models were not locked.
Fixed a regression in Django 3.0 that caused misplacing parameters in logged SQL queries on Oracle.
Fixed a regression in Django 3.0.3 that caused misplacing parameters of SQL queries when subtracting DateField or DateTimeField expressions on MySQL.
Fixed a regression in Django 3.0 that didn’t include subqueries spanning multivalued relations in the GROUP BY clause
2020-03-12 16:18:54 +00:00
adam
86a4d4cf50 py-asgiref: updated to 3.2.5
3.2.5
* __self__ is now preserved on methods by async_to_sync

3.2.4
* Pending tasks/async generators are now cancelled when async_to_sync exits
* Contextvars now propagate changes both ways through sync_to_async
* sync_to_async now preserves attributes on functions it wraps
2020-03-12 16:15:09 +00:00
nia
4c86ab4904 doc: Removed audio/py-musicbrainz 2020-03-12 16:12:57 +00:00
adam
d451861fd4 libuv: updated to 1.35.0
v1.35.0
* src: android build fix
* build: make code compilable for iOS on Xcode
* ibmi: skip unsupported fs test cases
* ibmi: ensure that pipe backlog is not zero
* test,udp6: fix udp_ipv6 test flakiness
* test: fix fs_event_watch_dir_recursive flakiness
* pipe: disallow listening on an IPC pipe
* build,cmake: improve buil experience
* unix: remove support for FreeBSD < 10
* linux: simplify uv__accept()
* linux: assume presence of SOCK_CLOEXEC flag
* linux: simplify uv__dup2_cloexec()
* freebsd,linux: simplify uv__make_socketpair()
* unix: fix error handling in uv__make_socketpair()
* freebsd,linux: simplify uv__make_pipe()
* unix: fix error handling in uv__make_pipe()
* linux: simplify uv__async_eventfd()
* linux: assume the presence of inotify system calls
* doc: strip ICC profile from 2 jpg files
* unix: make uv_tcp_keepalive predictable
* docs: uv_setup_args() may take ownership of argv
* unix: fix error path in uv_setup_args()
* unix: fix size check in uv_get_process_title()
* doc: add erw7 to maintainers
* test: fixed udp4_echo_server implementation
* test: added udp ping benchmark
* freebsd,linux: add recvmmsg() + sendmmsg() udp implementation
* win,pipe: DRY/simplify some code paths
* win: address some style nits
* win,pipe: ensure `req->event_handle` is defined
* win,pipe: consolidate overlapped initialization
* win,pipe: erase event_handle after deleting pointer
* build: fix android cmake build, build missing file
* test: skip some UDP tests on IBMi
* test: skip some spawn test cases on IBMi
* src: fix wrong method name in comment
* test: add UV_TIMEOUT_MULTIPLIER environment var
* unix: fix uv_cpu_info always returning UV_ENOTDIR on OpenBSD
* test: skip the pwd_shell test on IBMi
* win,tty: Change to restore cursor shape with uv_tty_reset()
* win,tty: Added set cursor style to CSI sequences
* test: handle EINTR, fix EOF check in poll test
* unix: use socklen_t instead of size_t
* doc: fix header file location
* unix: fix signal handle closing deferral
* ibmi: set the amount of memory in use to zero
* zos: return on realloc failure in scandir()
* zos: fix scandir() error path NULL pointer deref
2020-03-12 16:12:47 +00:00
nia
281c47271a py-musicbrainz: Removed - deprecated since 2011, no users in pkgsrc 2020-03-12 16:12:28 +00:00
adam
319be9b01c py-paho-mqtt: general cleanup 2020-03-12 16:10:14 +00:00
adam
ce58b41f1e py-zipp1: let it build for Python 3.x 2020-03-12 15:20:36 +00:00
fox
99b77f0923 doc: Updated sysutils/py-Glances to 3.1.4 2020-03-12 15:06:48 +00:00
tnn
5f23d6280c smartmontools: CHECK_PORTABILITY_SKIP for double bracket 2020-03-12 15:04:54 +00:00
fox
f5dc34edab sysutils/py-Glances: Update to 3.1.4
Changes since 3.1.3:

Version 3.1.4
=============

Enhancements and new features:

    * FS filtering can be done on device name documentation enhancement #1606
    * Feature request: Include hostname in all (e.g. kafka) exports #1594
    * Threading.isAlive was removed in Python 3.9. Use is_alive. #1585
    * log file under public/shared tmp/ folders must not have deterministic name #1575
    * Install / Systemd Debian documentation #1560
    * Display load as percentage when Irix mode is disable #1554
    * [WebUI] Add a new TCP connections status plugin new feature #1547
    * Make processes.sort_key configurable enhancement #1536
    * NVIDIA GPU temperature #1523
    * Feature request: HDD S.M.A.R.T. #1288

Bugs corrected:

    * Glances 3.1.3: when no network interface with Public address #1615
    * NameError: name 'logger' is not defined #1602
    * Disk IO stats missing after upgrade to 5.5.x kernel #1601
    * Glances don't want to run on Crostini (LXC Container, Debian 10, python 3.7.3) #1600
    * Kafka key name needs to be bytes #1593
    * Cant start glances with glances --export mqtt #1581
    * [WEBUI] AMP plugins is not displayed correctly in the Web Interface #1574
    * Unhandled AttributeError when no config files found #1569
    * Glances writing lots of Docker Error message in logs file enhancement #1561
    * GPU stats not showing on mobile web view bug needs test #1555
    * KeyError: b'Rss:' in memory_maps #1551
    * CPU usage is always 100% #1550
    * IP plugin still exporting data when disabled #1544
    * Quicklook plugin not working on Systemd #1537
2020-03-12 15:02:49 +00:00
gdt
fc80f0fbe9 security/mozilla-rootcerts-openssl: Allow in-pkgsrc unprivileged install
This was marked NOT_FOR_UNPRIVILEGED, but that is only appropriate
when the package (abusively, as a pre-existing well-discussed
compromise) writes outside of the pkgsrc prefix.

Patch by Jason Bacon, with general approval on tech-pkg.

ok dholland@
2020-03-12 13:43:35 +00:00
nia
e1ea50154e doc: Removed multimedia/gnome-media 2020-03-12 13:41:52 +00:00
nia
06d86ad763 gnome-media: Remove, unused GNOME 2 component 2020-03-12 13:40:53 +00:00
tnn
f0387970f1 revert previous since it got patched meanwhile 2020-03-12 12:59:01 +00:00