14:37 mat 

Don't deprecate net/samba36, too many ports depend on it.

Sponsored by:	Absolight

 

14:33 mat 

Add an EXPIRATION_DATE to DEPRECATED ports without one.

Sponsored by:	Absolight

 

20:31 antoine 

Un-expire, this port and its slaves were deprecated without a plan

 

22:45 mat 

Cleanup no longer needed CHMOD usage after r424898.

PR:		213743
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

 

12:51 mat 

${RM} already has -f.

PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

 

14:16 mat 

Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight

 

11:53 tijl 

Combine print/cups-base, print/cups-client and print/cups-image into
print/cups and update it to 2.1.3.  Also remove print/cups-pstoraster,
improve print/cups-filters, print/foomatic-* and update print/hplip to
3.16.2.

Long description:

First some background.  When you hand a file to cups it sets up a chain of
filter programs that converts the file to something a printer understands.
Each filter has a cost associated with it and cups tries to find the
cheapest chain.  Costs used to be configured in such a way that files were
first converted to PostScript.  This could then be manipulated further (e.g.
putting multiple pages on one sheet) before finally being sent to a
PostScript printer or another filter like pstoraster which produces a raster
format understood by non-PostScript printer drivers.  Nowadays most filters
have been moved from cups to cups-filters and they have been configured to
use PDF as an intermediate format instead of PostScript.

Merging of cups-base, cups-client and cups-image into print/cups:
- cups-image provides a library to work with the cups raster format.  It is
  only used to implement filters and printer drivers and these only exist
  in the context of a cups server so there's no need to separate this from
  cups-base.
- cups-client provides a library that allows applications to print via cups.
  It is possible to use the library to access a remote cups server without
  running a local cups server, but such a setup is discouraged and the
  configuration file to set this up has been marked deprecated.  It is
  better to run a local cups server and let that talk to the remote cups
  server because then you have the benefits of local job queuing in case the
  remote server is down or busy.  Given this and the fact that without
  filters cups-base is now smaller than it used to be it makes sense to
  merge the ports.  The patch also adds options IPPTOOL, DOCS and NLS which
  when disabled make the new cups package smaller than the current
  cups-client package.  Merging the ports also prevents problems with
  options like ZEROCONF being configured differently in both ports.
- print/cups was a metaport that depended on cups-base and some filters.
  There isn't really a need for such a metaport so cups-base can be renamed
  to cups.  The filters can be depended on by printer drivers such as hplip
  if they need them.

Additional changes to the new print/cups:
- Clean up the patches.  They seem to have been regenerated with post-patch
  changes included.
- Add a patch to prevent intermediate conversion to PDF when a PostScript
  file is sent to a PostScript printer when cups-filters is installed.
- Fix the PAM configuration file.
- Add a patch to let the server search /usr/local/share/ppd like on Linux so
  other ports don't have to add links to it.
- Remove ulpt(4) helper scripts.  The port uses libusb with ugen(4).
- Remove support for mDNSResponder.  cups-filters only supports Avahi.
- Combine ICONS and XDG_OPEN options into an X11 option to support WITHOUT_X11.
- Optionally depend on colord for ICC profile support.
- Various smaller changes.

Changes to print/cups-filters:
- Let the cups_browsed rc.d script depend on cupsd and avahi_daemon instead
  of LOGIN.
- Development of foomatic-filters has been moved to cups-filters so let this
  port install foomatic related files and add foomatic-filters to CONFLICTS.
- Fix location of liblouis tables.
- Add patch to fix ICC support.

Changes to print/cups-pstoraster:
This port is essentially an old version of Ghostscript plus a cups filter.
It's no longer developed.  This commit removes it and changes existing
dependencies to print/cups-filters which depends on print/ghostscript* and
includes a gstoraster filter that can handle both PostScript and PDF.

Changes to print/foomatic-db*:
Remove old MASTER_SITES and dependencies and eliminate PKGNAMEPREFIX.

Changes to print/foomatic-filters:
Install beh backend with its original name again and add cups-filters to
CONFLICTS.

Changes to print/hplip:
- Stop installing hpijs/foomatic-rip support.  This is no longer supported
  upstream.
- Stop installing hpcups PPDs.  These are now automatically generated.  The
  bundled PPDs are generated for an older version of cups.
- Rename the QT option to X11 to support WITHOUT_X11.
- Simplify the patches now that ports are installed in a staging area.
- Add a patch to set SO_REUSEPORT (next to SO_REUSEADDR) on the mDNS socket
  like avahi-daemon does.  This fixes Zeroconf support for HP network
  printers.

PR:		207746
Exp-run by:	antoine
Approved by:	portmgr (antoine)

 

23:50 junovitch 

net/samba36: add patches corresponding to 16 Dec 2015 security releases

PR:		206808
Reported by:	Marcin Gryszkalis <mg@fork.pl>
Submitted by:	takefu@airport.fm (original patch)
Approved by:	ports-secteam (with hat)
Security:	CVE-2015-5252
Security:	CVE-2015-5296
Security:	CVE-2015-5299
Security:	https://vuxml.FreeBSD.org/freebsd/ef434839-a6a4-11e5-8275-000c292e4fd8.html
MFH:		2016Q1

 

20:18 feld 

net/samba36: Extend expiration date

I intended this to align with the next quarterly release.

 

20:15 feld 

net/samba36: Mark DEPRECATED

This Samba port was not yet marked deprecated. It has been EoL since 2015-03-04

 

16:22 amdmi3 

- Fix shebangs

Approved by:	portmgr blanket

 

14:20 mat 

Remove UNIQUENAME and LATEST_LINK.

UNIQUENAME was never unique, it was only used by USE_LDCONFIG and now,
we won't have conflicts there.

Use PKGBASE instead of LATEST_LINK in PKGLATESTFILE, the *only* consumer
is pkg-devel, and it works just fine without LATEST_LINK as pkg-devel
has the correct PKGNAME anyway.

Now that UNIQUENAME is gone, OPTIONSFILE is too. (it's been called
OPTIONS_FILE now.)

Reviewed by:	antoine, bapt
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3336

 

10:15 mat 

MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight

 

11:26 mat 

Remove OSVERSION checks that do not make sense any more.

For example (${OSVERSION} >= 900000 && ${OSVERSION} < 900021) is always true,
as is (${OSVERSION} > 900002 || ${OSVERSION} < 900000 && ${OSVERSION} > 800107).

Regarding patches, when an EXTRA_PATCHES is no longer needed, I remove it, when
it is always needed, I renamed it, in one case, I merged two patches.

Differential Revision:	https://reviews.freebsd.org/D2209

 

23:51 marino 

net category: Remove $PTHREAD_LIBS

openafs did not pass check-plist (pre-existing) so fixed and bumped.
Also, pkg-plist was sorted.  mediatomb and spread also fail plist-checks
but they weren't fixed.

approved by:	PTHREAD blanket

 

20:44 timur 

Update samba ports to address CVE-2015-0240

Security:	CVE-2015-0240

 

15:47 zi 

- Update to 3.6.25 to patch Remote Code Execution vulnerability

With hat:	ports-secteam@
Security:	996c219c-bbb1-11e4-88ae-d050992ecde8

 

10:33 danfe 

Minor net/samba* ports cleanups:

  - Drop leading article from COMMENT and use neutral spelling of Unix
  - Sort USES alphabetically and wrap it if necessary
  - Rename FAM_SUPPORT to standard option FAM, drop FAM_SUPPORT_DESC
  - Fix a typo in AIO_SUPPORT_DESC (Asyncronous -> Asynchronous)
  - Consistently reword PAM_SMBPASS option description
  - Kill one case of EOL whitespace and bogus uses of := operator

Approved by:	maintainer (timur; timeout since 2014.12.16)

 

22:29 timur 

Replace inclusion of libexecinfo with appropriate USES flag.

 

21:36 timur 

Add explicitly library path to the corresponding .pc files

PR:		191997

 

14:09 timur 

Add CPE support on request of the security officer.

 

18:34 tijl 

net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)

 

21:59 adamw 

samba36:
	Add DOCS and EXAMPLES OPTIONS, and put the stuff in EXAMPLESDIR behind
PORTEXAMPLES.

samba4/samba41:
	Add DOCS OPTION, given that the port already tests for PORT_OPTIONS:MDOCS

 

22:29 swills 

net/samba36: fix shebang for bin/findsmb

 

17:41 sunpoet 

- Convert to new LIB_DEPENDS format

Approved by:	portmgr (blanket)

 

05:35 bapt 

Convert GMAKE to MAKE_CMD
Please note that lots of invocation of MAKE_CMD here are wrong as they do not
properly respect MAKE_ENV and friends

With hat:	portmgr

 

18:47 timur 

Security update for Samba 3.6, 4.0 and 4.1.

PR:		190166
Security:	CVE-2014-0244
		CVE-2014-3493
		CVE-2014-0239
		CVE-2014-0178

 

11:18 timur 

Convert(?) net/samba36 to STAGEDIR

 

01:07 delphij 

Security update:

	net/samba36 -> 3.6.23
	net/samba4  -> 4.0.16
	net/samba41 -> 4.1.6

Security:	03e48bf5-a96d-11e3-a556-3c970e169bc2

 

23:40 antoine 

Convert the tree to USES=fam

Approved by:	portmgr (bapt)

 

04:18 timur 

Upgrade port to 3.6.22 to address recently announced vulnerabilities

Security:	CVE-2012-6150
		CVE-2013-4408

 

22:16 timur 

Attempt to fix broken init script. Hope, this time it's OK :)

PR:		184037

 

23:54 timur 

Update port to the 3.6.20 version, addressing CVE-2013-4475

Security:	CVE-2013-4475

 

22:10 bapt 

Add NO_STAGE all over the place in preparation for the staging support (cat:
net)

 

20:18 bsam 

. introduce ICONV_CONFIGURE_BASE variable at Mk/Uses/iconv.mk. It's value is
  "--with-libiconv=${LOCALBASE}" at systems pre OSVERSION 100043 and "" (null)
  otherwise;
. convert all ports which has CONFIGURE_ARGS=--with-libiconv=${LOCALBASE}.

Approved by:	portmgr (bapt, implicit)

 

16:47 timur 

Update port to the 3.6.18 version

 

00:32 timur 

Security update

Security:	CVE-2013-4124

 

02:41 timur 

Fixed typo in the patch that broke winbind_krb5_locator linking. Add external
dependency on tevent library.

PR:		180074, 180053

 

08:47 timur 

Upgraded port to the latest 3.6.16 revision.

 

22:03 bapt 

Finish conversion to new options framework
While here remove check for unsupported versions

 

11:59 mva 

- Convert USE_ICONV=yes to USES=iconv
- Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig while here

Reviewed by:	zeising

 

14:20 bapt 

Finish converting the whole ports tree to USES=pkgconfig

 

15:18 timur 

Bump port to the 3.6.13 version. Incorporate patch for winbind from Samba4.
Switch to OPTIONS_NG. Fix download paths.

 

15:59 timur 

Security update of the port to the 3.6.12 version

Security:	CVE-2013-0213, CVE-2013-0214

 

03:08 timur 

Update port to the 3.6.9 version

Feature safe:	yes

 

09:20 timur 

Update Samba 3.6 to the 3.6.8 revision.

Feature safe:	yes

 

00:20 delphij 

Update to 3.6.7.

PR:		ports/170446
Submitted by:	Andrey Simonenko <simon comsys ntu-kpi kiev ua>
Approved by:	timur

05:40 bapt 

new devel/pkgconf added to replace devel/pkg-config. new version of pkg-config
are no more self hosting so we are stuck with 0.25 version while pkgconf provide
the same set of features as 0.27 and a compatible frontend. A symlink to
pkg-config has been added for convenience and compatibility

This also introduces a new macro to use pkgconf in your ports:
USE_PKGCONFIG

it can take the following arguments:
 - yes (meaning build only dep)
 - build (meaning build only dep)
 - run (meaning run only dep)
 - both (meaning run and build dep)

From now USE_GNOME= pkgconfig is deprecated in favour of USE_PKGCONFIG
The old gnome macro has been modified to use pkgconf but still the sameway: run
and build dep to avoid large breakage.

While here fix some ports relying on pkg-config but not specifying it, fix some
ports broken because testing wrong .pc files, and fix ports using pkg-config
--version to determine pkg-config version instead of
pkg-config --modversion pkg-config like recommanded by pkg-config

With Hat:	portmgr
Exp-runs by:	bapt (pointhat-west), beat (pointyhat)

18:48 delphij 

Security update to address Samba incorrect permission checks vulnerability
(CVE-2012-2111):

 - Update net/samba34 to 3.4.17
 - Update net/samba35 to 3.5.15
 - Update net/samba36 to 3.6.5

Security:       0fa15e08-92ec-11e1-a94a-00215c6a37bb
Approved by:    maintainer

09:16 dougb 

The samba rc.d script uses some clever tricks to start (up to) 3 different
services using the same script. As a result it resets rcvar several times
in order to process the options for each service.

The changes I made on 2012/01/14 to facilitate the removal of set_rc_var()
from HEAD were effective in the case where the WINBIND option was off (the
case that I tested) because that causes the related portions of the rc.d
script to be removed completely on install. However, if installed from a
package, or installed using the the default OPTIONS, WINBIND is on, which
caused the last known rcvar to be winbind_enable.

Since the common case seems to be for users to use samba_enable (which
only enables smb_and nmb_ by default) the fact that rcvar=winbind_enable,
but that knob is off, caused the startup script to trip on a totally
unrelated portion of rc.subr.

So the fix is to move processing of the winbind_ stuff first, which leaves
the last known rcvar as smb_enable. Since running nmb without smb is a
very unlikely scenario, this should be safe for the common case, as well
as safe if the user enables winbind_.

Apologies all around for not catching this sooner, and thanks to the users
who reported the problem and stuck with me while I debugged it.

Bump PORTREVISION since this fix is needed for the common case, as
configured for the package.

22:33 delphij 

Security update to address root credential remote code execution issue
(CVE-2012-1182):

 - Update samba36 to 3.6.4;
 - Update samba35 to 3.5.14;
 - Update samba34 to 3.4.16;

All samba users are advised to update.

Security:       baf37cd2-8351-11e1-894e-00215c6a37bb
With hat:       secteam@

10:27 timur 

Update port to the 3.6.3 version, closing security problem.

PR:             164621
Security:       CVE-2012-0817

02:12 timur 

New version of net/samba36 port - 3.6.1.

07:46 timur 

Adjusted plist file.

22:35 timur 

Add new version of Samba - 3.6.0.

Most significant improvement is the support of SMB2 protocol.