Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
Commit | Credits | Log message |
3.7.10_2 26 Feb 2024 08:31:17 |
Baptiste Daroussin (bapt) |
security/gnutls: fix build with lld 17
Since lld17 the default is to have the LDFLAGS --no-undefined-version
activated by default, which means that versions scripts should not
contain undefined symbols
2 bugs in gnutls:
1/ the configure scripts tests an empty binary against a list of version
symbols, meaning it breaks in configure (hence the activation of
--enable-ld-version-scripts) which means currently provided gnutls
packages are build without version scripts which breaks existing
installations...
2/ the version script used to link the binary can contain undefined
symbols depending on the options used to build (hence the addition of
the LDFLAGS. |
3.7.10_1 27 Jan 2024 16:26:58 |
Muhammad Moinur Rahman (bofh) |
security/gnutls: Moved man to share/man
Approved by: portmgr (blanket) |
3.7.10 06 Oct 2023 09:52:37 |
Tijl Coosemans (tijl) |
security/gnutls: Update to 3.7.10 |
3.7.9 13 Feb 2023 13:29:47 |
Tijl Coosemans (tijl) |
security/gnutls: Update to 3.7.9
Security: https://gnutls.org/security-new.html#GNUTLS-SA-2020-07-14 |
3.7.8_1 22 Oct 2022 09:36:07 |
Daniel Engberg (diizzy) |
*/*: Bump PORTREVISION for consumers of libunistring
Reported by: jbeich |
3.7.8 02 Oct 2022 10:06:52 |
Yasuhiro Kimura (yasu) |
security/gnutls: Update to 3.7.8
ChangeLog: https://lists.gnupg.org/pipermail/gnutls-help/2022-September/004765.html
PR: 266746
Approved by: tijl (maintainer) |
07 Sep 2022 21:58:51 |
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
3.7.7 07 Sep 2022 21:10:59 |
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above ) |
3.7.7 09 Aug 2022 09:07:32 |
Yasuhiro Kimura (yasu) |
security/gnutls: Update to 3.7.7
ChangeLog: https://lists.gnupg.org/pipermail/gnutls-help/2022-July/004746.html
PR: 265726
Approved by: tijl (maintainer)
MFH: 2022Q3
Security: CVE-2022-2509 |
3.7.6 27 May 2022 16:58:57 |
Tijl Coosemans (tijl) |
security/gnutls: update to 3.7.6 |
3.7.5 17 May 2022 21:41:59 |
Tijl Coosemans (tijl) |
security/gnutls: update to 3.7.5 |
3.7.4 13 Apr 2022 12:11:59 |
Tijl Coosemans (tijl) |
security/gnutls: update to 3.7.4
Switch from security/ca_root_nss to base system certificate store.
Disable obsolete TPM 1.2 support.
PR: 257995, 260723, 263107, 263131
Exp-run by: antoine |
3.6.16 28 Nov 2021 20:21:54 |
Tijl Coosemans (tijl) |
security/gnutls: Remove -Wa,-march=all for clang on aarch64
PR: 260078 |
3.6.16 11 Jul 2021 16:24:49 |
Tijl Coosemans (tijl) |
security/gnutls: update to 3.6.16 |
3.6.15 07 Apr 2021 08:09:01 |
Mathieu Arnold (mat) |
One more small cleanup, forgotten yesterday.
Reported by: lwhsu |
3.6.15 06 Apr 2021 14:31:07 |
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
3.6.15 06 Sep 2020 10:25:42 |
tijl |
Update to 3.6.15.
MFH: 2020Q3
Security: https://gnutls.org/security-new.html#GNUTLS-SA-2020-09-04 |
3.6.14_1 30 Aug 2020 03:10:24 |
novel |
Chase security/p11-kit update
After switch to meson libp11-kit.so no longer has symbols
in the LIBP11_KIT_1.0 namespace. As a workaround, bump
PORTREVISION of consumers to get those rebuilt.
See more details in the comments of the linked PR.
PR: 248819
Reported by: John Hein |
3.6.14 23 Aug 2020 12:08:57 |
adamw |
security/gnutls: Add MAN3 option
There are over 1,000 man3 pages. This adds a MAN3 option to
control their installation, similar to the openssl and libressl
ports.
PR: 248841
Approved by: maintainer (tijl) |
3.6.14 04 Jun 2020 12:12:43 |
tijl |
Update to 3.6.14.
MFH: 2020Q2
Security: https://gnutls.org/security-new.html#GNUTLS-SA-2020-06-03 |
3.6.13_1 16 May 2020 10:51:33 |
sunpoet |
Bump PORTREVISION for security/nettle shlib change |
3.6.13 31 Mar 2020 15:46:42 |
tijl |
Update to 3.6.13.
Security: https://gnutls.org/security-new.html#GNUTLS-SA-2020-03-31 |
3.6.12 02 Feb 2020 11:54:36 |
tijl |
Update to 3.6.12. |
3.6.11.1 13 Dec 2019 16:28:32 |
tijl |
Update to 3.6.11.1, white space fix, and https WWW. |
3.6.10 30 Sep 2019 09:16:21 |
tijl |
Update to 3.6.10.
Also revert r508194 (-Wl,-z,notext on i386). The problem has been fixed
upstream. |
3.6.9 05 Aug 2019 16:33:37 |
tijl |
Fix build on i386. Some asm code isn't position independent.
Reported by: cy |
3.6.9 05 Aug 2019 09:55:30 |
tijl |
Update to 3.6.9. |
3.6.8_2 26 Jul 2019 20:46:57 |
gerald |
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330 |
3.6.8_1 09 Jul 2019 17:13:07 |
sunpoet |
Update security/nettle to 3.5.1
- Bump PORTREVISION of dependent ports for shlib change
- Fix build of devel/pijul [1]
Changes: https://git.lysator.liu.se/nettle/nettle/blob/master/NEWS
PR: 238991
Exp-run by: antoine
Thanks to: tobik [1] |
3.6.8 28 May 2019 10:42:29 |
tijl |
Update to 3.6.8. |
3.6.7 22 Apr 2019 08:30:47 |
tijl |
- Prevent detection of autogen. It causes some files to be regenerated
and then they require a newer header than is provided with gnutls.
- Remove ZLIB option. It's no longer available.
PR: 237419
Reported by: Kevin Oberman <rkoberman@gmail.com> |
3.6.7 19 Apr 2019 14:32:13 |
tijl |
Update to 3.6.7.
MFH: 2019Q2
Security: https://www.gnutls.org/security-new.html#GNUTLS-SA-2019-03-27 |
3.6.6_2 24 Feb 2019 15:22:40 |
tijl |
- Let gnutls look for its configuration files in PREFIX/etc instead of /etc.
- Use --with-default-trust-store-file to set the location of the root
certificates so configure doesn't have to autodetect this and the
build dependency can be removed.
- Define TEST_TARGET.
- Remove DOCSDIR. The files are also in PREFIX/share/info.
- Use p11-kit-trust as the default PKCS#11 trust store.
PR: 235703
Reported by: mi |
3.6.6_1 09 Feb 2019 23:25:37 |
sunpoet |
Update dns/libidn2 to 2.1.1
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://gitlab.com/libidn/libidn2/blob/master/NEWS |
3.6.6 26 Jan 2019 11:48:04 |
tijl |
Update to 3.6.6. |
3.6.5_1 06 Jan 2019 20:39:43 |
sunpoet |
Update dns/libidn2 to 2.1.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://gitlab.com/libidn/libidn2/blob/master/NEWS |
3.6.5 19 Dec 2018 09:32:32 |
tijl |
Update to 3.6.5.
PR: 234012
Exp-run by: antoine |
3.5.19_1 10 Nov 2018 18:12:58 |
bapt |
Install texinfo files (GNU info) into ${PREFIX}/share/info
After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.
Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.
Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them
Bump revision of all impacted ports
PR: 232907
exp-run by: antoine
Differential Revision: https://reviews.freebsd.org/D17816 |
3.5.19 10 Aug 2018 14:55:07 |
tijl |
Update to 3.5.19. |
3.5.18 16 Feb 2018 12:42:33 |
tijl |
Update to 3.5.18. |
3.5.17 24 Jan 2018 10:48:28 |
tijl |
Update to 3.5.17. |
3.5.16 05 Jan 2018 02:58:09 |
jbeich |
security/gnutls: revert r431494 per FreeBSD 11.0 EOL
PR: 216045
Approved by: portmgr blanket |
3.5.16 22 Oct 2017 13:53:58 |
tijl |
Update to 3.5.16. |
3.5.15 21 Sep 2017 12:19:28 |
tijl |
Update to 3.5.15. |
3.5.13 08 Jun 2017 10:46:02 |
tijl |
Update to 3.5.13.
MFH: 2017Q2
Security: https://gnutls.org/security.html#GNUTLS-SA-2017-4 |
3.5.12 12 May 2017 16:46:48 |
tijl |
Update to 3.5.12. |
3.5.11 25 Apr 2017 14:50:34 |
tijl |
Update to 3.5.11. |
3.5.9 20 Feb 2017 14:34:09 |
tijl |
Update to 3.5.9. Disable use of libidn2 for now because it does not provide
a pkgconfig file.
PR: 217073
Exp-run by: antoine |
3.5.8 16 Jan 2017 10:19:01 |
tijl |
Make atomic operations explicit to support old gcc.
PR: 216122 |
3.5.8 14 Jan 2017 20:51:33 |
jbeich |
security/gnutls: unbreak aarch64 after r431214
lib/accelerated/aarch64/elf/aes-aarch64.s.tmp.S:5:1: error: unknown directive
.arch armv8-a+crypto
^
lib/accelerated/aarch64/elf/aes-aarch64.s.tmp.S:49:2: error: instruction
requires: crypto
aese v6.16b,v0.16b
^
PR: 216045
Approved by: tijl (maintainer) |
3.5.8 11 Jan 2017 22:27:50 |
tijl |
Update to 3.5.8.
PR: 215909
Submitted by: brnrd
Exp-run by: antoine
MFH: 2017Q1
Security: 0c5369fc-d671-11e6-a9a5-b499baebfeaf |
3.4.17 09 Dec 2016 10:26:28 |
tijl |
Update to 3.4.17 and pass the right dlopen path for libtspi to configure. |
3.4.16 17 Oct 2016 18:25:17 |
tijl |
Update to 3.4.16. |
3.4.15 05 Oct 2016 13:55:41 |
jrm |
Add math/gmp to LIB_DEPENDS
Q/A warned that bin/certtool was linked to lib/libgmps.so.10
Approved by: swills (mentor) tijl (maintainer)
Differential Revision: https://reviews.freebsd.org/D8153 |
3.4.15 09 Sep 2016 19:42:46 |
amdmi3 |
Most commonly used build systems support silent builds, when they
hide actual commands executed and only show short summary line (like
"CC foo.c"). CMake and ninja enable this by default, some autotools
using ports do as well. This is unacceptable because we need complete
build logs at any time, so we now switch to verbose build logs
unconditionally. Note that this change deliberately affects ALL
builds and not only package builds on cluster, because we need to
be sure that user experiencing failure can always provide informative
build log regardless of settings and without rerunning the build.
Change summary:
- Always do verbose builds for cmake, ninja and GNU configure (the
latter includes check if --disable-silent-rules is actually supported
by the configure script; there are isolated cases when it's not true) (Only the first 15 lines of the commit message are shown above ) |
3.4.15 09 Sep 2016 13:22:29 |
tijl |
Update to 3.4.15.
MFH: 2016Q3
Security: https://gnutls.org/security.html#GNUTLS-SA-2016-3 |
3.4.14 08 Jul 2016 15:36:15 |
tijl |
Update to 3.4.14. |
3.4.13 07 Jun 2016 16:26:30 |
tijl |
Update to 3.4.13. |
3.4.12 30 May 2016 18:55:21 |
tijl |
Update to 3.4.12.
libpkcs11mock1.so is commented out in pkg-plist because it is part of the
testsuite and shouldn't be installed. This has been fixed upstream. |
3.4.11 12 Apr 2016 10:18:35 |
tijl |
Update to 3.4.11. |
3.4.10 01 Apr 2016 14:25:18 |
mat |
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight |
3.4.10 27 Mar 2016 14:58:00 |
tijl |
- Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
supported by libgnutls-dane and gnutls-cli. Also clarify the option
description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4. Some ports used this library
in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed. Ports that used these have been
updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.
net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.
www/hydra: Mark BROKEN. This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.
PR: 207768
Exp-run by: antoine
Approved by: portmgr (antoine) |
3.3.17.1_3 21 Mar 2016 12:03:40 |
tijl |
- Take maintainer.
- Fix a build problem with upcoming libc++.
PR: 207768, 208175
Approved by: bdrewery (maintainer) |
3.3.17.1_3 15 Mar 2016 06:21:32 |
ohauer |
- bump PORTREVISION on ports depending on unbound
PR: 207948
Submitted by: jaap@NLnetLabs.nl (maintainer) |
3.3.17.1_2 04 Feb 2016 15:58:30 |
erwin |
- Update unbound to 1.5.7
- Bump PORTREVISIOn on dependent ports
Some Upgrade Notes:
This release fixes a validation failure for nodata with wildcards and
emptynonterminals. Fixes OpenSSL Library compability. Fixes correct
response for malformed EDNS queries. For crypto in libunbound there is
libnettle support.
Qname minimisation is implemented. Use qname-minimisation: yes to
enable it. This version sends the full query name when an error is
found for intermediate names. It should therefore not fail for names
on nonconformant servers. It combines well with
harden-below-nxdomain: yes because those nxdomains are probed by the (Only the first 15 lines of the commit message are shown above ) |
3.3.17.1_1 23 Jan 2016 21:14:18 |
johans |
Bump versions to chase Nettle shared library update |
3.3.17.1 14 Aug 2015 20:38:39 |
feld |
Update MASTER_SITES to fix fetching problem due to abnormal version number
PR: 202332 |
3.3.17.1 14 Aug 2015 16:39:59 |
feld |
- Update to 3.3.17.1
MFH: 2015Q3
Relnotes: http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/8268
Security: ec6a2a1e-429d-11e5-9daa-14dae9d210b8 |
3.3.16 27 Jul 2015 18:59:30 |
bdrewery |
- Update to 3.3.16
Changes: http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/8235 |
3.3.15 22 May 2015 16:16:35 |
delphij |
Fix plist when LIBDANE is defined (PORTREVISION not bumped
because package wouldn't be successful in the case).
Pointy hat to: delphij
Reported by: sunpoet
MFH: 2015Q2 |
3.3.15 22 May 2015 15:46:09 |
delphij |
Update to 3.3.15.
PR: 198875
Approved by: maintainer |
3.2.21_1 05 May 2015 19:03:01 |
bdrewery |
GnuTLS tries to use /usr/local/share/certs/ca-root-nss.crt. Instead of
maybe using it if it is already installed or if the P11KIT option is selected
(which depends on ca_root_nss), just always depend on ca_root_nss.
Reported by: Tatsuki Makino |
3.2.21 19 Mar 2015 15:55:16 |
bdrewery |
Add CPE information.
PR: 153859
Submitted by: shun <shun.fbsd.pr@dropcut.net> |
3.2.21 01 Jan 2015 12:39:07 |
tijl |
Update gnutls to 3.2.21
PR: 196400
Approved by: bdrewery (maintainer) |
3.2.19_1 28 Oct 2014 01:13:34 |
amdmi3 |
- Fix plist for LIBDANE option
Approved by: portmgr blanket |
3.2.19 15 Oct 2014 19:22:22 |
bdrewery |
Fix build on systems without stdnoreturn.h
Reported by: many |
3.2.19 15 Oct 2014 15:38:47 |
bdrewery |
- Update to 3.2.19 |
3.2.18 02 Oct 2014 18:40:12 |
bdrewery |
Update to 3.2.18 |
3.2.16_5 30 Aug 2014 18:18:14 |
tijl |
dns/libidn:
- Add USES=libtool and bump dependent ports
- Add INSTALL_TARGET=install-strip
- Always install libidn-components.png because it is used by libidn.info
- Add -lintl to Libs.private instead of Libs in libidn.pc |
3.2.16_4 22 Aug 2014 09:06:35 |
amdmi3 |
- Switch dns/unbound to USES=libtool, drop .la files
- Bump dependent ports as .so version has changed
- While here, add LICENSE_FILE to dns/getdns
Approved by: portmgr blanket |
3.2.16_3 29 Jul 2014 09:14:01 |
koobs |
security/gnutls: Support OPTIONal library dependencies
Factor out libidn, libp11-kit and libtspi into OPTIONal library
dependencies, with the CRYWRAP, P11KIT and TPM options respectively, as per
the upstream documentation [1].
Make ZLIB an OPTION because we can, and the choice to customise
compression support in security software (especially lately) may be
very useful for some consumers.
Add CRYWRAP, P11KIT, TPM and ZLIB to OPTIONS_DEFAULT to retain current
default functionality.
[1] http://gnutls.org/manual/html_node/Downloading-and-installing.html
Inspired by: Recent gnutls 2 -> 3 change, fan of minimal dependencies
PR: 192090
Submitted by: koobs
Approved by: maintainer |
3.2.16_2 28 Jul 2014 06:43:09 |
novel |
- Update security/libtasn1 to 4.0
- Add USES= libtool and set INSTALL_TARGET to install-strip
- Drop useless bsd.port.options.mk include
- Bump PORTREVISION of ports that depend on libtasn1 as
shlib version has changed
- Add an UPDATING entry for that
Exp-run by: antoine |
3.2.16_1 24 Jul 2014 20:38:05 |
bdrewery |
- Fix plist
Reported by: many |
3.2.16 24 Jul 2014 19:43:59 |
bdrewery |
Update to 3.2.16 |
3.2.15 23 Jul 2014 09:54:02 |
tijl |
- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
developers)
PR: 191274
Exp-run by: antoine
Approved by: portmgr (antoine) |
2.12.23_6 15 Jul 2014 16:57:39 |
adamw |
Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS. |
2.12.23_6 04 Jun 2014 18:51:20 |
cy |
Patch CVE-2014-3466 to prevent memory corruption due to server hello parsing.
Obtained from:
https://gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd
Security: CVE-2014-3466, 9733c480-ebff-11e3-970b-206a8a720317 |
2.12.23_5 30 Apr 2014 18:20:12 |
tijl |
- New LIB_DEPENDS syntax.
- USES=libtool:keepla tar:bzip2.
- Remove -fPIC flag. Leftover from an old version. |
2.12.23_4 04 Mar 2014 22:46:56 |
bdrewery |
- Add fixes for:
CVE-2014-0092 - Certificate verification issue
CVE-2014-1959 - Certificate verification issue
All users are recommended to upgrade ASAP.
Security: f645aa90-a3e8-11e3-a422-3c970e169bc2 |
2.12.23_3 22 Jan 2014 07:06:18 |
novel |
Add an additional mirror to MASTER_SITES.
PR: 185901
Submitted by: Bruno Machado <bruno@bsd.com.br> |
2.12.23_3 21 Jan 2014 23:40:23 |
bapt |
Fix properties on pkg-plist |
2.12.23_3 13 Jan 2014 11:31:03 |
novel |
Fix build with perl 5.18.
PR: 185595
Reviewed by: marino
Obtained from: Debian |
2.12.23_3 10 Jan 2014 20:33:45 |
marino |
security/gnutls: Fix hardcoded perl paths
Perl was recently added as a build tool for gnutls, and immediately the
port fails to build on systems that do not have the /usr/bin/perl
symlink. The cause is harded perl path of "/usr/bin/perl". Shebangfix
will fix a couple of these, REINPLACE_CMD will fix the other. Committed
under the new "Just fix it" blanket, but it was tested in redports. |
2.12.23_3 08 Jan 2014 11:18:44 |
novel |
- Fix possbile DoS in TLS record decoding [1]
- Fix installation without NLS [2]
- Require gmake and perl for build because in some
occasions it will rebuild the documentation that
works in a proper way with gmake only and needs perl
- Bump PORTREVISION
Security: CVE-2013-2116
Reported by: mat [2] |
2.12.23_2 06 Jan 2014 10:59:38 |
novel |
- Support stagedir
- Add LICENSE
- Fix pkg-descr formatting
PR: 185409
Submitted by: Takefu <takefu@airport.fm> |
2.12.23_2 03 Nov 2013 09:22:00 |
novel |
- Chase security/libtasn1 update
- Add UPDATING entry |
2.12.23_1 20 Sep 2013 22:55:26 |
bapt |
Add NO_STAGE all over the place in preparation for the staging support (cat:
security) |
2.12.23_1 14 Aug 2013 22:35:54 |
ak |
- Remove MAKE_JOBS_SAFE variable
Approved by: portmgr (bdrewery) |
2.12.23_1 27 Apr 2013 18:25:25 |
mva |
- Convert USE_ICONV=yes to USES=iconv
- Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and
USE_GETTEXT=yes to USES=gettext while here |
2.12.23_1 26 Apr 2013 10:44:29 |
ak |
- Convert USE_GETTEXT to USES (part 4)
Approved by: portmgr (bapt) |