Re: Missing CVEs in quirks

2020-01-30 Thread Rafael Sadowski
On Fri Jan 31, 2020 at 06:57:02AM +0100, Björn Ketelaars wrote: > On Fri 31/01/2020 06:27, Rafael Sadowski wrote: > > The diff contains some forgotten CVE entries in quirks. I went through > > all the January commits and looked for CVE in the commit msg. > > > > I also ran sort over the list. > >

Re: Missing CVEs in quirks

2020-01-30 Thread Björn Ketelaars
On Fri 31/01/2020 06:27, Rafael Sadowski wrote: > The diff contains some forgotten CVE entries in quirks. I went through > all the January commits and looked for CVE in the commit msg. > > I also ran sort over the list. > > OK, opinions? My opinion is that we either maintain CVE entries in quirk

Re: Remove: productivity/qhacc

2020-01-30 Thread Rafael Sadowski
On Thu Jan 30, 2020 at 01:19:18PM +0100, Marc Espie wrote: > On Thu, Jan 30, 2020 at 08:23:22AM +0100, Klemens Nanni wrote: > > On Wed, Jan 29, 2020 at 06:44:53AM +0100, Rafael Sadowski wrote: > > > I would like get rid of productivity/qhacc. It's a terrible accounting > > > tool (independently of

Missing CVEs in quirks

2020-01-30 Thread Rafael Sadowski
The diff contains some forgotten CVE entries in quirks. I went through all the January commits and looked for CVE in the commit msg. I also ran sort over the list. OK, opinions? Index: Makefile === RCS file: /cvs/ports/devel/quirks/

update net/dnscrypt-proxy 2.0.38

2020-01-30 Thread Nam Nguyen
This is a security fix release that I propose adding to -stable. It affects 32-bit arches when dnscrypt-proxy's DNS over HTTPS (DoH) feature is used. It was fixed in Go 1.13.7 (now available in ports) and in the version of golang.org/x/crypto specified in {WRKSRC}/go.mod. >From issue: "On 32-bit a

Re: Update security/qtkeychain 0.7.0 => 0.10.0 and update dependent ports

2020-01-30 Thread Adriano Barbosa
I was not able to make qtkeychain package for this new version. It builds, but fails on `make package`. My ports tree is up to date, did I miss some patch? `/usr/ports/pobj/qtkeychain-0.10.0/fake-amd64/.fake_done' is up to date. ===> Building package for qtkeychain-0.10.0 Create /usr/ports/packag

Re: UPDATE: devel/gmake 4.2.1 => 4.3

2020-01-30 Thread Brian Callahan
Hi Christian -- On 2020-01-30 4:46 PM, Christian Weisgerber wrote: Christian Weisgerber: I'll start another test build shortly. Remaining fallout: multimedia/gstreamer-0.10/plugins-good multimedia/gstreamer-0.10/plugins-bad These need the same fix as plugins-base. devel/jdk/11 Upstrea

Re: UPDATE: devel/gmake 4.2.1 => 4.3

2020-01-30 Thread Christian Weisgerber
Christian Weisgerber: > I'll start another test build shortly. Remaining fallout: multimedia/gstreamer-0.10/plugins-good multimedia/gstreamer-0.10/plugins-bad These need the same fix as plugins-base. devel/jdk/11 Upstream fix available. Commits ready, pending approval from the respective m

Re: UPDATE mbedtls-2.16.4

2020-01-30 Thread Klemens Nanni
On Thu, Jan 30, 2020 at 09:22:59PM +0100, Rafael Sadowski wrote: > I don't like diffs like that. I have to search for mbedtls to find the > directory aka category. It would be helpful if the path was placed > somewhere. Maybe in the mail subject?! > > Surprise surprise, it's polarssl. However, ok

Re: UPDATE mbedtls-2.16.4

2020-01-30 Thread Rafael Sadowski
On Thu Jan 30, 2020 at 06:07:36PM +0100, Bjorn Ketelaars wrote: > On Thu 23/01/2020 05:38, Bjorn Ketelaars wrote: > > On Thu 16/01/2020 07:22, Bjorn Ketelaars wrote: > > > mbedtls-2.16.4 has been released, which fixes a side channel attack on > > > ECDSA (CVE-2019-18222). More information can be fo

Re: pcsc-lite: disable colors by default

2020-01-30 Thread Klemens Nanni
On Sat, Jan 25, 2020 at 12:39:50AM +0100, Klemens Nanni wrote: > `pcscd --debug' prints dark blue lines on my terminal with dark > background, rendering them unreadable. The daemon has `-T' to enforce > colored output, but no switch to disable colors on TTYs. > > Diff below simply removes the det

Re: UPDATE mbedtls-2.16.4

2020-01-30 Thread Bjorn Ketelaars
On Thu 23/01/2020 05:38, Bjorn Ketelaars wrote: > On Thu 16/01/2020 07:22, Bjorn Ketelaars wrote: > > mbedtls-2.16.4 has been released, which fixes a side channel attack on > > ECDSA (CVE-2019-18222). More information can be found at > > https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.4-and

Re: [macppc] devel/llvm: add clang -msvr4-struct-return

2020-01-30 Thread Jeremie Courreges-Anglas
On Tue, Jan 28 2020, George Koehler wrote: > Hello ports! Hi George :) [...] I'm happy to see you move on with this diff. I don't have a powerpc machine at hand so I'll trust you regarding the correctness of the resulting object code. If you want double checks here I'd suggest talking to kett

Re: py-numpy hidden dependency on py-setuptools_scm

2020-01-30 Thread Daniel Dickman
> On Jan 30, 2020, at 9:07 AM, Antoine Jacoutot wrote: > > On Thu, Jan 30, 2020 at 08:50:37AM -0500, Kurt Mosiejczuk wrote: >> Just had py-numpy fail on the sparc64 bulk complaining about not >> having a setuptools_scm module. Adding devel/py-setuptools_scm to the >> BUILD_DEPENDS fixes it. >

Re: zynaddsubfx plugin in lmms-1.2.0

2020-01-30 Thread Stuart Henderson
On 2020/01/30 14:41, putridsou...@gmail.com wrote: > I installed lmms-1.2.0 using pkg_add command. > And the zynaddsubfx plugin which is supposed > to be included in lmms is not there. Opening > most demo's yields plugin not found error. For > those leeway can be suggested, but zynaddsubfx > is a v

Re: py-numpy hidden dependency on py-setuptools_scm

2020-01-30 Thread Antoine Jacoutot
On Thu, Jan 30, 2020 at 08:50:37AM -0500, Kurt Mosiejczuk wrote: > Just had py-numpy fail on the sparc64 bulk complaining about not > having a setuptools_scm module. Adding devel/py-setuptools_scm to the > BUILD_DEPENDS fixes it. > > Here's a diff to add it and it bumps REVISION. > > ok? No. It

Re: py-numpy hidden dependency on py-setuptools_scm

2020-01-30 Thread Daniel Dickman
Can you please send the failure? Is it reproducible? > On Jan 30, 2020, at 8:51 AM, Kurt Mosiejczuk wrote: > > Just had py-numpy fail on the sparc64 bulk complaining about not > having a setuptools_scm module. Adding devel/py-setuptools_scm to the > BUILD_DEPENDS fixes it. > > Here's a diff to

py-numpy hidden dependency on py-setuptools_scm

2020-01-30 Thread Kurt Mosiejczuk
Just had py-numpy fail on the sparc64 bulk complaining about not having a setuptools_scm module. Adding devel/py-setuptools_scm to the BUILD_DEPENDS fixes it. Here's a diff to add it and it bumps REVISION. ok? --Kurt Index: Makefile ==

Re: Remove: productivity/qhacc

2020-01-30 Thread Marc Espie
On Thu, Jan 30, 2020 at 08:23:22AM +0100, Klemens Nanni wrote: > On Wed, Jan 29, 2020 at 06:44:53AM +0100, Rafael Sadowski wrote: > > I would like get rid of productivity/qhacc. It's a terrible accounting > > tool (independently of Qt3). We have much more feature-rich, stable, > > easy to use accou

zynaddsubfx plugin in lmms-1.2.0

2020-01-30 Thread putridsoul66
I installed lmms-1.2.0 using pkg_add command. And the zynaddsubfx plugin which is supposed to be included in lmms is not there. Opening most demo's yields plugin not found error. For those leeway can be suggested, but zynaddsubfx is a very important plugin. I hope the porters of lmms look into this

Re: net/deluge fails to build on snapshot

2020-01-30 Thread Xiyue Deng
Friendly ping. Would like to see whether other people are affected. Xiyue Deng writes: > Hi ports maintainers, > > net/deluge cannot build on latest available snapshot for Loongson. I > think the problem is because that Python 2.7 could not find and import > libtorrent(-rasterbar), so it tried