[Bug 250235] x11-themes/qt5-style-plugins: update patch to compile with qt>=5.15.0

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250235

--- Comment #4 from Marcel Kaiser  ---
(In reply to Tobias C. Berner from comment #3)
Thank you for the commit, Tobias!

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 250949] eigen: fix usage of USES= eigen:3

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250949

Bug ID: 250949
   Summary: eigen: fix usage of USES= eigen:3
   Product: Ports & Packages
   Version: Latest
  Hardware: Any
OS: Any
Status: New
  Severity: Affects Only Me
  Priority: ---
 Component: Individual Port(s)
  Assignee: lbartole...@freebsd.org
  Reporter: lbartole...@freebsd.org
CC: d...@freebsd.org, j...@freebsd.org, k...@freebsd.org,
m...@freebsd.org, tcber...@freebsd.org,
teodorsig...@gmail.com, thie...@freebsd.org

Created attachment 219454
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=219454&action=edit
fix ports not using USES= eigen syntax

Hello,

eigen must be used with USES= eigen:3 (ok, this is not documented in porter's
handbook).

Ports fixed:

- cad/PrusaSlicer
- graphics/opencv
- math/scilab
- math/libsemigroups
- math/py-python-fcl
- biology/gcta

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 250949] eigen: fix usage of USES= eigen:3

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250949

--- Comment #1 from teodorsig...@gmail.com  ---
As maintainer of cad/PrusaSlicer I don't have any objection for patch.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 250949] eigen: fix usage of USES= eigen:3

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250949

--- Comment #2 from Thierry Thomas  ---
No objection for math/libsemigroups.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 250949] eigen: fix usage of USES= eigen:3

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250949

Thierry Thomas  changed:

   What|Removed |Added

   See Also||https://bugs.freebsd.org/bu
   ||gzilla/show_bug.cgi?id=2508
   ||33

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 250949] eigen: fix usage of USES= eigen:3

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250949

--- Comment #3 from commit-h...@freebsd.org ---
A commit references this bug:

Author: jwb
Date: Sun Nov  8 14:31:00 UTC 2020
New revision: 554467
URL: https://svnweb.freebsd.org/changeset/ports/554467

Log:
  biology/gcta: Switch eigen3 dep to USES framework

  PR: ports/250949
  Reported by:lbartoletti

Changes:
  head/biology/gcta/Makefile

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 250949] eigen: fix usage of USES= eigen:3

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250949

--- Comment #4 from commit-h...@freebsd.org ---
A commit references this bug:

Author: makc
Date: Sun Nov  8 20:04:43 UTC 2020
New revision: 554650
URL: https://svnweb.freebsd.org/changeset/ports/554650

Log:
  math/scilab:
  - convert to USES=eigen

  PR:   250949
  Reported by:  lbartoletti

Changes:
  head/math/scilab/Makefile

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Problem reports for k...@freebsd.org that need special attention

2020-11-08 Thread bugzilla-noreply
To view an individual PR, use:
  https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=(Bug Id).

The following is a listing of current problems submitted by FreeBSD users,
which need special attention. These represent problem reports covering
all versions including experimental development code and obsolete releases.

Status  |Bug Id | Description
+---+---
Open|248590 | devel/qca: Fails to build with libressl   

1 problems total for which you should take action.


[Bug 250971] textproc/raptor2 heap overflow

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250971

Bug ID: 250971
   Summary: textproc/raptor2 heap overflow
   Product: Ports & Packages
   Version: Latest
  Hardware: Any
OS: Any
Status: New
  Severity: Affects Many People
  Priority: ---
 Component: Individual Port(s)
  Assignee: k...@freebsd.org
  Reporter: truck...@freebsd.org
 Flags: maintainer-feedback?(k...@freebsd.org)
  Assignee: k...@freebsd.org

According to https://www.openwall.com/lists/oss-security/2017/06/07/1 there are
two heap overflows in raptor 2.0.15.

A CVE has been assigned:
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18926

The upstream raptor github repo has a patch:
 
https://github.com/dajobe/raptor/commit/590681e546cd9aa18d57dc2ea1858cb734a3863f.patch

-- 
You are receiving this mail because:
You are the assignee for the bug.

maintainer-feedback requested: [Bug 250971] textproc/raptor2 heap overflow

2020-11-08 Thread bugzilla-noreply
Bugzilla Automation  has asked freebsd-kde (Team)
 for maintainer-feedback:
Bug 250971: textproc/raptor2 heap overflow
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250971



--- Description ---
According to https://www.openwall.com/lists/oss-security/2017/06/07/1 there are
two heap overflows in raptor 2.0.15.

A CVE has been assigned:
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18926

The upstream raptor github repo has a patch:
 
https://github.com/dajobe/raptor/commit/590681e546cd9aa18d57dc2ea1858cb734a3863
f.patch


[Bug 250971] textproc/raptor2 heap overflow

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250971

Don Lewis  changed:

   What|Removed |Added

 CC||truck...@freebsd.org
   Keywords||patch, security
URL||https://www.openwall.com/li
   ||sts/oss-security/2017/06/07
   ||/1

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 250971] textproc/raptor2 heap overflow

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250971

--- Comment #1 from Don Lewis  ---
Created attachment 219478
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=219478&action=edit
patch to fix CVE-2017-18926

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 250971] textproc/raptor2 heap overflow

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250971

--- Comment #2 from commit-h...@freebsd.org ---
A commit references this bug:

Author: tcberner
Date: Mon Nov  9 05:28:06 UTC 2020
New revision: 554670
URL: https://svnweb.freebsd.org/changeset/ports/554670

Log:
  Document vulnerability in textproc/raptor2

  From [1], [2], [3]:
  raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF
  Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the
XML
  writer, leading to heap-based buffer overflows (sometimes seen in
  raptor_qname_format_as_xml).

  [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18926
  [2] https://www.debian.org/security/2020/dsa-4785
  [3] https://www.openwall.com/lists/oss-security/2017/06/07/1

  PR:   250971
  Security: CVE-2017-18926

Changes:
  head/security/vuxml/vuln.xml

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 250971] textproc/raptor2 heap overflow

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250971

--- Comment #3 from commit-h...@freebsd.org ---
A commit references this bug:

Author: tcberner
Date: Mon Nov  9 05:30:11 UTC 2020
New revision: 554671
URL: https://svnweb.freebsd.org/changeset/ports/554671

Log:
  textproc/raptor2 heap overflow

  According to https://www.openwall.com/lists/oss-security/2017/06/07/1 there
are
  two heap overflows in raptor 2.0.15.

  A CVE has been assigned:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18926

  The upstream raptor github repo has a patch:
   
https://github.com/dajobe/raptor/commit/590681e546cd9aa18d57dc2ea1858cb734a3863f.patch

  PR:   250971
  Submitted by: truckman
  MFH:  2020Q4
  Security: CVE-2017-18926

Changes:
  head/textproc/raptor2/Makefile
  head/textproc/raptor2/files/
  head/textproc/raptor2/files/patch-CVE-2017-18926

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 250853] [exp-run] Update Qt5 and PyQt5 to 5.15.1 and sip to 5.4.0

2020-11-08 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250853

--- Comment #1 from Antoine Brodin  ---
There are conflicts everywhere,  can you update the patch?

-- 
You are receiving this mail because:
You are on the CC list for the bug.