tiff — Commit History

Backport upstream commit 782a11d6b5b61c6dc21e714950a4af5bf89f023c

Reference:
https://gitlab.com/libtiff/libtiff/-/commit/782a11d6b5b61c6dc21e714950a4af5bf89f023c

PR:		294370
Reviewed by:	desktop (arrowd)

Changelog: https://gitlab.com/libtiff/libtiff/-/releases/v4.7.1

PR:		289704
Approved by:	maintainer timeout, 2+ weeks
Exp-run by:	antoine

Reference:
https://gitlab.com/libtiff/libtiff/-/commit/0dbcfc5bd2eaacf8be4f57f8b7cc7369d88fafa8

Approved by:	portmgr (blanket)

Move CMAKE_DISABLE_FIND_PACKAGE_GLUT, CMAKE_DISABLE_FIND_PACKAGE_OpenGL
to CMAKE_ON and add CMAKE_DISABLE_FIND_PACKAGE_WebP to disable potential
build issues in unclean environments

Approved by:	portmgr (blanket, build fix)

Changelog:
https://gitlab.com/libtiff/libtiff/-/releases/v4.7.0

PR:		281639
Approved by:	desktop (fluffy) via Matrix
Exp-run by:	antoine

PR:		278577
Exp-run by:	antoine

Approved by:    portmgr (blanket)

New major version 3.0.0

Fix:	TIFFReadRGBATileExt(): fix (unsigned) integer overflow on
	strips/tiles > 2 GB

Obtained from:	Upstream 227500897dfb07fb7d27f7aa570050e62617e3be
		(merged as a05860a0872d323e3fbf4390187ce934dd2b165e)
MFH:		2022Q4
Security:	CVE-2022-3970
Security:	https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53137

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

These ports were traditionally maintained by portmgr@ to ensure
that they receive an exp-run.

Let's entrust them to desktop@ with a stern "remember to exp-run".

Approved by:		rene
Differential Revision: https://reviews.freebsd.org/D36316

* Add libdeflate for improved performance as dependency
* Add zstd as dependency, this is the default in Alpine, Arch Linux,
  Debian, Fedora and OpenSUSE
* Backport upstream commit dd1bcc7abb26094e93636e85520f0d8f81ab0fab to
  fix CVE-2022-2056, CVE-2022-2057 and CVE-2022-2058
* Backport upstream commit 275735d0354e39c0ac1dc3c0db2120d6f31d1990 to
  fix CVE-2022-34526

PR:		265164
Approved by:	portmgr (antoine)
Exp-run by:	antoine

A big Thank You to the original contributors of these ports:

  *  "Waitman Gobble" <uzimac@da3m0n8t3r.com>
  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Abel Chow <ozsanh45vds001@sneakemail.com>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Ade Lovett <ade@FreeBSD.org>
  *  Ade Lovett <ade@lovett.com>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Aldis Berjoza <aldis@bsdroot.lv>
  *  Alex Hayward <xelah@xelah.com>
  *  Alex Ivasyuv <siegerstein@pochta.ru>
  *  Alex Samorukov <samm@os2.kiev.ua>
  *  Alexander Gromnitsky
  *  Alexander Kojevnikov <alexander@kojevnikov.com>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexander Nedotsukov <bland@FreeBSD.org>
  *  Alexander Nedotsukov <bland@mail.ru>
  *  Alexander Y. Grigoryev <alexander.4mail@gmail.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alonso Cardenas Marquez <acm@FreeBSD.org>
  *  Anatoliy Dmytriyev <tolid@plab.ku.dk>
  *  Anatoly Borodin <anatoly.borodin@gmail.com>
  *  Anders Nordby <anders@fix.no>
  *  Andras Horvath <han@log69.com>
  *  Andreas Daehn <ad001@uni-rostock.de>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Slusar <anray@FreeBSD.org>
  *  Andrey Zakhvatov
  *  Anes Mukhametov <anes@anes.su>
  *  Anonymous <swell.k@gmail.com>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Arjan van Leeuwen <avleeuwen@piwebs.com>
  *  Ashish SHUKLA <ashish@FreeBSD.org>
  *  Bill Fumerola <billf@chc-chimes.com>
  *  Björn König <bkoenig@alpha-tierchen.de>
  *  Brad Hendrickse <bradh@iafrica.com>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Carlos Eduardo G. Carvalho <cartola@openit.com.br>
  *  Charlie Kester <corky1951@comcast.net>
  *  Choe, Cheng-Dae
  *  Choe, Cheng-Dae <whitekid@gmail.com>
  *  Chris D. Faulhaber <jedgar@FreeBSD.org>
  *  Chris D. Faulhaber <jedgar@fxp.org>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Chuck Robey <chuckr@FreeBSD.org>
  *  Corey Smith <corsmith@gmail.com>
  *  Dan Langille <dvl@FreeBSD.org>
  *  Daniel O'Connor <darius@dons.net.au>
  *  Daniel Roethlisberger <daniel@roe.ch>
  *  Danilo Egea Gondolfo <danilo@FreeBSD.org>
  *  Dave Cottlehuber <dch@skunkwerks.at>
  *  David Bremner <bremner@unb.ca>
  *  David Gilbert <dgilbert@velocet.ca>
  *  David Naylor <dbn@FreeBSD.org>
  *  David Yeske <dyeske@gmail.com>
  *  Denis Barov <dindin@dindin.ru>
  *  Denis Podolskiy <bytestore@yandex.ru>
  *  Dennis Herrmann <adox@mcx2.org>
  *  Devaux Fabien <fab@gcu.info>
  *  Dmitry Sivachenko <dima@Chg.RU>
  *  Dominik Brettnacher <domi@nonsensss.de>
  *  Donn Miller <dmmiller@cvzoom.net>
  *  Douglas Carmichael <dcarmich@mcs.com>
  *  Douglas K. Rand <rand@meridian-enviro.com>
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Emil J.V. Björsell (Jev)
  *  Emmanuel Vadot <manu@FreeBSD.org>
  *  Eric Anholt <anholt@FreeBSD.org>
  *  Eric Freeman <freebsdports@chillibear.com>
  *  Eric P. Scott <eps+pbug0703@ana.com>
  *  Erwin Lansing <erwin@FreeBSD.org>
  *  Eugene Mychlo <myc@barev.net>
  *  Fernan Aguero <fernan@iib.unsam.edu.ar>
  *  Franz Klammer <klammer@webonaut.com>
  *  FreeBSD GNOME Team <gnome@FreeBSD.org>
  *  G. Adam Stanislav <adam@whizkidtech.net>
  *  Garrett Wollman <wollman@lcs.mit.edu>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Gerrit Beine (<gerrit.beine@gmx.de>)
  *  Gerrit Beine (<tux@pinguru.net>)
  *  Glenn Johnson
  *  Greg Lewis <glewis@FreeBSD.org>
  *  Gustau Perez <gustau.perez@gmail.com>
  *  Gustau Pérez i Querol <gustau.perez@gmail.com>
  *  Gvozdikov Veniamin <g.veniamin@googlemail.com>
  *  Hernan Di Pietro <hernan.di.pietro@gmail.com>
  *  Hiroto Kagotani <hiroto.kagotani@gmail.com>
  *  Horia Racoviceanu <horia@racoviceanu.com>
  *  Hye-Shik Chang <perky@fallin.lv>
  *  Hye-Shik Chang <perky@python.or.kr>
  *  Igor Pokrovsky <ip@doom.homeunix.org>
  *  Igor Pokrovsky <tiamat@comset.net>
  *  James FitzGibbon <jfitz@FreeBSD.org>
  *  Jamie Hermans <jamie@hermans.ca>
  *  Jan Henrik Sylvester <me@janh.de>
  *  Janni
  *  Janos Mohacsi <janos.mohacsi@bsd.hu>
  *  Jason Helfman <jgh@FreeBSD.org>
  *  Jean-Marc Zucconi <jmz@FreeBSD.org>
  *  Jean-Sébastien Pédron <dumbbell@FreeBSD.org>
  *  Jean-Yves Lefort <jylefort@FreeBSD.org>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Jeff Molofee
  *  Jeremy Norris <ishmael127@home.com>
  *  Jeremy Norris <ishmael27@home.com>
  *  Joe Marcus Clarke <marcus@FreeBSD.org>
  *  Johannes Dieterich <jmd@FreeBSD.org>
  *  Johannes Jost Meixner <johannes@perceivon.net>
  *  Johannes Meixner <johannes@perceivon.net>
  *  John Hay
  *  John McAree <john@mcaree.org>
  *  John Prather
  *  John Reynolds <johnjen@reynoldsnet.org>
  *  Joris Dedieu <joris.dedieu@gmail.com>
  *  Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe>
  *  Jose Jachuf <jjachuf@gmail.com>
  *  Joseph Koshy <koshy@india.hp.com>
  *  Juergen Unger <j.unger@choin.net>
  *  KANOU Hiroki <kanou@mil.allnet.ne.jp>
  *  KIRIYAMA Kazuhiko
  *  Kay Lehmann
  *  Kevin Golding <ports@caomhin.org>
  *  Kimura Fuyuki <fuyuki@hadaly.org>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kris Kennaway <kris@FreeBSD.org>
  *  Kris Moore <kmoore@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Kurt Kanzenbach <kurt@kmk-computers.de>
  *  Kyle Martin <mkm@ieee.org>
  *  Laurent Courty
  *  Leonardo Martins <lmartins@nepe.eee.ufg.br>
  *  Lev Serebryakov <lev@FreeBSD.org>
  *  Malte Lance <malte.lance@gmx.net>
  *  Marc Fonvieille <blackend@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org> et al.
  *  Mark Atkinson <atkin901@gmail.com>
  *  Mark Murray <markm@FreeBSD.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Markus Brueffer <markus@FreeBSD.org>
  *  Martin Dieringer <martin.dieringe@gmx.de>
  *  Martin Dieringer <martin.dieringer@gmx.de>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Neubauer <m.ne@gmx.net>
  *  Martin Sugioarto <martin.sugioarto@udo.edu>
  *  Martin Tournoij <carpetsmoker@rwxrwxrwx.net>
  *  Martin Tournoij <carpetsmoker@xs4all.nl>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Mateusz Piotrowski <0mp@FreeBSD.org>
  *  Mathieu Arnold
  *  Matthew Luckie <mjl@luckie.org.nz>
  *  Matthew X. Economou <xenophon+fbsdports@irtnog.org>
  *  Matthias Fechner <mfechner@FreeBSD.org>
  *  Matthieu Volat <mazhe@alkumuna.eu>
  *  Maurice Castro <maurice@serc.rmit.edu.au>
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Michael Gmelin <freebsd@grem.de>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Michael Johnson <ahze@ahze.net>
  *  Michael Nottebrock <lofi@FreeBSD.org>
  *  Michael Reifenberger <mr@FreeBSD.org>
  *  Mike Krutov <neko@takino.org>
  *  Mikhail T. <mi@aldan.algebra.com>
  *  Mikhail Teterin <mi@aldan.algebra.com>
  *  Muhammad Moinur Rahman <5u623l20@gmail.com>
  *  NAKATA Maho <maho@FreeBSD.org>
  *  Naram Qashat <cyberbotx@cyberbotx.com>
  *  Nick Hilliard <nick@foobar.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Nicola Vitale <nivit@email.it>
  *  Nikolay Korotkiy <sikmir@gmail.com>
  *  Norio Suzuki <nosuzuki@e-mail.ne.jp>
  *  Oliver Heesakkers <dev2@heesakkers.info>
  *  Oliver Lehmann <oliver@FreeBSD.org>
  *  Olivier Duchateau
  *  Paul Everlund
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Pedro F. Giffuni
  *  Pedro Garcia Freitas <sawp@sawp.com.br>
  *  Pedro Giffuni
  *  Pedro Giffuni <pfg@FreeBSD.org>
  *  Pete Fritchman <petef@FreeBSD.org>
  *  Pete Fritchman <petef@databits.net>
  *  Peter Ankerstal <peter@pean.org>
  *  Peter Jeremy <peterjeremy@optushome.com.au>
  *  Peter Schmiedeskamp <pschmied@qwest.net>
  *  Phil Phillips <pphillips@experts-exchange.com>
  *  Pietro Cerutti <gahr@FreeBSD.org>
  *  Pietro Cerutti <gahr@gahr.ch>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Piotr Smyrak <smyru@heron.pl>
  *  Piotr Smyrak, piotr.smyrak@heron.pl
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Quentin Stievenart <acieroid@awesom.eu>
  *  R Joseph Wright <rjoseph@mammalia.org>
  *  Radim Kolar
  *  Rainer Hurling <rhurlin@gwdg.de>
  *  Randall Hopper
  *  Randall Hopper <aa8vb@ipass.net>
  *  Randall Hopper <aa8vb@nc.rr.com>
  *  Reinier de Blois <rddeblois@gmail.com>
  *  Richard Hwang <rhwang@bigpanda.com>, Mikhail Teterin <mi@aldan.algebra.com>, Jun-ichiro itojun Itoh <itojun@itojun.org>
  *  Rick Elrod <codeblock@eighthbit.net>
  *  Rob Farmer <rfarmer@predatorlabs.net>
  *  Rod Person <rodperson@rodperson.com>
  *  Roland Jesse <roland.jesse@gmx.net>
  *  Romain Tartiere <romain@FreeBSD.org>
  *  Ron van Daal
  *  Ronald Kuehn <rk@ronald.org>
  *  Rong-En Fan <rafan@infor.org>
  *  Rusmir Dusko <nemysis@FreeBSD.org>
  *  Rusty Nejdl <rnejdl@ringofsaturn.com>
  *  Ryan Melcer <rmelcer@iteris.com>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Sahil Tandon <sahil@FreeBSD.org>
  *  Sam Lawrance
  *  Satoshi Asami <asami@FreeBSD.org>
  *  Satoshi Taoka <taoka@FreeBSD.org>
  *  Seiichirou Hiraoka
  *  Serge Negodyuck <petr@petrovich.kiev.ua>
  *  Sergey A. Osokin <osa@FreeBSD.org>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Sergey V. Dyatko <sergey.dyatko@gmail.com>
  *  Shane Ambler
  *  Shaun Amott <shaun@inerd.com>
  *  Shell Hung <shell@shellhung.org>
  *  Shigeyuki FUKUSHIMA <shige@FreeBSD.org>
  *  Simun Mikecin <numisemis@yahoo.com>
  *  Sofian Brabez <sbrabez@gmail.com>
  *  Stanislav Sedov <ssedov@mbsd.msk.ru>
  *  Stanislav Sedov <stas@FreeBSD.org>
  *  Stas Timokhin <devel@stasyan.com>
  *  Stas Timokhin <stast@bsdportal.ru>
  *  Stefan Walter <sw@gegenunendlich.de>
  *  Stephen Roome <steve@pepcross.com>
  *  Steve Wills <steve@meatwad.mouf.net>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steven Kreuzer <skreuzer@FreeBSD.org>
  *  Steven Wallace <swallace@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  TAKAHASHI Kaoru <kaoru@kaisei.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  TAKATSU Tomonari <tota@rtfm.jp>
  *  TAOKA Fumiyoshi
  *  TATEISHI Katsuyuki <katsu@iec.hiroshima-u.ac.jp>
  *  Tassilo Philipp <tphilipp@potion-studios.com>
  *  Thibault Payet <monwarez@mailoo.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas Dreibholz <dreibh@iem.uni-due.de>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Thomas Hurst <tom@hur.st>
  *  Tilman Linneweh <arved@FreeBSD.org>
  *  Tim Bishop <tim@bishnet.net>
  *  Tod McQuillin <devin@spamcop.net>
  *  Tomoyuki Sakurai <cherry@trombik.org>
  *  Tsung-Han Yeh <snowfly@yuntech.edu.tw>
  *  UMENO Takashi <umeno@rr.iij4u.or.jp>
  *  Ulrich Spoerlein <q@uni.de>
  *  Vasil Dimov <vd@FreeBSD.org>
  *  Veniamin Gvozdikov <vg@FreeBSD.org>
  *  Vincent Tantardini <vinc@FreeBSD-fr.org>
  *  Vladimir Chukharev
  *  Wen Heping <wen@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Wen heping <wenheping@gmail.com>
  *  Wen heping<wenheping@gmail.com>
  *  Will Andrews <andrews@technologist.com>
  *  Yi-Jheng Lin <yzlin@cs.nctu.edu.tw>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  Yinghong Liu <relaxbsd@gmail.com>
  *  Yinghong.Liu <relaxbsd@gmail.com>
  *  Yuan-Chung Hsiao <ychsiao@ychsiao.org>
  *  Yukihiro Nakai <Nakai@Mlab.t.u-tokyo.ac.jp>
  *  Yukihiro Nakai <nacai@iname.com>
  *  Yukihiro Nakai <nakai@mlab.t.u-tokyo.ac.jp>
  *  Yuri Victorovich <yuri@FreeBSD.org>
  *  Yuri Victorovich <yuri@rawbw.com>
  *  Yuu Yashiki
  *  Yuzo FURUKAWA <hurukawa@kuee.kyoto-u.ac.jp>
  *  Zhihao Yuan <lichray@gmail.com>
  *  Zsolt Udvari <udvzsolt@gmail.com>
  *  ache
  *  alepulver
  *  anhot
  *  antonakis@gmail.com
  *  argv[0] (Iouri V. Ivliev)
  *  arved
  *  asami
  *  bf <bf@FreeBSD.org>
  *  bmc@WillsCreek.COM
  *  buganini@gmail.com
  *  cacho@mexicano.gdl.iteso.mx
  *  cartola (Carlos E. G. Carvalho)
  *  cartola@openit.com.br
  *  cfs@ing.puc.cl (original)
  *  chinsan
  *  chinsan <chinsan.tw@gmail.com>
  *  coryking
  *  cracauer@cons.org "Martin Cracauer"
  *  demon@FreeBSD.org
  *  dillon
  *  dom@happygiraffe.net
  *  erich@FreeBSD.org
  *  fenner
  *  fernan@iib.unsam.edu.ar
  *  frankch@waru.life.nthu.edu.tw
  *  gahr
  *  gary@hotlava.com
  *  gerard
  *  giffunip@asme.org
  *  glebius@FreeBSD.org
  *  gurkan@phys.ethz.ch
  *  hsu
  *  ijliao
  *  jamie
  *  jedgar@FreeBSD.org
  *  jeff@cetlink.net
  *  jjachuf@gmail.com
  *  jmz
  *  johalun
  *  johan
  *  johans
  *  kwm@FreeBSD.org
  *  lbartoletti <lbartoletti@FreeBSD.org>
  *  lesi@FreeBSD.org
  *  lichray@gmail.com
  *  luigi@FreeBSD.org
  *  maho@FreeBSD.org
  *  marcus@FreeBSD.org
  *  mb@imp.ch
  *  mi
  *  mm@FreeBSD.org
  *  nemysis <nemysis@gmx.ch>
  *  nik
  *  nork@FreeBSD.org
  *  olgeni@FreeBSD.org
  *  paulo@isr.uc.pt
  *  petef@FreeBSD.org
  *  pgs
  *  ports@FreeBSD.org
  *  proff@iq.org
  *  punkt.de Hosting Team <mops@punkt.de>
  *  rfarmer@predatorlabs.net
  *  roberto
  *  roland.jesse@gmx.net
  *  rpsfa@rit.edu
  *  saper@system.pl
  *  smace
  *  sobomax
  *  stas
  *  stb@lassitu.de
  *  theraven@FreeBSD.org
  *  thierry@pompo.net
  *  tobez
  *  trasz <trasz@pin.if.uz.zgora.pl>
  *  trevor
  *  vanilla
  *  will
  *  wolman@cs.washington.edu
  *  yukinopo@livedoor.com

With hat:	portmgr

PR:		238372

Approved by:	portmgr (blanket)

PR:		233146
Reported by:	Roger Leigh

PR:		225544
Submitted by:	Yasuhiro KIMURA
Obtained from:	Debian
MFH after:	2 days
MFH:		2018Q1

Sponsored by:	Absolight

MFC after:	3 days
MFH:		2017Q4

PR:		219458, 216259
Submitted by:	Vidar Karlsen
MFH:		2017Q2

PR:		213195
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D8093

These two patches were obtained from OpenBSD. An additional CVE is not
yet addressed, but upstream indicates they are removing the gif2tiff
utility as the mitigation in the upcoming 4.0.7.

PR:		211113
MFH:		2016Q3
Security:	CVE-2016-5875
Security:	CVE-2016-3186

With hat:	portmgr
Sponsored by:	Absolight

These ports were intentionally set to portmgr@FreeBSD.org as MAINTAINER;
it was not a mistake. They require exp-runs and special care when
updating.

Submitted by:	antoine

Besides fixing the two CVEs mentioned above, this change also pulls two
other commits from libtiff upstream fixing other out-of-bounds reads that do
not have corresponding CVEs and were reported directly in libtiff's bug
tracker.

PR:		205923
Approved by:	portmgr (antoine)
Obtained from:	libtiff CVS repository
Security:	b65e4914-b3bc-11e5-8255-5453ed2e2b49
Security:	bd349f7a-b3b9-11e5-8255-5453ed2e2b49

PR:		203851

Reported by:	naddy
Obtained from:	https://github.com/vadz/libtiff/commit/147b2698c84004fe2da93c0fc7177a7c3797533d
MFH:		2015Q1

PR:		198862
MFH:		2015Q1
Security:	CVE-2014-8127 CVE-2014-8128 CVE-2014-8129 CVE-2014-8130 CVE-2014-9655 CVE-2015-1547

audio/libogg
audio/libvorbis
devel/pcre
ftp/curl
graphics/jpeg
graphics/libart_lgpl
graphics/tiff
textproc/expat2
textproc/libxslt

In these cases the same trick as in the recent gettext update is used.
The ports install a symlink with the old library version.  When enough
of their dependent ports have had regular updates the remaining ones can
get a PORTREVISION bump and the links can be removed.

Also remove the devel/pcre dependency from USE_GNOME=glib20.  It causes
over 2200 packages to depend on devel/pcre while less than 200 actually
link with it.  The glib20 package still depends on devel/pcre so this
should not make a difference for ports with USE_GNOME=glib20.  Also,
libdata/pkgconfig/glib-2.0.pc lists pcre as a private library so
USE_GNOME=glib20 should not propagate it.

PR:		195724
Exp-run by:	antoine
Approved by:	portmgr (antoine)

Approved by:	portmgr (implicit)

NEW XORG ON FREEBSD 9-STABLE AND 10-STABLE

This update switches over to use the new xorg stack by default on FreeBSD 9
and 10 stable, on osversions where vt(9) is available.
It is still possible to use the old stack by specifying WITHOUT_NEW_XORG in
/etc/make.conf .
FreeBSD 8-STABLE and released versions of FreeBSD still use
the old version.
A package repository with binary packages for new xorg will
be available soon.

This patch also contains updates of libxcb and related ports, pixman, as well
as some drivers and utilities.

Bump portrevisions for xf86-* ports, as well as virtualbox-ose-additions due
to xserver version change.

Apart from these updates, the way shared libraries are handled has been
changed for all xorg ports, as well as libxml2 and freetype, which means
ltverhack is gone and as a consequence shared libraries have been bumped.
The plan is that this change will make library bumps less likely in the
future.
All affected ports have had their portrevisions bumped as a consequence of
this.

Fix some issues where WITH_NEW_XORG weren't detected properly on CURRENT.

Update instructions, hardware support, and more notes can be found on
https://wiki.freebsd.org/Graphics

Thanks to:	all testers, bdrewery and the FreeBSD x11@ team
exp-run by:	bdrewery [1]
PR:		ports/187602 [1]
Approved by:	portmgr (bdrewery), core (jhb)

Bump all ports that directly depend on libglut because of the shlib version
change.

There are some extra items in this patch.

*) Because freeglut doesn't have the same dependancies as libglut, some ports
	need extra dependencies added to USE_XORG to make them build.
*) Mark graphics/f90gl broken, f90gl depends on a header that is only shipped
	with libglut.
*) Remove option for libglut/freeglut selection in games/cake, only freeglut
	remains now.
*) While here fix a png related build issue games/vegastrike.

Thanks to miwi for running the exp-run.

Approved by:	portmgr (miwi)

Collaboration with:	zeising@
Obtained from:	xorg-dev staging area.

- change path of libtiff-4.pc
Submitted by:	Max Brazhnikov

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:	marcus and kwm
Pointyhat-exp:	a few times by pav
Tested by:	pgollucci, "Romain Tartière" <romain@blogreen.org>, and
		a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:	marcus
Approved by:	portmgr

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)

- cleanup dependencies for option WITH_X11
  USE_XORG and USE_GL now defined

Approved by:	portmgr (kris)

http://remotesensing.org/pipermail/tiff/2004-October/000698.html

PR:	ports/73811
Approved by:	dinoex	(maintainer)
Submitted by:	Peter Fales (to TIFF mailing list)

shared lib version not bumped,
tested a few applications running it without recompilation.

problem: configure stops waiting for stdin
this happens on all architetures.

sparc64-5-latest-logs	2004 Mar  5 18:17:20	tiff-3.6.1_1.log	failed
i386-5-latest-logs	2004 Mar  4 15:47:17	tiff-3.6.1_1.log	okay
alpha-5-latest-logs	2004 Feb 16 00:55:25	tiff-3.6.1_1.log.bz2	okay
amd64-5-latest-logs	2004 Feb 27 09:35:09	tiff-3.6.1_1.log.bz2	okay
i386-4-latest-logs	2004 Feb 21 11:58:42	tiff-3.6.1_1.log.bz2	okay
ia64-5-latest-logs	2004 Feb 16 23:28:46	tiff-3.6.1_1.log.bz2	okay
sparc64-5-latest-logs	2004 Feb 17 12:04:10	tiff-3.6.1_1.log.bz2	okay

workaround: build package on olnder enviroment.
e.G. install 5.2. release or current before 2004-02-29 in a jail.

Patches welcome

- fix serious bug in tiffcp
Submitted by: Mark McConnell

PR:		57805
Submitted by:	tkato@prontomail.com

Obtained from:	OpenBSD

E Nomini Patri, E Fili, E Spiritu Sancti.

PR:		32858
Submitted by:	Ports Fury

PR:		32018
Submitted by:	Helge Oldach <send-pr@oldach.net>

PR:		21286 (partially)
Submitted by:	Martti Kuparinen <martti.kuparinen@nomadiclab.com>

Line up the rhs of variable assignments nicely.  Remove a couple of extra
whitespaces while I'm here.

Suggested by:	 sobomax

Hall of shame entry:	sobomax

PR:		17717
Submitted by:	KATO Tsuguru <tkato@prontomail.ne.jp>

PR:		16079
Submitted by:	Maxim Sobolev <sobomax@altavista.net>

PR:		15718
Submitted by:	KATO Tsuguru <tkato@prontomail.ne.jp>

PR:		15467
Submitted by:	KATO Tsuguru <tkato@prontomail.ne.jp>

PR:		15224
Submitted by:	KATO Tsuguru <tkato@prontomail.ne.jp>

PR:		15078
Submitted by:	KATO Tsuguru <tkato@prontomail.ne.jp>

PR:		13677 (6 of 10)
Submitted by:	Jeremy Lea <reg@shale.csir.co.za>

PR:		13565
Submitted by:	KATO Tsuguru <tkato@prontomail.ne.jp>

Results to follow.  :)

Submitted by:	hollywar@holywar.net

PR:		ports/8521
Submitted by:	Zach Heilig <zach@gaffaneys.com>

PR:		12055
Submitted by:	n_hibma

PR:		9641
Submitted by:	Mikhail Teterin <mi@aldan.algebra.com>

PR:		10822

Submitter says:
 > I noticed that the construction of the man pages for the tiff-3.4 port are
 > broken.  In the Makefile for the 'man' directory, it assumes that the
 > value of the makefile variable "MANPATH" is null, and doesn't explicitly
 > set it.  This isn't the case on FreeBSD where it's set in
 > /usr/share/mk/bsd.own.mk, which is invoked by /usr/share/mk/sys.mk.
 >
 > The patch I suggest is to explicitly set the MANPATH variable to null
 > so that the .so commands are later built correctly.

Submitted by:	"Louis A. Mamakos" <louie@TransSys.COM>

Approved by:	asami

PR:		6281
Submitted by:	SADA Kenji <sada@e-mail.ne.jp>

Approved by:    asami

Submitted by:	distfile checker

Submitted by:	alta@ryozan.rim.or.jp

PR:		3736
Submitted by:	itojun@itojun.org

PR:		3517
Submitted by:	itojun@itojun.org

TIFF 3.4 does not seem to be completely compatible with tiff 3.3, so
we decided to make separate port for this version.

Special thanks goes to tg, for reviewing and intensively testing.
(Closing PR #2057.)