Current status

Number of commits found XX: 21

Update KDE Applications to 20.12

- astro/libkgeomap has been removed as there are no consumers left
- deskutils/kdepim-apps-libs has been reintegrated into other ports

There are a handful of new ports available:
- astro/kosmindoormap: Library and QML component for rendering multi-level OSM
indoor maps
- deskutils/itinerary: KDE Itinerary is a digital travel assistant
- devel/kpublictransport: Access realtime public transport data
- graphics/kontrast: Color contrast checker
- textproc/markdownpart: KPart for rendering Markdown content

Update KDE Apps to 20.08.3

Some of our projects release on their own timescale and some get released
en-masse. The 20.08.3 bundle of projects was released today with dozens of
bugfixes and will be available through app stores and distros soon. See the
20.08.3 releases page for details.

Some of the fixes in today's releases:

    * Gwenview no longer accidentally shows the thumbnail view as a separate
window with newer Qt versions
    * Sending SMS with KDEConnect has been restored
    * Fixed a possible Okular crash when selecting text in annotations

Announcement:
	https://kde.org/announcements/releases/2020-11-apps-update/

Changelog:
	https://kde.org/announcements/fulllog_releases-20.08.3/

deskutils/kdeconnect-kde: add upstreams mitigations for CVE-2020-26164

From https://kde.org/info/security/advisory-20201002-1.txt:
	Solution
	========

	KDE Connect 20.08.2 patches several code paths that could result in a DoS.
	You can apply these patches on top of 20.08.1:
	https://invent.kde.org/network/kdeconnect-kde/-/commit/f183b5447bad47655c21af87214579f03bf3a163
	https://invent.kde.org/network/kdeconnect-kde/-/commit/b279c52101d3f7cc30a26086d58de0b5f1c547fa
	https://invent.kde.org/network/kdeconnect-kde/-/commit/d35b88c1b25fe13715f9170f18674d476ca9acdc
	https://invent.kde.org/network/kdeconnect-kde/-/commit/b496e66899e5bc9547b6537a7f44ab44dd0aaf38
	https://invent.kde.org/network/kdeconnect-kde/-/commit/5310eae85dbdf92fba30375238a2481f2e34943e
	https://invent.kde.org/network/kdeconnect-kde/-/commit/721ba9faafb79aac73973410ee1dd3624ded97a5
	https://invent.kde.org/network/kdeconnect-kde/-/commit/ae58b9dec49c809b85b5404cee17946116f8a706
	https://invent.kde.org/network/kdeconnect-kde/-/commit/66c768aa9e7fba30b119c8b801efd49ed1270b0a
	https://invent.kde.org/network/kdeconnect-kde/-/commit/85b691e40f525e22ca5cc4ebe79c361d71d7dc05
	https://invent.kde.org/network/kdeconnect-kde/-/commit/48180b46552d40729a36b7431e97bbe2b5379306

Security:	CVE-2020-26164

Remove obsolete CONFLICTS on kde4 ports

- kde4 has been removed 2018-12-31, that's way back when.

Update KDE Applications (release-service) to 20.04

KDE's April 2020 Apps Update

A new bundle of KDE applications is here! In these releases, you can expect to
find more features, stability improvements, and more user-friendly tools that
will help you work more effectively.

There are dozens of changes to look forward to in most of your favorite
applications. Take Dolphin, for example. Windows Samba shares are now fully
discoverable.

On the topic of playing music: the Elisa music player is adding features by
leaps and bounds. This release brings a new "Now Playing" view, easy
accessibility through the system tray, and an option to minimize the playlist
whenever you want. Thanks to the recently-added visual shuffle mode, it's much
easier to rearrange your music in the playlists.

These are just the highlights of what's new in KDE's applications this month.
Read on to find out about everything we've prepared for you.

Announcement:
	https://kde.org/announcements/releases/2020-04-apps-update/

devel/qca: update to 2.3

- qca-2.3 drop support for OSSL<1.1
- copy devel/qca to devel/qca-legacy which is held at the current version
- update devel/qca to 2.3
- Add Uses/qca.mk which handles dependency on either of the ports depending on
  the FreeBSD version

Users on FreeBSD11 must therefore change their pkg orign a la:

   pkg set -o devel/qca:devel/qca-legacy

PR:		244682
Exp-run by:	antoine
Reviewed by:	arrowd
Differential Revision:	https://reviews.freebsd.org/D24042

desktuils/kdeconnect-kde: update to 1.4

Add USES=xorg USES=gl, ports categories d

Add USES=xorg, USES=gl and in a few cases USES=gnome to ports in categories
starting with 'd'.

deskutils/kdeconnect-kde: update to 1.3.5

Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330

deskutils/kdeconnect-kde: update to 1.3.4

Changes since 1.3.3 are:
* Always play when call ended
* [cli] Show all reachable devices
* [sftp] Also report desktop side errors via KIO
* [sftp] Get device ID from URL
* Retry the network packet if it failed to unserialize
* Fix sending keys via CLI
* [kio] Fix file browsing with non-KIO file managers

Bump PORTREVISION in other ports that depend optionally on x11/kf5-kwayland.

See r496074 for the explanation.

devel/qca: remove flavors (Qt4 deprecation)

deskutils/kdeconnect-kde: use security/sshpass to pass passwords to sshfs

On FreeBSD sshfs does not seem to support the "-o password_stdin" option.
Work around this limitation by using security/sshpass. This should be considered
a temporary work around until a better solution is found.

With this fix sharing of files from the device should finally work.

PR:             25303
Submitted by:   Stefan Rumetshofer <sterum77@gmail.com>

Fix Qt5 symbol version scripts to put the catch-all clause first.  When
a symbol matches multiple clauses the last one takes precedence.  If the
catch-all is last it captures everything.  In the case of Qt5 libraries
this caused all symbols to have a Qt_5 label while some should have
Qt_5_PRIVATE_API.  This only affects lld because GNU ld always gives the
catch-all lowest priority.

Older versions of Qt5Webengine exported some memory allocation symbols from
the bundled Chromium.  Version 5.9 stopped exporting these [1] but the
symbols were kept as weak wrappers for the standard allocation functions to
maintain binary compatibility. [2][3]  The problem is that the call to the
standard function in these weak wrappers is only resolved to the standard
function if there's a call to this standard function in other parts of
Qt5Webengine, because only then is there a non-weak symbol that takes
precedence over the weak one.  If there's no such non-weak symbol the call

(Only the first 15 lines of the commit message are shown above )

deskutils/kdeconnect-kde: update to 1.3.3

Change cmake default behaviour to outsource.

Ports that build out of source now simply can use "USES=cmake"
instead of "USES=cmake:outsource". Ports that fail to build
out of source now need to specify "USES=cmake:insource".

I tried to only set insource where explictely needed.

PR:		232038
Exp-run by:	antoine

Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590

Merge lang/qt5-qml and x11-toolkits/qt5-quick into x11-toolkits/qt5-declarative

- There was no obvious reason to split these ports, and it makes
  porting simpler; the set of ports using either mostly coincided.

Exp-run by:	antoine
PR:		223687
PR:		232751

- Remove empty lines after .include <bsd.port.mk>

Approved by:	portmgr blanket

Add new port: deskutils/kdeconnect-kde -- the KF5 baesed version of
deskutils/kdeconnect-kde-kde4.

Thanks to mikael.urankar@gmail.com for the patch fixing segfaults on IPv4 mapped
IPV6 addresses.

PR:		220896
PR:		227832

Number of commits found XX: 21

12 vulnerabilities affecting 72 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2021-03-28 22:40:29