Skip to content

Commit

Permalink
Pullup ticket #6272 - requested by wiz
Browse files Browse the repository at this point in the history
net/transmission-gtk: security update
net/transmission-qt: security update
net/transmission: security update

Revisions pulled up:
- net/transmission-gtk/Makefile                                 1.46
- net/transmission-gtk/PLIST                                    1.2
- net/transmission-qt/Makefile                                  1.54
- net/transmission/Makefile                                     1.27
- net/transmission/Makefile.common                              1.10
- net/transmission/PLIST                                        1.4
- net/transmission/distinfo                                     1.16
- net/transmission/patches/patch-qt_qtr.pro                     1.7

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Mon Jul 13 13:01:02 UTC 2020

   Modified Files:
   	pkgsrc/net/transmission: Makefile Makefile.common PLIST distinfo
   	pkgsrc/net/transmission-gtk: Makefile PLIST
   	pkgsrc/net/transmission-qt: Makefile
   	pkgsrc/net/transmission/patches: patch-qt_qtr.pro

   Log Message:
   transmission*: update to 3.00

   ### All Platforms
   - Allow the RPC server to listen on an IPv6 address ([#161](transmission/transmission#161))
   - Change `TR_CURL_SSL_VERIFY` to `TR_CURL_SSL_NO_VERIFY` and enable verification by default ([#334](transmission/transmission#334))
   - Go back to using hash as base name for resume and torrent files (those stored in configuration directory) ([#122](transmission/transmission#122))
   - Handle "fields" argument in "session-get" RPC request; if "fields" array is present in arguments, only return session fields specified; otherwise return all the fields as before
   - Limit the number of incorrect authentication attempts in embedded web server to 100 to prevent brute-force attacks ([#371](transmission/transmission#371))
   - Set idle seed limit range to 1..40320 (4 weeks tops) in all clients ([#212](transmission/transmission#212))
   - Add Peer ID for Xfplay, PicoTorrent, Free Download Manager, Folx, Baidu Netdisk torrent clients ([#256](transmission/transmission#256), [#285](transmission/transmission#285), [#355](transmission/transmission#355), [#363](transmission/transmission#363), [#386](transmission/transmission#386))
   - Announce `INT64_MAX` as size left if the value is unknown (helps with e.g. Amazon S3 trackers) ([#250](transmission/transmission#250))
   - Add `TCP_FASTOPEN` support (should result in slight speedup) ([#184](transmission/transmission#184))
   - Improve ToS handling on IPv6 connections ([#128](transmission/transmission#128), [#341](transmission/transmission#341), [#360](transmission/transmission#360), [#692](transmission/transmission#692), [#737](transmission/transmission#737))
   - Abort handshake if establishing DH shared secret fails (leads to crash) ([#27](transmission/transmission#27))
   - Don't switch trackers while announcing (leads to crash) ([#297](transmission/transmission#297))
   - Improve completion scripts execution and error handling; add support for .cmd and .bat files on Windows ([#405](transmission/transmission#405))
   - Maintain a "session ID" file (in temporary directory) to better detect whether session is local or remote; return the ID as part of "session-get" response (TRAC-5348, [#861](transmission/transmission#861))
   - Change torrent location even if no data move is needed ([#35](transmission/transmission#35))
   - Support CIDR-notated blocklists ([#230](transmission/transmission#230), [#741](transmission/transmission#741))
   - Update the resume file before running scripts ([#825](transmission/transmission#825))
   - Make multiscrape limits adaptive ([#837](transmission/transmission#837))
   - Add labels support to libtransmission and transmission-remote ([#822](transmission/transmission#822))
   - Parse `session-id` header case-insensitively ([#765](transmission/transmission#765))
   - Sanitize suspicious path components instead of rejecting them ([#62](transmission/transmission#62), [#294](transmission/transmission#294))
   - Load CA certs from system store on Windows / OpenSSL ([#446](transmission/transmission#446))
   - Add support for mbedtls (formely polarssl) and wolfssl (formely cyassl), LibreSSL ([#115](transmission/transmission#115), [#116](transmission/transmission#116), [#284](transmission/transmission#284), [#486](transmission/transmission#486), [#524](transmission/transmission#524), [#570](transmission/transmission#570))
   - Fix building against OpenSSL 1.1.0+ ([#24](transmission/transmission#24))
   - Fix quota support for uClibc-ng 1.0.18+ and DragonFly BSD ([#42](transmission/transmission#42), [#58](transmission/transmission#58), [#312](transmission/transmission#312))
   - Fix a number of memory leaks (magnet loading, session shutdown, bencoded data parsing) ([#56](transmission/transmission#56))
   - Bump miniupnpc version to 2.0.20170509 ([#347](transmission/transmission#347))
   - CMake-related improvements (Ninja generator, libappindicator, systemd, Solaris and macOS) ([#72](transmission/transmission#72), [#96](transmission/transmission#96), [#117](transmission/transmission#117), [#118](transmission/transmission#118), [#133](transmission/transmission#133), [#191](transmission/transmission#191))
   - Switch to submodules to manage (most of) third-party dependencies
   - Fail installation on Windows if UCRT is not installed

   ### Mac Client
   - Bump minimum macOS version to 10.10
   - Dark Mode support ([#644](transmission/transmission#644), [#722](transmission/transmission#722), [#757](transmission/transmission#757), [#779](transmission/transmission#779), [#788](transmission/transmission#788))
   - Remove Growl support, notification center is always used ([#387](transmission/transmission#387))
   - Fix autoupdate on High Sierra and up by bumping the Sparkle version ([#121](transmission/transmission#121), [#600](transmission/transmission#600))
   - Transition to ARC ([#336](transmission/transmission#336))
   - Use proper UTF-8 encoding (with macOS-specific normalization) when setting download/incomplete directory and completion script paths ([#11](transmission/transmission#11))
   - Fix uncaught exception when dragging multiple items between groups ([#51](transmission/transmission#51))
   - Add flat variants of status icons for message log ([#134](transmission/transmission#134))
   - Optimize image resources size ([#304](transmission/transmission#304), [#429](transmission/transmission#429))
   - Update file icon when file name changes ([#37](transmission/transmission#37))
   - Update translations

   ### GTK+ Client
   - Add queue up/down hotkeys ([#158](transmission/transmission#158))
   - Modernize the .desktop file ([#162](transmission/transmission#162))
   - Add AppData file ([#224](transmission/transmission#224))
   - Add symbolic icon variant for the Gnome top bar and when the high contrast theme is in use ([#414](transmission/transmission#414), [#449](transmission/transmission#449))
   - Update file icon when its name changes ([#37](transmission/transmission#37))
   - Switch from intltool to gettext for translations ([#584](transmission/transmission#584), [#647](transmission/transmission#647))
   - Update translations, add new translations for Portuguese (Portugal)

   ### Qt Client
   - Bump minimum Qt version to 5.2
   - Fix dropping .torrent files into main window on Windows ([#269](transmission/transmission#269))
   - Fix prepending of drive letter to various user-selected paths on Windows ([#236](transmission/transmission#236), [#307](transmission/transmission#307), [#404](transmission/transmission#404), [#437](transmission/transmission#437), [#699](transmission/transmission#699), [#723](transmission/transmission#723), [#877](transmission/transmission#877))
   - Fix sorting by progress in presence of magnet transfers ([#234](transmission/transmission#234))
   - Fix .torrent file trashing upon addition ([#262](transmission/transmission#262))
   - Add queue up/down hotkeys ([#158](transmission/transmission#158))
   - Reduce torrent properties (file tree) memory usage
   - Display tooltips in torrent properties (file tree) in case the names don't fit ([#411](transmission/transmission#411))
   - Improve UI look on hi-dpi displays (YMMV)
   - Use session ID (if available) to check if session is local or not ([#861](transmission/transmission#861))
   - Use default (instead of system) locale to be more flexible ([#130](transmission/transmission#130))
   - Modernize the .desktop file ([#162](transmission/transmission#162))
   - Update translations, add new translations for Afrikaans, Catalan, Danish, Greek, Norwegian Bokmål, Slovenian

   ### Daemon
   - Use libsystemd instead of libsystemd-daemon (TRAC-5921)
   - Harden transmission-daemon.service by disallowing privileges elevation ([#795](transmission/transmission#795))
   - Fix exit code to be zero when dumping settings ([#487](transmission/transmission#487))

   ### Web Client
   - Fix tracker error XSS in inspector (CVE-?)
   - Fix performance issues due to improper use of `setInterval()` for UI refresh (TRAC-6031)
   - Fix recognition of `https://` links in comments field ([#41](transmission/transmission#41), [#180](transmission/transmission#180))
   - Fix torrent list style in Google Chrome 59+ ([#384](transmission/transmission#384))
   - Show ETA in compact view on non-mobile devices ([#146](transmission/transmission#146))
   - Show upload file button on mobile devices ([#320](transmission/transmission#320), [#431](transmission/transmission#431), [#956](transmission/transmission#956))
   - Add keyboard hotkeys for web interface ([#351](transmission/transmission#351))
   - Disable autocompletion in torrent URL field ([#367](transmission/transmission#367))

   ### Utils
   - Prevent crash in transmission-show displaying torrents with invalid creation date ([#609](transmission/transmission#609))
   - Handle IPv6 RPC addresses in transmission-remote ([#247](transmission/transmission#247))
   - Add `--unsorted` option to transmission-show ([#767](transmission/transmission#767))
   - Widen the torrent-id column in transmission-remote for cleaner formatting ([#840](transmission/transmission#840))


   To generate a diff of this commit:
   cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/transmission/Makefile
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/net/transmission/Makefile.common
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/transmission/PLIST
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/net/transmission/distinfo
   cvs rdiff -u -r1.45 -r1.46 pkgsrc/net/transmission-gtk/Makefile
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/transmission-gtk/PLIST
   cvs rdiff -u -r1.52 -r1.53 pkgsrc/net/transmission-qt/Makefile
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/net/transmission/patches/patch-qt_qtr.pro
-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   wiz
   Date:           Sat Jul 25 20:20:05 UTC 2020

   Modified Files:
           pkgsrc/net/transmission-qt: Makefile

   Log Message:
   transmission-qt: needs gcc 7.x (for <optional>)

   Reported and tested by spz.


   To generate a diff of this commit:
   cvs rdiff -u -r1.53 -r1.54 pkgsrc/net/transmission-qt/Makefile
  • Loading branch information
spzeidler committed Aug 3, 2020
1 parent b93999d commit 6aaec21
Show file tree
Hide file tree
Showing 8 changed files with 31 additions and 30 deletions.
3 changes: 1 addition & 2 deletions net/transmission-gtk/Makefile
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
# $NetBSD: Makefile,v 1.45 2020/05/22 10:56:32 adam Exp $
# $NetBSD: Makefile,v 1.45.2.1 2020/08/03 09:29:18 spz Exp $

PKGNAME= transmission-gtk-${VERSION}
PKGREVISION= 8
COMMENT= Free, lightweight BitTorrent client (GTK version)

INSTALL_ENV+= INSTALL_ROOT=${DESTDIR}${PREFIX}
Expand Down
18 changes: 9 additions & 9 deletions net/transmission-gtk/PLIST
Original file line number Diff line number Diff line change
@@ -1,20 +1,16 @@
@comment $NetBSD: PLIST,v 1.1 2013/03/02 19:34:36 wiz Exp $
@comment $NetBSD: PLIST,v 1.1.58.1 2020/08/03 09:29:18 spz Exp $
bin/transmission-gtk
man/man1/transmission-gtk.1
share/appdata/transmission-gtk.appdata.xml
share/applications/transmission-gtk.desktop
share/icons/hicolor/16x16/apps/transmission.png
share/icons/hicolor/22x22/apps/transmission.png
share/icons/hicolor/24x24/apps/transmission.png
share/icons/hicolor/256x256/apps/transmission.png
share/icons/hicolor/32x32/apps/transmission.png
share/icons/hicolor/48x48/apps/transmission.png
share/icons/hicolor/scalable/apps/transmission-devel.svg
share/icons/hicolor/scalable/apps/transmission.svg
share/icons/hicolor/symbolic/apps/transmission-symbolic.svg
share/locale/an/LC_MESSAGES/transmission-gtk.mo
share/locale/ar/LC_MESSAGES/transmission-gtk.mo
share/locale/ast/LC_MESSAGES/transmission-gtk.mo
share/locale/az/LC_MESSAGES/transmission-gtk.mo
share/locale/be/LC_MESSAGES/transmission-gtk.mo
share/locale/be@latin/LC_MESSAGES/transmission-gtk.mo
share/locale/bg/LC_MESSAGES/transmission-gtk.mo
share/locale/bn/LC_MESSAGES/transmission-gtk.mo
share/locale/bo/LC_MESSAGES/transmission-gtk.mo
Expand All @@ -25,6 +21,7 @@ share/locale/ca@valencia/LC_MESSAGES/transmission-gtk.mo
share/locale/ceb/LC_MESSAGES/transmission-gtk.mo
share/locale/ckb/LC_MESSAGES/transmission-gtk.mo
share/locale/cs/LC_MESSAGES/transmission-gtk.mo
share/locale/cy/LC_MESSAGES/transmission-gtk.mo
share/locale/da/LC_MESSAGES/transmission-gtk.mo
share/locale/de/LC_MESSAGES/transmission-gtk.mo
share/locale/el/LC_MESSAGES/transmission-gtk.mo
Expand All @@ -40,6 +37,7 @@ share/locale/fi/LC_MESSAGES/transmission-gtk.mo
share/locale/fil/LC_MESSAGES/transmission-gtk.mo
share/locale/fo/LC_MESSAGES/transmission-gtk.mo
share/locale/fr/LC_MESSAGES/transmission-gtk.mo
share/locale/fr_CA/LC_MESSAGES/transmission-gtk.mo
share/locale/ga/LC_MESSAGES/transmission-gtk.mo
share/locale/gl/LC_MESSAGES/transmission-gtk.mo
share/locale/gv/LC_MESSAGES/transmission-gtk.mo
Expand All @@ -53,6 +51,7 @@ share/locale/id/LC_MESSAGES/transmission-gtk.mo
share/locale/is/LC_MESSAGES/transmission-gtk.mo
share/locale/it/LC_MESSAGES/transmission-gtk.mo
share/locale/ja/LC_MESSAGES/transmission-gtk.mo
share/locale/jbo/LC_MESSAGES/transmission-gtk.mo
share/locale/ka/LC_MESSAGES/transmission-gtk.mo
share/locale/kk/LC_MESSAGES/transmission-gtk.mo
share/locale/ko/LC_MESSAGES/transmission-gtk.mo
Expand Down Expand Up @@ -85,7 +84,7 @@ share/locale/sq/LC_MESSAGES/transmission-gtk.mo
share/locale/sr/LC_MESSAGES/transmission-gtk.mo
share/locale/sv/LC_MESSAGES/transmission-gtk.mo
share/locale/sw/LC_MESSAGES/transmission-gtk.mo
share/locale/ta_LK/LC_MESSAGES/transmission-gtk.mo
share/locale/ta/LC_MESSAGES/transmission-gtk.mo
share/locale/te/LC_MESSAGES/transmission-gtk.mo
share/locale/th/LC_MESSAGES/transmission-gtk.mo
share/locale/tl/LC_MESSAGES/transmission-gtk.mo
Expand All @@ -96,5 +95,6 @@ share/locale/ur/LC_MESSAGES/transmission-gtk.mo
share/locale/uz/LC_MESSAGES/transmission-gtk.mo
share/locale/vi/LC_MESSAGES/transmission-gtk.mo
share/locale/zh_CN/LC_MESSAGES/transmission-gtk.mo
share/locale/zh_HK/LC_MESSAGES/transmission-gtk.mo
share/locale/zh_TW/LC_MESSAGES/transmission-gtk.mo
share/pixmaps/transmission.png
5 changes: 3 additions & 2 deletions net/transmission-qt/Makefile
Original file line number Diff line number Diff line change
@@ -1,11 +1,12 @@
# $NetBSD: Makefile,v 1.52 2020/06/02 08:24:35 adam Exp $
# $NetBSD: Makefile,v 1.52.2.1 2020/08/03 09:29:18 spz Exp $

PKGNAME= transmission-qt-${VERSION}
PKGREVISION= 9
COMMENT= Free, lightweight BitTorrent client (QT version)

MAKE_ENV+= QTDIR=${QTDIR}

GCC_REQD+= 7

.include "../../mk/bsd.fast.prefs.mk"

.if !empty(MACHINE_PLATFORM:MNetBSD-[6-9].*-*)
Expand Down
3 changes: 1 addition & 2 deletions net/transmission/Makefile
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# $NetBSD: Makefile,v 1.26 2020/05/22 10:56:32 adam Exp $
# $NetBSD: Makefile,v 1.26.2.1 2020/08/03 09:29:18 spz Exp $

CONFLICTS+= Transmission-[0-9]*

Expand All @@ -8,6 +8,5 @@ pre-configure:
CONFIGURE_ARGS+= --disable-mac
CONFIGURE_ARGS+= --without-gtk

PKGREVISION= 6
.include "../../net/transmission/Makefile.common"
.include "../../mk/bsd.pkg.mk"
8 changes: 4 additions & 4 deletions net/transmission/Makefile.common
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
# $NetBSD: Makefile.common,v 1.9 2019/07/20 23:14:40 wiz Exp $
# $NetBSD: Makefile.common,v 1.9.8.1 2020/08/03 09:29:18 spz Exp $
#
# used by net/transmission/Makefile
# used by net/transmission-gtk/Makefile
# used by net/transmission-qt/Makefile

VERSION= 2.94
VERSION= 3.00
DISTNAME= transmission-${VERSION}
CATEGORIES= net
MASTER_SITES= https://github.com/transmission/transmission-releases/raw/master/
Expand Down Expand Up @@ -40,8 +40,8 @@ ALL_ENV+= LIBEVENT_CFLAGS=-I${BUILDLINK_PREFIX.libevent}/include
ALL_ENV+= LIBEVENT_LIBS="-L${BUILDLINK_PREFIX.libevent}/lib ${COMPILER_RPATH_FLAG}${BUILDLINK_PREFIX.libevent}/lib -levent"
BUILDLINK_API_DEPENDS.libevent+= libevent>=2.0.10
.include "../../devel/libevent/buildlink3.mk"
ALL_ENV+= "OPENSSL_CFLAGS=-I${SSLBASE}/include"
ALL_ENV+= "OPENSSL_LIBS=-L${SSLBASE}/lib -lcrypto -lssl"
ALL_ENV+= OPENSSL_CFLAGS="-I${SSLBASE}/include"
ALL_ENV+= OPENSSL_LIBS="-L${SSLBASE}/lib -lcrypto -lssl"
.include "../../devel/libgetopt/buildlink3.mk"
.include "../../security/openssl/buildlink3.mk"
.include "../../www/curl/buildlink3.mk"
Expand Down
4 changes: 3 additions & 1 deletion net/transmission/PLIST
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
@comment $NetBSD: PLIST,v 1.3 2016/04/15 09:28:39 wiz Exp $
@comment $NetBSD: PLIST,v 1.3.32.1 2020/08/03 09:29:18 spz Exp $
bin/transmission-create
bin/transmission-daemon
bin/transmission-edit
Expand All @@ -25,7 +25,9 @@ share/transmission/web/javascript/jquery/jquery.min.js
share/transmission/web/javascript/jquery/jquery.transmenu.min.js
share/transmission/web/javascript/jquery/jquery.ui-contextmenu.min.js
share/transmission/web/javascript/jquery/json2.min.js
share/transmission/web/javascript/main.js
share/transmission/web/javascript/notifications.js
share/transmission/web/javascript/polyfill.js
share/transmission/web/javascript/prefs-dialog.js
share/transmission/web/javascript/remote.js
share/transmission/web/javascript/torrent-row.js
Expand Down
12 changes: 6 additions & 6 deletions net/transmission/distinfo
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
$NetBSD: distinfo,v 1.15 2019/07/20 23:14:40 wiz Exp $
$NetBSD: distinfo,v 1.15.8.1 2020/08/03 09:29:18 spz Exp $

SHA1 (transmission-2.94.tar.xz) = 5f1b41090764bb2150eb0440fce671a3825ef265
RMD160 (transmission-2.94.tar.xz) = 92fef8c64ff0ee71002b3f36149947e60e568d10
SHA512 (transmission-2.94.tar.xz) = ee411743940f2897aa0bbc351ce79f11d860075d2e9e399d60301eae8cfc453e20426ef553fc62ee43019a07c052d512f5d7972cc4411fb57b1312c2c1558da7
Size (transmission-2.94.tar.xz) = 3365952 bytes
SHA1 (patch-qt_qtr.pro) = 8789931713d96bd1015c615660ab729008d5bbf4
SHA1 (transmission-3.00.tar.xz) = fd6bd78cfe5a612b422a49e8193d82df2486a3c4
RMD160 (transmission-3.00.tar.xz) = 5286c3e183474cba6ed1c6cfc022f4f5afab4fda
SHA512 (transmission-3.00.tar.xz) = eeaf7fe46797326190008776a7fa641b6341c806b0f1684c2e7326c1284832a320440013e42a37acda9fd0ee5dca695f215d6263c8acb39188c5d9a836104a61
Size (transmission-3.00.tar.xz) = 3329220 bytes
SHA1 (patch-qt_qtr.pro) = e29629fada5bbb34e3b05b47092dba655b9d8265
8 changes: 4 additions & 4 deletions net/transmission/patches/patch-qt_qtr.pro
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
$NetBSD: patch-qt_qtr.pro,v 1.6 2019/07/20 23:14:40 wiz Exp $
$NetBSD: patch-qt_qtr.pro,v 1.6.8.1 2020/08/03 09:29:18 spz Exp $

1. Fix man page installation path.
2. add openssl cflags/ldflags (still needed?)

--- qt/qtr.pro.orig 2015-12-29 00:47:32.464150631 +0000
--- qt/qtr.pro.orig 2020-05-22 11:04:23.470805450 +0000
+++ qt/qtr.pro
@@ -8,7 +8,8 @@ target.path = /bin
INSTALLS += target
Expand All @@ -14,8 +14,8 @@ $NetBSD: patch-qt_qtr.pro,v 1.6 2019/07/20 23:14:40 wiz Exp $
+
man.files = transmission-qt.1

CONFIG += qt thread debug link_pkgconfig c++11 warn_on
@@ -28,12 +29,14 @@ include(config.pri)
CONFIG += qt thread link_pkgconfig c++1z warn_on
@@ -29,12 +30,14 @@ include(config.pri)

INCLUDEPATH = $${EVENT_TOP}/include $${INCLUDEPATH}
INCLUDEPATH += $${TRANSMISSION_TOP}
Expand Down

0 comments on commit 6aaec21

Please sign in to comment.