Bug 269530

Summary: print/harfbuzz: update to 7.0.0
Product: Ports & Packages Reporter: Jan Beich <jbeich>
Component: Individual Port(s)Assignee: Jan Beich <jbeich>
Status: Closed FIXED    
Severity: Affects Only Me CC: desktop, diizzy, hps, tomek
Priority: --- Keywords: needs-qa, security
Version: LatestFlags: bugzilla: maintainer-feedback? (desktop)
antoine: exp-run+
Hardware: Any   
OS: Any   
URL: https://github.com/harfbuzz/harfbuzz/releases/tag/7.0.0
Attachments:
Description Flags
v1 (apply via "git am") none

Description Jan Beich freebsd_committer freebsd_triage 2023-02-13 09:23:20 UTC
Created attachment 240126 [details]
v1 (apply via "git am")
Comment 1 Daniel Engberg freebsd_committer freebsd_triage 2023-02-13 22:02:58 UTC
There's some kind of race condition where the build (compiler) gets stuck if test option and "make test" is executed with more than one job. Also occurs with current version in tree (6.0.0).
Comment 3 Daniel Engberg freebsd_committer freebsd_triage 2023-02-20 17:20:20 UTC
(In reply to Daniel Engberg from comment #1)
Update: It does eventually complete but it can take a very long time (10+ minutes on my Tigerlake laptop). I never waited that long before...
Comment 4 Jan Beich freebsd_committer freebsd_triage 2023-02-20 17:28:30 UTC
(In reply to Antoine Brodin from comment #2)
devel/hs-ghcprofview has no consumers, so will be marked BROKEN after notifying upstream.
Comment 5 commit-hook freebsd_committer freebsd_triage 2023-02-20 18:39:38 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=4872ec2e84230a13627d90f21b79901814eaaeac

commit 4872ec2e84230a13627d90f21b79901814eaaeac
Author:     Jan Beich <jbeich@FreeBSD.org>
AuthorDate: 2023-02-11 21:53:55 +0000
Commit:     Jan Beich <jbeich@FreeBSD.org>
CommitDate: 2023-02-20 18:38:21 +0000

    print/harfbuzz: update to 7.0.1

    Changes:        https://github.com/harfbuzz/harfbuzz/releases/tag/7.0.0
    Changes:        https://github.com/harfbuzz/harfbuzz/releases/tag/7.0.1
    Reported by:    GitHub (watch releases)
    PR:             269530
    Exp-run by:     antoine

 devel/hs-ghcprofview/Makefile    | 2 ++
 print/harfbuzz-hb-view/pkg-plist | 7 +++++++
 print/harfbuzz-icu/pkg-plist     | 2 ++
 print/harfbuzz/Makefile          | 4 ++--
 print/harfbuzz/distinfo          | 6 +++---
 print/harfbuzz/pkg-plist         | 8 ++++++++
 6 files changed, 24 insertions(+), 5 deletions(-)
Comment 6 Jan Beich freebsd_committer freebsd_triage 2023-02-21 14:46:09 UTC
Can you test MFH to 2023Q1? Required to fix https://nvd.nist.gov/vuln/detail/CVE-2023-25193
Comment 7 Antoine Brodin freebsd_committer freebsd_triage 2023-02-23 10:31:49 UTC
Same as on ports main : devel/hs-ghcprofview fails
Comment 8 commit-hook freebsd_committer freebsd_triage 2023-02-23 10:36:38 UTC
A commit in branch 2023Q1 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=ca5815ff1d398e1e9c69b84233d8bc7568ee78d4

commit ca5815ff1d398e1e9c69b84233d8bc7568ee78d4
Author:     Jan Beich <jbeich@FreeBSD.org>
AuthorDate: 2023-02-11 21:53:55 +0000
Commit:     Jan Beich <jbeich@FreeBSD.org>
CommitDate: 2023-02-23 10:33:58 +0000

    print/harfbuzz: update to 7.0.1

    Changes:        https://github.com/harfbuzz/harfbuzz/releases/tag/7.0.0
    Changes:        https://github.com/harfbuzz/harfbuzz/releases/tag/7.0.1
    Reported by:    GitHub (watch releases)
    PR:             269530
    Exp-run by:     antoine
    Security:       CVE-2023-25193

    (cherry picked from commit 4872ec2e84230a13627d90f21b79901814eaaeac)
    (cherry picked from commit df89486e12ada9a887eb37c5edf3b11347cd8ea1)

 devel/hs-ghcprofview/Makefile    | 2 ++
 print/harfbuzz-hb-view/pkg-plist | 7 +++++++
 print/harfbuzz-icu/pkg-plist     | 2 ++
 print/harfbuzz/Makefile          | 4 ++--
 print/harfbuzz/distinfo          | 6 +++---
 print/harfbuzz/pkg-plist         | 8 ++++++++
 6 files changed, 24 insertions(+), 5 deletions(-)