Version: 6.2, Package name: mercurial-6.2 |
Maintained by: The OpenBSD ports mailing-list |
Master sites: |
Description-main Mercurial is a distributed version control system which features: - High-performance delta-compressed storage scheme. - Optimized for disk layout and access efficiency. - Complete cross-indexing of files and changesets. - Bandwidth and CPU efficient HTTP and SSH sync protocols. - Distributed development model supports unlimited numbers of developers. - Allows arbitrary merging between developer branches. - No waiting for locks. - Integrity checking on repository data. - Append-only storage model with transaction journalling. - Fast full-repository verification. Description-x11 This package provides 'hg view' (aka hgk) functionality. |
Filesize: 7864.954 KB |
Version History (View Complete History) |
|
2021-11-22 08:00:43 by Marc Espie | Files touched by this commit (21) |
Log message: default for PKGNAME-sub where it makes sense, no pkgnames change |
2021-11-01 18:00:27 by Stuart Henderson | Files touched by this commit (99) |
Log message: bump REVISION for switch from Python 3.8 -> 3.9 |
2021-05-21 14:50:48 by Juan Francisco Cantero Hurtado | Files touched by this commit (3) |
Log message: Update to mercurial 5.8. Drop MAINTAINER. |
2021-02-23 12:39:53 by Stuart Henderson | Files touched by this commit (743) |
Log message: Reverse the polarity of MODPY_VERSION; default is now 3.x, if a port needs 2.x then set MODPY_VERSION=${MODPY_DEFAULT_VERSION_2}. This commit doesn't change any versions currently used; it may be that some ports have MODPY_DEFAULT_VERSION_2 but don't require it, those should be cleaned up in the course of updating ports where possible. Python module ports providing py3-* packages should still use FLAVOR=python3 so that we don't have a mixture of dependencies some using ${MODPY_FLAVOR} and others not. |
2021-02-08 16:54:55 by Juan Francisco Cantero Hurtado | Files touched by this commit (3) |
Log message: Update to mercurial 5.7. |
2021-01-04 07:06:39 by Stuart Henderson | Files touched by this commit (242) |
Log message: regen PLISTs for python ports with .so files that end up renamed due to the EXT_SUFFIX change in Python 3.8.7 |
2020-08-09 13:38:18 by Juan Francisco Cantero Hurtado | Files touched by this commit (3) |
Log message: Update to mercurial 5.5. |
2020-07-03 15:13:23 by Stuart Henderson | Files touched by this commit (1032) |
Log message: bump REVISION; python 3 default changed to 3.8 |
2020-05-18 10:46:10 by Juan Francisco Cantero Hurtado | Files touched by this commit (1) |
Log message: Missing dep for the new git extension. |
2020-05-14 09:52:56 by Juan Francisco Cantero Hurtado | Files touched by this commit (4) |
Log message: Update to mercurial 5.4. |
2020-04-06 15:19:00 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Update to mercurial 5.3.2. |
2020-03-20 14:22:45 by Juan Francisco Cantero Hurtado | Files touched by this commit (3) |
Log message: Move mercurial to python3. It passes the tests on amd64 (except the usual suspects). "hg clone" tested on sparc64 and OK by kn@. |
2020-03-16 16:00:59 by Juan Francisco Cantero Hurtado | Files touched by this commit (3) |
Log message: Update to mercurial 5.3.1. |
2019-07-24 11:29:23 by Juan Francisco Cantero Hurtado | Files touched by this commit (3) |
Log message: Update to mercurial 5.0.2. |
2019-07-12 14:45:17 by Stuart Henderson | Files touched by this commit (859) |
Log message: replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes |
2019-05-20 16:15:31 by Christian Weisgerber | Files touched by this commit (488) |
Log message: Update gettext to 0.20.1. Follow the upstream recommendations for packagers and switch to multi-packages: devel/gettext -> devel/gettext,-runtime devel/gettext-tools -> devel/gettext,-tools (new) devel/gettext,-textstyle |
2019-05-15 06:04:43 by Kurt Mosiejczuk | Files touched by this commit (167) |
Log message: Add RUN_DEPENDS to TEST_DEPENDS automatically for ports using the lang/python port module. I've not yet come up with a port that would not need this and one can always set MODPY_TESTDEP to "no" to prevent the module from touching TEST_DEPENDS. Idea from afresh1 who pointed out the cpan module already does this. aja "I support this move." OK sthen@ |
2019-03-21 12:32:47 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Update to mercurial 4.9.1. |
2019-02-24 11:06:42 by Juan Francisco Cantero Hurtado | Files touched by this commit (3) |
Log message: Update to mercurial 4.9. |
2019-02-02 09:08:07 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: SECURITY: Prior to 4.9, it's possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository. As per recommendation of Augie Fackler (Mercurial developer), I'm creating a global rc file to disable subrepos or any future dangerous feature. If you need subrepos support, you can enable it in the project rc file (i.e. myrepo/.hg/hgrc). Use it only with really trusty sources. |
2019-02-02 08:26:07 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: SECURITY: Prior to 4.9, it's possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository. As per recommendation of Augie Fackler (Mercurial developer), I'm creating a global rc file to disable subrepos or any future dangerous feature. If you need subrepos support, you can enable it in the project rc file (i.e. myrepo/.hg/hgrc). Use it only with really trusty sources. |
2019-02-01 14:30:00 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Add PORTHOME. |
2019-01-15 16:21:47 by Juan Francisco Cantero Hurtado | Files touched by this commit (1) |
Log message: Change WRKDIST for the development versions. |
2019-01-14 16:06:35 by Juan Francisco Cantero Hurtado | Files touched by this commit (1) |
Log message: Add additional MASTER_SITES. |
2019-01-08 16:08:07 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Update to mercurial 4.8.2. |
2018-12-07 11:34:09 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Fix zstd undefined symbols on non-clang platforms. Reported by tedu@. Fix found by jca@. |
2018-12-05 15:38:55 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: SECURITY. Bugfix backported from 4.8.1: "fix out-of-bounds access by negative parents read from revlog" |
2018-12-05 15:36:03 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Update to mercurial 4.8.1. |
2018-11-17 14:33:11 by Juan Francisco Cantero Hurtado | Files touched by this commit (6) |
Log message: Update to mercurial 4.8. |
2018-10-02 08:05:19 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: SECURITY: "Fix a potential out-of-bounds read in manifest parsing C code." No CVE. |
2018-10-02 08:04:01 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: SECURITY: "Fix a potential out-of-bounds read in manifest parsing C code." No CVE. |
2018-06-09 10:48:26 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: SECURITY. From upstream: "Multiple issues found in mpatch.c with a fuzzer: - OVE-20180430-0001 - OVE-20180430-0002 - OVE-20180430-0004 With the following fixes: - mpatch: be more careful about parsing binary patch data (SEC) - mpatch: protect against underflow in mpatch_apply (SEC) - mpatch: ensure fragment start isn't past the end of orig (SEC) - mpatch: fix UB in int overflows in gather() (SEC) - mpatch: fix UB integer overflows in discard() (SEC) - mpatch: avoid integer overflow in mpatch_decode (SEC) - mpatch: avoid integer overflow in combine() (SEC) No exploits are known at the time." |
2018-06-09 10:44:45 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: SECURITY. From upstream: "Multiple issues found in mpatch.c with a fuzzer: - OVE-20180430-0001 - OVE-20180430-0002 - OVE-20180430-0004 With the following fixes: - mpatch: be more careful about parsing binary patch data (SEC) - mpatch: protect against underflow in mpatch_apply (SEC) - mpatch: ensure fragment start isn't past the end of orig (SEC) - mpatch: fix UB in int overflows in gather() (SEC) - mpatch: fix UB integer overflows in discard() (SEC) - mpatch: avoid integer overflow in mpatch_decode (SEC) - mpatch: avoid integer overflow in combine() (SEC) No exploits are known at the time." |
2018-04-25 03:40:07 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Update to mercurial 4.5.3. |
2018-03-07 06:34:38 by Juan Francisco Cantero Hurtado | Files touched by this commit (3) |
Log message: Update to mercurial 4.5.2. |
2018-03-07 04:15:35 by Juan Francisco Cantero Hurtado | Files touched by this commit (3) |
Log message: Fix a vulnerability in the http server of mercurial. Patch from upstream. https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29 |
2017-08-11 17:28:01 by Juan Francisco Cantero Hurtado | Files touched by this commit (4) |
Log message: Update to mercurial 4.3.1. |
2017-08-10 13:40:58 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Update to mercurial 4.2.3. https://www.mercurial-scm.org/pipermail/mercurial/2017-August/050522.html CVE-2017-1000115: Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused to write to files outside the repository. CVE-2017-1000116: Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks by specifying a hostname starting with -oProxyCommand. |
2017-08-10 13:36:59 by Juan Francisco Cantero Hurtado | Files touched by this commit (4) |
Log message: Update to mercurial 4.2.3. https://www.mercurial-scm.org/pipermail/mercurial/2017-August/050522.html CVE-2017-1000115: Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused to write to files outside the repository. CVE-2017-1000116: Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks by specifying a hostname starting with -oProxyCommand. |
2017-07-19 16:16:56 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Update to mercurial 4.2.2. |
2017-06-13 14:30:26 by Ingo Schwarze | Files touched by this commit (3) |
Log message: mandoc handles reStructuredText output now, drop USE_GROFF and bump |
2017-06-10 19:11:03 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Update to mercurial 4.2.1. |
2017-05-06 10:45:34 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Comments. |
2017-05-03 16:57:10 by Juan Francisco Cantero Hurtado | Files touched by this commit (5) |
Log message: Update to mercurial 4.2. |
2017-04-27 20:25:36 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: My previous patch fixed the security bug but broke some commands. Bug report and patch by Cedric Krier. |
2017-04-19 17:06:18 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Spaces/tabs. |
2017-04-19 16:54:32 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: Update to mercurial 4.1.3. SECURITY: "hg serve --stdio could be tricked into granting authorized users access to the Python debugger" "dispatch: protect against malicious 'hg serve --stdio' invocations (sec) Some shared-ssh installations assume that 'hg serve --stdio' is a safe command to run for minimally trusted users. Unfortunately, the messy implementation of argument parsing here meant that trying to access a repo named '--debugger' would give the user a pdb prompt, thereby sidestepping any hoped-for sandboxing. Serving repositories over HTTP(S) is unaffected. We're not currently hardening any subcommands other than 'serve'. If your service exposes other commands to users with arbitrary repository names, it is imperative that you defend against repository names of '--debugger' and anything starting with '--config'. The read-only mode of hg-ssh stopped working because it provided its hook configuration to "hg serve --stdio" via --config parameter. This is banned for security reasons now. This patch switches it to directly call ui.setconfig(). If your custom hosting infrastructure relies on passing --config to "hg serve --stdio", you'll need to find a different way to get that configuration into Mercurial, either by using ui.setconfig() as hg-ssh does in this patch, or by placing an hgrc file someplace where Mercurial will read it. mitrandir@fb.com provided some extra fixes for the dispatch code and for hg-ssh in places that I overlooked." |
2017-04-19 16:48:51 by Juan Francisco Cantero Hurtado | Files touched by this commit (2) |
Log message: SECURITY: "hg serve --stdio could be tricked into granting authorized users access to the Python debugger" "dispatch: protect against malicious 'hg serve --stdio' invocations (sec) Some shared-ssh installations assume that 'hg serve --stdio' is a safe command to run for minimally trusted users. Unfortunately, the messy implementation of argument parsing here meant that trying to access a repo named '--debugger' would give the user a pdb prompt, thereby sidestepping any hoped-for sandboxing. Serving repositories over HTTP(S) is unaffected. We're not currently hardening any subcommands other than 'serve'. If your service exposes other commands to users with arbitrary repository names, it is imperative that you defend against repository names of '--debugger' and anything starting with '--config'. The read-only mode of hg-ssh stopped working because it provided its hook configuration to "hg serve --stdio" via --config parameter. This is banned for security reasons now. This patch switches it to directly call ui.setconfig(). If your custom hosting infrastructure relies on passing --config to "hg serve --stdio", you'll need to find a different way to get that configuration into Mercurial, either by using ui.setconfig() as hg-ssh does in this patch, or by placing an hgrc file someplace where Mercurial will read it." Changes backported from 4.1.3. |
2017-04-16 23:10:18 by Remi Pointel | Files touched by this commit (3) |
Log message: update mercurial to 4.1.2. initial diff from juanfra@, who is the new maintainer. ok juanfra@. |
2016-06-27 10:39:28 by Jasper Lievisse Adriaanse | Files touched by this commit (2) |
Log message: security fixes for CVE-2016-3069, CVE-2016-3105, CVE-2016-3630, CVE-2016-3068 ok rpointel@ (MAINTAINER) |
2016-06-14 13:58:05 by Matthias Kilian | Files touched by this commit (1) |
Log message: Set HOMEPAGE to http://www.mercurial-scm.org and use it for MASTER_SITES, too. mercurial.selenic.com doesn't resolve, making it impossible to fetch the distfile, and http://www.selenic.com/mercurial/ (former HOMEPAGE) redirects to http://www.mercurial-scm.org, anyway. ok rpointel@ (maintainer) |
2016-06-14 03:47:43 by Dmitrij Czarkoff | Files touched by this commit (4) |
Log message: update to mercurial-3.8.3 Fixes: CVE-2016-3630 Mercurial: remote code execution in binary delta decoding CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos OK rpointel@ |
2015-12-03 03:07:58 by Remi Pointel | Files touched by this commit (3) |
Log message: update mercurial to 3.6.1. ok benoit@. |
2015-10-11 09:57:02 by Remi Pointel | Files touched by this commit (2) |
Log message: update mercurial to 3.5.2. ok aja@. |
2015-09-09 13:26:36 by Remi Pointel | Files touched by this commit (4) |
Log message: update mercurial to 3.5.1. ok and tweaks nigel@ sthen@ |
2015-08-12 00:13:56 by Antoine Jacoutot | Files touched by this commit (8) |
Log message: Needs devel/gettext-tools. |
2015-06-01 07:42:21 by Jasper Lievisse Adriaanse | Files touched by this commit (1) |
Log message: i made you a patch but i eated it |
2015-06-01 07:41:26 by Jasper Lievisse Adriaanse | Files touched by this commit (1) |
Log message: Security fix for CVE-2014-9462 ok rpointel@ (MAINTAINER) |
2015-06-01 07:40:56 by Jasper Lievisse Adriaanse | Files touched by this commit (2) |
Log message: Security fix for CVE-2014-9462 ok rpointel@ (MAINTAINER) |
2014-12-21 13:44:08 by Remi Pointel | Files touched by this commit (3) |
Log message: update mercurial to 3.2.3. ok shadchin@ (thanks). |
2011-07-20 02:30:21 by Landry Breuil | Files touched by this commit (1) |
Log message: Fix PLIST, the egginfo file is mercurial-${MODPY_EGG_VERSION}, not ${FULLPKGNAME}. No bump as it didn't package. |
2011-07-18 13:32:53 by Remi Pointel | Files touched by this commit (1) |
Log message: bump revision, package built was wrong (du to recent changes concerning fcntl.h). ok naddy@. |
2011-07-06 11:37:27 by Remi Pointel | Files touched by this commit (3) |
Log message: Update mercurial to 1.9. Added WANTLIB += ${MODPY_WANTLIB}. ok wcmaier@ (maintainer). |
2011-06-08 11:40:09 by Jasper Lievisse Adriaanse | Files touched by this commit (27) |
Log message: bump after default python version switch |
2011-05-09 02:01:37 by Federico G. Schwindt | Files touched by this commit (3) |
Log message: Update to 1.8.3. wcmaier (maintainer) ok. |
2011-03-27 18:11:34 by Federico G. Schwindt | Files touched by this commit (4) |
Log message: Update to mercurial 1.8.1. Original diff by me, better one supplied by Samir SAADA in ports@ wcmaier@ (maintainer) ok. |
2011-01-10 14:46:11 by Remi Pointel | Files touched by this commit (1) |
Log message: USE_GROFF=Yes |
2011-01-05 10:20:13 by Remi Pointel | Files touched by this commit (2) |
Log message: Update mercurial to 1.7.3. Removed USE_GROFF, not necessary. ok wcmaier@ (MAINTAINER). |
2010-11-21 17:19:37 by Federico G. Schwindt | Files touched by this commit (3) |
Log message: Update to mercurial 1.7.1. wcmaier@ (maintainer) ok. |
2010-11-15 12:46:10 by Marc Espie | Files touched by this commit (706) |
Log message: move depends to new style |
2010-10-18 11:48:13 by Marc Espie | Files touched by this commit (650) |
Log message: USE_GROFF=Yes |
2010-10-09 16:50:31 by Benoit Lecocq | Files touched by this commit (2) |
Log message: Update mercurial to 1.6.4 ok wcmaier@ |
2010-10-03 09:09:27 by Federico G. Schwindt | Files touched by this commit (1) |
Log message: Add gettext as RUN_DEPENDS as is required to build the .mo files. wcmaier@ (maintainer) ok. |
2010-09-01 13:20:36 by Federico G. Schwindt | Files touched by this commit (2) |
Log message: Update to 1.6.3. wcmaier@ jasper@ ok |
2010-08-30 16:09:45 by Jasper Lievisse Adriaanse | Files touched by this commit (11) |
Log message: bumps |
2010-07-25 01:22:27 by Benoit Lecocq | Files touched by this commit (3) |
Log message: - update mercurial to 1.6 - regen PLIST ok wcmaier@ |
2010-06-15 11:20:27 by Federico G. Schwindt | Files touched by this commit (2) |
Log message: Update to 1.5.4. ok maintainer. |
2010-05-03 14:23:08 by Will Maier | Files touched by this commit (3) |
Log message: Update to newly released 1.5.2. Based on patches and tests from Samir SAADA <zepard at gmail.com> and Vivien MOREAU <vpm at serengetty.fr>. While here, fix rst2man gunk in man pages (noticed by nicm@ and Robert Bronsdon <reashlin at gmail.com>, fix from nicm@ and schwarze@). Thanks for all the help! |
2010-01-12 07:04:29 by Will Maier | Files touched by this commit (2) |
Log message: Update to 1.4.2. Diff from Max Varencov <admin at phpcode dot us> -- thanks! |
2009-12-02 09:19:31 by Will Maier | Files touched by this commit (3) |
Log message: Update to 1.4.1. Use gettext MODULE, reported by jasper@. Thanks! |
2009-11-20 08:09:26 by Benoit Lecocq | Files touched by this commit (3) |
Log message: - update mercurial to 1.4 ok wcmaier@, ajacoutot@ |
2009-07-31 21:21:46 by Federico G. Schwindt | Files touched by this commit (4) |
Log message: Update to 1.3.1. martynas@ wcmaier@ ok While I'm here, add spaces around =. |
2009-04-26 10:27:36 by Will Maier | Files touched by this commit (2) |
Log message: Fix build (pointed out by naddy@, thanks). Upstream bug (now fixed) sets MODPY_EGG_VERSION=unknown, so we have to use that for now. Also, locale stuffs moved to i18n module. No bump because it didn't package anyway. Sigh. |
2009-04-24 06:23:14 by Will Maier | Files touched by this commit (3) |
Log message: Update to Mercurial 1.2.1 (long overdue): bugfixes and small features. Thanks to Simon Kuhnle for testing! |
2009-03-15 06:49:36 by Marc Espie | Files touched by this commit (21) |
Log message: A few python deps updates |
2009-01-02 06:07:37 by Damien Miller | Files touched by this commit (23) |
Log message: remove dependencies on removed python subpackages; prodded by sturm@ |
2009-01-01 10:27:22 by Will Maier | Files touched by this commit (2) |
Log message: Update to 1.1.2 (SECURITY). Prevent malicious clients from overwriting repo config file (and a few other bug fixes). |
2008-12-29 13:04:59 by Will Maier | Files touched by this commit (3) |
Log message: Update to mercurial 1.1. Lots of testing (and prods) from Simon Kuhnle <simon at blarzwurst dot de> and Vadim Zhukov <persgray at gmail dot com>. Thanks! |
2008-08-24 05:24:24 by Will Maier | Files touched by this commit (3) |
Log message: Update to 1.0.2. While here, switch to MODPY_EGG_VERSION, too. ok merdely@ |
2008-05-23 09:03:12 by Will Maier | Files touched by this commit (2) |
Log message: Update to the newly released 1.0.1. Add 'v2' to license marker, update mail address and add unzip to REGRESS_DEPENDS while here. ok merdely@ |
2008-05-13 06:02:54 by Federico G. Schwindt | Files touched by this commit (2) |
Log message: install hgweb.cgi and hgwebdir.cgi; wcmaier@ ok. |
2008-03-26 14:43:44 by Landry Breuil | Files touched by this commit (4) |
Log message: Update to mercurial 1.0, enable regress tests. From Will Maier (MAINTAINER), tested by myself. ok MAINTAINER |
2007-11-28 09:13:46 by Okan Demirmen | Files touched by this commit (4) |
Log message: - maintenance update to 0.9.5 from Will Maier (MAINTAINER) - clean-up just a bit from me ok jasper@ |
2007-10-08 02:22:44 by Steven Mestdagh | Files touched by this commit (216) |
Log message: bump PKGNAME after python version switch |
2007-10-04 20:00:45 by Michael Erdely | Files touched by this commit (3) |
Log message: Update to 0.9.4. From Will Maier (MAINTAINER) ok jolan@ |
2007-09-15 20:53:14 by Michael Erdely | Files touched by this commit (599) |
Log message: Remove quotes surrounding COMMENT*/PERMIT_*/BROKEN |
2007-04-05 09:38:13 by Marc Espie | Files touched by this commit (1270) |
Log message: base64 distinfo with SHA256 |
2006-12-22 21:17:20 by Jolan Luff | Files touched by this commit (4) |
Log message: update to 0.9.3, from maintainer will maier |
2006-10-09 08:29:54 by Alexandre Anriot | Files touched by this commit (1) |
Log message: Fix ownership problems. ok bernd@ |
2006-09-21 22:22:26 by Peter Valchev | Files touched by this commit (3) |
Log message: Update to mercurial-0.9.1, from new maintainer Will Maier <willmaier@ml1.net> |
2006-06-03 06:39:30 by Steven Mestdagh | Files touched by this commit (1) |
Log message: bump PKGNAME after switch to python 2.4 |