./devel/mercurial [fast, lightweight source control management]
[+] Add this package to your ports tracker

[ CVSweb ] [ Homepage ] [ RSS feed ]

Version: 5.0.2, Package name: mercurial-5.0.2
Maintained by: Juan Francisco Cantero Hurtado
Master sites:
Description-main
Mercurial is a distributed version control system which features:

- High-performance delta-compressed storage scheme.
- Optimized for disk layout and access efficiency.
- Complete cross-indexing of files and changesets.
- Bandwidth and CPU efficient HTTP and SSH sync protocols.
- Distributed development model supports unlimited numbers of
developers.
- Allows arbitrary merging between developer branches.
- No waiting for locks.
- Integrity checking on repository data.
- Append-only storage model with transaction journalling.
- Fast full-repository verification.

Description-x11
This package provides 'hg view' (aka hgk) functionality.

Filesize: 7033.981 KB
Version History (View Complete History)
  • (2019-07-25) Updated to version: mercurial-5.0.2
  • (2019-03-22) Updated to version: mercurial-4.9.1
  • (2019-02-25) Updated to version: mercurial-4.9
  • (2019-01-09) Updated to version: mercurial-4.8.2
  • (2018-12-06) Updated to version: mercurial-4.8.1
  • (2018-11-18) Updated to version: mercurial-4.8
  • (2018-04-25) Updated to version: mercurial-4.5.3
  • (2018-03-07) Updated to version: mercurial-4.5.2
  • (2017-12-04) Updated to version: mercurial-4.4.2
  • (2017-11-27) Updated to version: mercurial-4.4.1
[show/hide] View available PLISTS (Can be a lot of data)

CVS Commit History:

   2019-07-24 11:29:23 by Juan Francisco Cantero Hurtado | Files touched by this commit (3)
Log message:
Update to mercurial 5.0.2.
   2019-07-12 14:45:17 by Stuart Henderson | Files touched by this commit (859)
Log message:
replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes
   2019-05-20 16:15:31 by Christian Weisgerber | Files touched by this commit (488)
Log message:
Update gettext to 0.20.1.
Follow the upstream recommendations for packagers and switch to
multi-packages:
devel/gettext       -> devel/gettext,-runtime
devel/gettext-tools -> devel/gettext,-tools
(new)                  devel/gettext,-textstyle
   2019-05-15 06:04:43 by Kurt Mosiejczuk | Files touched by this commit (167)
Log message:
Add RUN_DEPENDS to TEST_DEPENDS automatically for ports using the
lang/python port module. I've not yet come up with a port that
would not need this and one can always set MODPY_TESTDEP to "no"
to prevent the module from touching TEST_DEPENDS.
Idea from afresh1 who pointed out the cpan module already does this.
aja "I support this move."
OK sthen@
   2019-03-21 12:32:47 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Update to mercurial 4.9.1.
   2019-02-24 11:06:42 by Juan Francisco Cantero Hurtado | Files touched by this commit (3)
Log message:
Update to mercurial 4.9.
   2019-02-02 09:08:07 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
SECURITY:
Prior to 4.9, it's possible to use symlinks and subrepositories to defeat
Mercurial's path-checking logic and write files outside a repository.
As per recommendation of Augie Fackler (Mercurial developer), I'm
creating a global rc file to disable subrepos or any future dangerous
feature. If you need subrepos support, you can enable it in the
project rc file (i.e. myrepo/.hg/hgrc). Use it only with really trusty
sources.
   2019-02-02 08:26:07 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
SECURITY:
Prior to 4.9, it's possible to use symlinks and subrepositories to defeat
Mercurial's path-checking logic and write files outside a repository.
As per recommendation of Augie Fackler (Mercurial developer), I'm
creating a global rc file to disable subrepos or any future dangerous
feature. If you need subrepos support, you can enable it in the
project rc file (i.e. myrepo/.hg/hgrc). Use it only with really trusty
sources.
   2019-02-01 14:30:00 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Add PORTHOME.
   2019-01-15 16:21:47 by Juan Francisco Cantero Hurtado | Files touched by this commit (1)
Log message:
Change WRKDIST for the development versions.
   2019-01-14 16:06:35 by Juan Francisco Cantero Hurtado | Files touched by this commit (1)
Log message:
Add additional MASTER_SITES.
   2019-01-08 16:08:07 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Update to mercurial 4.8.2.
   2018-12-07 11:34:09 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Fix zstd undefined symbols on non-clang platforms.
Reported by tedu@. Fix found by jca@.
   2018-12-05 15:38:55 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
SECURITY. Bugfix backported from 4.8.1:
"fix out-of-bounds access by negative parents read from revlog"
   2018-12-05 15:36:03 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Update to mercurial 4.8.1.
   2018-11-17 14:33:11 by Juan Francisco Cantero Hurtado | Files touched by this commit (6)
Log message:
Update to mercurial 4.8.
   2018-10-02 08:05:19 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
SECURITY: "Fix a potential out-of-bounds read in manifest parsing C code."
No CVE.
   2018-10-02 08:04:01 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
SECURITY: "Fix a potential out-of-bounds read in manifest parsing C code."
No CVE.
   2018-06-09 10:48:26 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
SECURITY. From upstream:
"Multiple issues found in mpatch.c with a fuzzer:
- OVE-20180430-0001
- OVE-20180430-0002
- OVE-20180430-0004
With the following fixes:
- mpatch: be more careful about parsing binary patch data (SEC)
- mpatch: protect against underflow in mpatch_apply (SEC)
- mpatch: ensure fragment start isn't past the end of orig (SEC)
- mpatch: fix UB in int overflows in gather() (SEC)
- mpatch: fix UB integer overflows in discard() (SEC)
- mpatch: avoid integer overflow in mpatch_decode (SEC)
- mpatch: avoid integer overflow in combine() (SEC)
No exploits are known at the time."
   2018-06-09 10:44:45 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
SECURITY. From upstream:
"Multiple issues found in mpatch.c with a fuzzer:
- OVE-20180430-0001
- OVE-20180430-0002
- OVE-20180430-0004
With the following fixes:
- mpatch: be more careful about parsing binary patch data (SEC)
- mpatch: protect against underflow in mpatch_apply (SEC)
- mpatch: ensure fragment start isn't past the end of orig (SEC)
- mpatch: fix UB in int overflows in gather() (SEC)
- mpatch: fix UB integer overflows in discard() (SEC)
- mpatch: avoid integer overflow in mpatch_decode (SEC)
- mpatch: avoid integer overflow in combine() (SEC)
No exploits are known at the time."
   2018-04-25 03:40:07 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Update to mercurial 4.5.3.
   2018-03-07 06:34:38 by Juan Francisco Cantero Hurtado | Files touched by this commit (3)
Log message:
Update to mercurial 4.5.2.
   2018-03-07 04:15:35 by Juan Francisco Cantero Hurtado | Files touched by this commit (3)
Log message:
Fix a vulnerability in the http server of mercurial. Patch from upstream.
https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29
   2017-08-11 17:28:01 by Juan Francisco Cantero Hurtado | Files touched by this commit (4)
Log message:
Update to mercurial 4.3.1.
   2017-08-10 13:40:58 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Update to mercurial 4.2.3.
https://www.mercurial-scm.org/pipermail/mercurial/2017-August/050522.html
CVE-2017-1000115:
Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused
to write to files outside the repository.
CVE-2017-1000116:
Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection
attacks by specifying a hostname starting with -oProxyCommand.
   2017-08-10 13:36:59 by Juan Francisco Cantero Hurtado | Files touched by this commit (4)
Log message:
Update to mercurial 4.2.3.
https://www.mercurial-scm.org/pipermail/mercurial/2017-August/050522.html
CVE-2017-1000115:
Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused
to write to files outside the repository.
CVE-2017-1000116:
Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection
attacks by specifying a hostname starting with -oProxyCommand.
   2017-07-19 16:16:56 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Update to mercurial 4.2.2.
   2017-06-13 14:30:26 by Ingo Schwarze | Files touched by this commit (3)
Log message:
mandoc handles reStructuredText output now, drop USE_GROFF and bump
   2017-06-10 19:11:03 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Update to mercurial 4.2.1.
   2017-05-06 10:45:34 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Comments.
   2017-05-03 16:57:10 by Juan Francisco Cantero Hurtado | Files touched by this commit (5)
Log message:
Update to mercurial 4.2.
   2017-04-27 20:25:36 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
My previous patch fixed the security bug but broke some commands.
Bug report and patch by Cedric Krier.
   2017-04-19 17:06:18 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Spaces/tabs.
   2017-04-19 16:54:32 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
Update to mercurial 4.1.3.
SECURITY: "hg serve --stdio could be tricked into granting authorized
users access to the Python debugger"
"dispatch: protect against malicious 'hg serve --stdio' invocations
(sec) Some shared-ssh installations assume that 'hg serve --stdio' is
a safe command to run for minimally trusted users. Unfortunately, the
messy implementation of argument parsing here meant that trying to
access a repo named '--debugger' would give the user a pdb prompt,
thereby sidestepping any hoped-for sandboxing. Serving repositories
over HTTP(S) is unaffected.
We're not currently hardening any subcommands other than 'serve'. If
your service exposes other commands to users with arbitrary repository
names, it is imperative that you defend against repository names of
'--debugger' and anything starting with '--config'.
The read-only mode of hg-ssh stopped working because it provided its
hook configuration to "hg serve --stdio" via --config parameter. This
is banned for security reasons now. This patch switches it to directly
call ui.setconfig(). If your custom hosting infrastructure relies on
passing --config to "hg serve --stdio", you'll need to find a
different way to get that configuration into Mercurial, either by
using ui.setconfig() as hg-ssh does in this patch, or by placing an
hgrc file someplace where Mercurial will read it. mitrandir@fb.com
provided some extra fixes for the dispatch code and for hg-ssh in
places that I overlooked."
   2017-04-19 16:48:51 by Juan Francisco Cantero Hurtado | Files touched by this commit (2)
Log message:
SECURITY: "hg serve --stdio could be tricked into granting authorized
users access to the Python debugger"
"dispatch: protect against malicious 'hg serve --stdio' invocations
(sec)
Some shared-ssh installations assume that 'hg serve --stdio' is a safe
command to run for minimally trusted users. Unfortunately, the messy
implementation of argument parsing here meant that trying to access a
repo named '--debugger' would give the user a pdb prompt, thereby
sidestepping any hoped-for sandboxing. Serving repositories over
HTTP(S) is unaffected.
We're not currently hardening any subcommands other than 'serve'. If
your service exposes other commands to users with arbitrary repository
names, it is imperative that you defend against repository names of
'--debugger' and anything starting with '--config'.
The read-only mode of hg-ssh stopped working because it provided its
hook configuration to "hg serve --stdio" via --config parameter. This
is banned for security reasons now. This patch switches it to directly
call ui.setconfig(). If your custom hosting infrastructure relies on
passing --config to "hg serve --stdio", you'll need to find a
different way to get that configuration into Mercurial, either by
using ui.setconfig() as hg-ssh does in this patch, or by placing an
hgrc file someplace where Mercurial will read it."
Changes backported from 4.1.3.
   2017-04-16 23:10:18 by Remi Pointel | Files touched by this commit (3)
Log message:
update mercurial to 4.1.2.
initial diff from juanfra@, who is the new maintainer.
ok juanfra@.
   2016-06-27 10:39:28 by Jasper Lievisse Adriaanse | Files touched by this commit (2)
Log message:
security fixes for CVE-2016-3069, CVE-2016-3105, CVE-2016-3630, CVE-2016-3068
ok rpointel@ (MAINTAINER)
   2016-06-14 13:58:05 by Matthias Kilian | Files touched by this commit (1)
Log message:
Set HOMEPAGE to http://www.mercurial-scm.org and use it for
MASTER_SITES, too.
mercurial.selenic.com doesn't resolve, making it impossible to fetch
the distfile, and http://www.selenic.com/mercurial/ (former HOMEPAGE)
redirects to http://www.mercurial-scm.org, anyway.
ok rpointel@ (maintainer)
   2016-06-14 03:47:43 by Dmitrij Czarkoff | Files touched by this commit (4)
Log message:
update to mercurial-3.8.3
Fixes:
CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
OK rpointel@
   2015-12-03 03:07:58 by Remi Pointel | Files touched by this commit (3)
Log message:
update mercurial to 3.6.1.
ok benoit@.
   2015-10-11 09:57:02 by Remi Pointel | Files touched by this commit (2)
Log message:
update mercurial to 3.5.2.
ok aja@.
   2015-09-09 13:26:36 by Remi Pointel | Files touched by this commit (4)
Log message:
update mercurial to 3.5.1.
ok and tweaks nigel@ sthen@
   2015-08-12 00:13:56 by Antoine Jacoutot | Files touched by this commit (8)
Log message:
Needs devel/gettext-tools.
   2015-06-01 07:42:21 by Jasper Lievisse Adriaanse | Files touched by this commit (1)
Log message:
i made you a patch but i eated it
   2015-06-01 07:41:26 by Jasper Lievisse Adriaanse | Files touched by this commit (1)
Log message:
Security fix for CVE-2014-9462
ok rpointel@ (MAINTAINER)
   2015-06-01 07:40:56 by Jasper Lievisse Adriaanse | Files touched by this commit (2)
Log message:
Security fix for CVE-2014-9462
ok rpointel@ (MAINTAINER)
   2014-12-21 13:44:08 by Remi Pointel | Files touched by this commit (3)
Log message:
update mercurial to 3.2.3.
ok shadchin@ (thanks).
   2011-07-20 02:30:21 by Landry Breuil | Files touched by this commit (1)
Log message:
Fix PLIST, the egginfo file is mercurial-${MODPY_EGG_VERSION}, not
${FULLPKGNAME}. No bump as it didn't package.
   2011-07-18 13:32:53 by Remi Pointel | Files touched by this commit (1)
Log message:
bump revision, package built was wrong (du to  recent changes concerning fcntl.h).
ok naddy@.
   2011-07-06 11:37:27 by Remi Pointel | Files touched by this commit (3)
Log message:
Update mercurial to 1.9. Added WANTLIB += ${MODPY_WANTLIB}.
ok wcmaier@ (maintainer).
   2011-06-08 11:40:09 by Jasper Lievisse Adriaanse | Files touched by this commit (27)
Log message:
bump after default python version switch
   2011-05-09 02:01:37 by Federico G. Schwindt | Files touched by this commit (3)
Log message:
Update to 1.8.3.
wcmaier (maintainer) ok.
   2011-03-27 18:11:34 by Federico G. Schwindt | Files touched by this commit (4)
Log message:
Update to mercurial 1.8.1.
Original diff by me, better one supplied by Samir SAADA in ports@
wcmaier@ (maintainer) ok.
   2011-01-10 14:46:11 by Remi Pointel | Files touched by this commit (1)
Log message:
USE_GROFF=Yes
   2011-01-05 10:20:13 by Remi Pointel | Files touched by this commit (2)
Log message:
Update mercurial to 1.7.3.
Removed USE_GROFF, not necessary.
ok wcmaier@ (MAINTAINER).
   2010-11-21 17:19:37 by Federico G. Schwindt | Files touched by this commit (3)
Log message:
Update to mercurial 1.7.1. wcmaier@ (maintainer) ok.
   2010-11-15 12:46:10 by Marc Espie | Files touched by this commit (706)
Log message:
move depends to new style
   2010-10-18 11:48:13 by Marc Espie | Files touched by this commit (650)
Log message:
USE_GROFF=Yes
   2010-10-09 16:50:31 by Benoit Lecocq | Files touched by this commit (2)
Log message:
Update mercurial to 1.6.4
ok wcmaier@
   2010-10-03 09:09:27 by Federico G. Schwindt | Files touched by this commit (1)
Log message:
Add gettext as RUN_DEPENDS as is required to build the .mo files.
wcmaier@ (maintainer) ok.
   2010-09-01 13:20:36 by Federico G. Schwindt | Files touched by this commit (2)
Log message:
Update to 1.6.3. wcmaier@ jasper@ ok
   2010-08-30 16:09:45 by Jasper Lievisse Adriaanse | Files touched by this commit (11)
Log message:
bumps
   2010-07-25 01:22:27 by Benoit Lecocq | Files touched by this commit (3)
Log message:
- update mercurial to 1.6
- regen PLIST
ok wcmaier@
   2010-06-15 11:20:27 by Federico G. Schwindt | Files touched by this commit (2)
Log message:
Update to 1.5.4. ok maintainer.
   2010-05-03 14:23:08 by Will Maier | Files touched by this commit (3)
Log message:
Update to newly released 1.5.2.
Based on patches and tests from Samir SAADA <zepard at gmail.com> and Vivien MOREAU
<vpm at serengetty.fr>. While here, fix rst2man gunk in man pages (noticed
by nicm@ and Robert Bronsdon <reashlin at gmail.com>, fix from nicm@ and
schwarze@). Thanks for all the help!
   2010-01-12 07:04:29 by Will Maier | Files touched by this commit (2)
Log message:
Update to 1.4.2.
Diff from Max Varencov <admin at phpcode dot us> -- thanks!
   2009-12-02 09:19:31 by Will Maier | Files touched by this commit (3)
Log message:
Update to 1.4.1.
Use gettext MODULE, reported by jasper@. Thanks!
   2009-11-20 08:09:26 by Benoit Lecocq | Files touched by this commit (3)
Log message:
- update mercurial to 1.4
ok wcmaier@, ajacoutot@
   2009-07-31 21:21:46 by Federico G. Schwindt | Files touched by this commit (4)
Log message:
Update to 1.3.1.  martynas@ wcmaier@ ok
While I'm here, add spaces around =.
   2009-04-26 10:27:36 by Will Maier | Files touched by this commit (2)
Log message:
Fix build (pointed out by naddy@, thanks).
Upstream bug (now fixed) sets MODPY_EGG_VERSION=unknown, so we have to
use that for now. Also, locale stuffs moved to i18n module. No bump
because it didn't package anyway. Sigh.
   2009-04-24 06:23:14 by Will Maier | Files touched by this commit (3)
Log message:
Update to Mercurial 1.2.1 (long overdue): bugfixes and small features.
Thanks to Simon Kuhnle for testing!
   2009-03-15 06:49:36 by Marc Espie | Files touched by this commit (21)
Log message:
A few python deps updates
   2009-01-02 06:07:37 by Damien Miller | Files touched by this commit (23)
Log message:
remove dependencies on removed python subpackages; prodded by sturm@
   2009-01-01 10:27:22 by Will Maier | Files touched by this commit (2)
Log message:
Update to 1.1.2 (SECURITY).
Prevent malicious clients from overwriting repo config file (and a
few other bug fixes).
   2008-12-29 13:04:59 by Will Maier | Files touched by this commit (3)
Log message:
Update to mercurial 1.1.
Lots of testing (and prods) from Simon Kuhnle <simon at blarzwurst dot de>
and Vadim Zhukov <persgray at gmail dot com>. Thanks!
   2008-08-24 05:24:24 by Will Maier | Files touched by this commit (3)
Log message:
Update to 1.0.2.
While here, switch to MODPY_EGG_VERSION, too.
ok merdely@
   2008-05-23 09:03:12 by Will Maier | Files touched by this commit (2)
Log message:
Update to the newly released 1.0.1.
Add 'v2' to license marker, update mail address and add unzip to
REGRESS_DEPENDS while here.
ok merdely@
   2008-05-13 06:02:54 by Federico G. Schwindt | Files touched by this commit (2)
Log message:
install hgweb.cgi and hgwebdir.cgi; wcmaier@ ok.
   2008-03-26 14:43:44 by Landry Breuil | Files touched by this commit (4)
Log message:
Update to mercurial 1.0, enable regress tests.
From Will Maier (MAINTAINER), tested by myself.
ok MAINTAINER
   2007-11-28 09:13:46 by Okan Demirmen | Files touched by this commit (4)
Log message:
- maintenance update to 0.9.5 from Will Maier (MAINTAINER)
- clean-up just a bit from me
ok jasper@
   2007-10-08 02:22:44 by Steven Mestdagh | Files touched by this commit (216)
Log message:
bump PKGNAME after python version switch
   2007-10-04 20:00:45 by Michael Erdely | Files touched by this commit (3)
Log message:
Update to 0.9.4.
From Will Maier (MAINTAINER)
ok jolan@
   2007-09-15 20:53:14 by Michael Erdely | Files touched by this commit (599)
Log message:
Remove quotes surrounding COMMENT*/PERMIT_*/BROKEN
   2007-04-05 09:38:13 by Marc Espie | Files touched by this commit (1270)
Log message:
base64 distinfo with SHA256
   2006-12-22 21:17:20 by Jolan Luff | Files touched by this commit (4)
Log message:
update to 0.9.3, from maintainer will maier
   2006-10-09 08:29:54 by Alexandre Anriot | Files touched by this commit (1)
Log message:
Fix ownership problems.
ok bernd@
   2006-09-21 22:22:26 by Peter Valchev | Files touched by this commit (3)
Log message:
Update to mercurial-0.9.1, from new maintainer Will Maier <willmaier@ml1.net>
   2006-06-03 06:39:30 by Steven Mestdagh | Files touched by this commit (1)
Log message:
bump PKGNAME after switch to python 2.4