lang/gcc16: Fix build on arm64
GCC upstream has removed conditional definitions for some constants,
defining them directly with the same values used on Linux. However,
FreeBSD values for the same constants are different. Then revert
upstream commit.
Co-authored-by: Mark Millard <marklmi26-fbsd at yahoo.com>
PR: 294062
Reported by: Luke Yasuda <jing at jing.rocks>
(cherry picked from commit 13e3a42d6eebb30b822e95a16ba09ce14bcb557d)
security/dogtag-pki: Fix incomplete javac classpath
base/tomcat-9.0 compiles against pki-common, whose classes carry
@JsonInclude, but does not list jackson-annotations, so javac cannot
resolve the annotation. Every other subproject already lists the jar.
Sponsored by: Netzkommune GmbH
devel/jackson-databind: Update to 2.22.2
Closes twelve vulnerabilities: @JsonView and @JsonIgnore could be
by-passed in several ways, polymorphic type validation was incomplete,
and deserialization reached out to DNS and arbitrary URL schemes.
Security: 0cb401f9-9f19-11f1-a655-3497f65b111b
Changes: https://github.com/FasterXML/jackson-databind/blob/2.x/release-notes/VERSION-2.x
Sponsored by: Netzkommune GmbH
security/vuxml: Document jackson vulnerabilities
jackson-databind before 2.22.2 by-passes @JsonView and @JsonIgnore in
several ways and validates polymorphic types incompletely, jackson-core
before 2.22.2 can be driven past StreamReadConstraints.
Security: 0cb401f9-9f19-11f1-a655-3497f65b111b
Security: 0cb42b4a-9f19-11f1-a655-3497f65b111b
Sponsored by: Netzkommune GmbH
devel/jackson-annotations: Update to 2.22
Adds @JsonApplyView to switch the active JsonView on submodels,
@JsonSerializeAs and @JsonDeserializeAs, JsonTypeInfo.As.NOTHING, and
writeTypeIdForDefaultImpl to suppress the type id of default types.
@JsonIncludeProperties gained an order property, @JsonFormat a radix
property, and @JacksonInject an optional flag for values that need not
be present.
2.20 raised the baseline from Java 6 to Java 8 and started shipping
SBOMs.
Changes: https://github.com/FasterXML/jackson-annotations/blob/2.x/release-notes/VERSION-2.x
Sponsored by: Netzkommune GmbH
databases/mysql{80,84,97}-server: Fix build on CPUs without SSE4.2
The crc32 code declares target("sse4.2"), but the _mm_crc32_* intrinsics
require the crc32 feature. With -mno-crc32, as emitted by -march=native
on a CPU without the instruction, sse4.2 no longer implies crc32 and the
build fails. Declare crc32 instead, including the two flatten wrappers that
inline those intrinsics.
PR: 275404
Sponsored by: Netzkommune GmbH
cad/freecad-devel: Mark BROKEN
Fails to build,
"The Addon Manager requires the Python package 'defusedxml', which was not found"
Reported by: pkg-fallout
