Zip is a compression and file packaging utility. It is compatible with
PKZIP 2.04g (Phil Katz ZIP) for MSDOS systems. There is a companion to zip
called unzip (of course) which you can also install from the ports/package
system.
===> The following configuration options are available for zip-3.0_6:
DOCS=on: Build and/or install documentation
===> Use 'make config' to modify these settings
archivers/zip: fix command injection vulnerability
Insufficient quoting in the -T option gave rise to the possibility of
a command injection. Apply a fix from the Debian project.
Reported by: nimaje (via IRC)
See
also: https://sintonen.fi/advisories/infozip-test-option-command-injection.txt
MFH: 2026Q3
archivers/zip: apply Debian patches
These patches fix some security and other issues:
- ( 7) zipnote.c: Close in_file instead of undefined file x
- ( 8) Use format specifier %s to print strings, not the string itself
- (14) Fix buffer overflow when filename contains unicode characters
- (15) Fix buffer overflow when using '-T -TT'
- (16) Fix symlink update detection
Obtained from: https://salsa.debian.org/sanvila/zip
Reported by: diizzy
Reviewed by: diizzy
Security: CVE-2018-13410
MFH: 2026Q1
archivers/zip: grab maintainership
This one is too important to stay unmaintained.
While we are at it, silence bogus warnings -- the code base is in K&R
C and missing prototypes on function definitions are to be expected.
*/*: Update WWW to use HTTPS for sourceforge.net projects
Homepage link is permanent redirected to its HTTPS counterpart
Issue reported by repology : https://repology.org/repository/freebsd/problems
Approved by: portmgr (blanket)
PR: 274888
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
archivers: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* Aaron Dalton <aaron@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Albert Vernon <f3cun3c02@sneakemail.com>
* Alex Dupre <ale@FreeBSD.org>
* Alex Samorukov <samm@freebsd.org>
* Alexander Kuehn <freebsd@nagilum.org>
* Alexander Logvinov <ports@logvinov.com>
* Alexander Zhuravlev <zaa@zaa.pp.ru>
* Alexey Dokuchaev <danfe@FreeBSD.org>
* Alexey Dokuchaev <danfe@regency.nsu.ru>
* Anders Nordby <anders@FreeBSD.org>
(Only the first 15 lines of the commit message are shown above )
Update MAINTAINER on my ports (and created by line) to my @FreeBSD.org email
Approved by: adamw (mentor)
Differential Revision: https://reviews.freebsd.org/D9125
- Switch to .tar.gz distfile (contents are identical, but new file is a bit
smaller and does not require external EXTRACT_DEPENDS)
- Do not hardcode list of programs twice, use ${PLIST_FILES:T} second time
- Use official spelling of PKZIP in COMMENT
- Unsplit PLIST_FILES definitions (join into one line) similar to MAN1
- Install seemingly useful documentation files
- Pacify portlint(1) and cleanup things a bit
- Canonicalize and reformat Makefile header while I am here
