CVS commit: pkgsrc/databases

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Aug  9 17:10:25 UTC 2026

Modified Files:
        pkgsrc/databases/py-rrdtool: distinfo
        pkgsrc/databases/rrdtool: Makefile Makefile.common distinfo
        pkgsrc/databases/ruby-rrdtool: distinfo

Log Message:
*rrdtool: update to 1.11.0

Bugfixes

    hardening: size the rrd_diff scratch buffer for its largest input @somethingwithproof
    rrdtool dump now uses a numeric UTC offset (%z, e.g. +0900) instead
    of the locale timezone name (%Z) in XML comments. Locale timezone names
    can be encoded in a non-UTF-8 encoding (e.g. CJK locales), which breaks
    the XML declaration and causes rrdtool restore to fail with
    "Input is not proper UTF-8". The numeric offset is always ASCII.
    Note: existing dump files already containing locale timezone names remain
    valid XML as long as their encoding matches; newly created dumps will
    always contain pure ASCII in these comments. Issue #1173
    reported by @k79e, fix by @oetiker.
    Fix segfault when --x-grid is given without a trailing date-format
    field. The %n conversion in sscanf() is not counted in its return
    value, so stroff remained uninitialized when the input ended before
    the final : separator; the subsequent stroff != 0 guard read
    garbage and could branch into strdup() with a bogus offset. Fixed by
    initialising stroff = 0 so a partial match safely falls through to
    the existing "invalid x-grid format" error path. Issue #1291
    reported by @anvilvapre, fixed by @oetiker
    libdbi /derive now returns 0 instead of NaN when the underlying
    counter is constant (zero delta). Previously the strict d_value > 0
    guard skipped zero deltas the same way it skips negative ones (counter
    resets). Changed to d_value >= 0. Issue #550 reported by
    @bitionaire, fix by @oetiker.
    Fix a 1-byte heap buffer overflow in checkUnusedValues() that
    triggered *** buffer overflow detected *** SIGABRT under glibc
    fortified strcat() when reporting unused graph arguments. The
    function under-allocated by one byte and silently relied on that
    overflow to make its trailing : strip land on the right index.
    Refactored to size buffers correctly and prepend the separator
    rather than build-then-strip, so the two no longer have to agree.
    Reported and original fix attempt in PR #1329 by @ppisar,
    refactored fix by @oetiker
    Pad the Perl $RRDs::VERSION / $RRDp::VERSION numeric encoding so
    two-digit minor releases compare monotonically. The numeric version
    now uses three-digit zero-padded minor and patch fields, e.g.
    1.10.3 -> 1.010003 (previously 1.10003, which was numerically less
    than 1.9.0 -> 1.9000). The same encoding is now used by NUMVERS
    in configure.ac and win32/rrd_config.h. Note: consumers that
    previously tested $RRDs::VERSION >= 1.2 need to update their
    checks (use >= 1.002 or compare against the X.Y.Z string via the
    version pragma) -- this is unavoidable given the existing format
    could not represent two-digit minors monotonically. Issue #1330
    reported by @ppisar, fixed by @oetiker
    Y-axis labels keep enough fractional precision when the gridstep is
    fractional after SI scaling (e.g. values around 10G+), avoiding
    duplicate labels on tall graphs. Issue #1326 reported by @muusik,
    fixed by @oetiker
    Detect nroff support for -Wbreak at configure time, so building the
    text documentation works on systems with BSD-derived nroff (e.g.
    macOS /usr/bin/nroff). Issue #1323 reported by @gigaimage, fixed by
    @oetiker
    Fix SIGFPE divide-by-zero crash in rrdtool dump when processing
    fuzz-crafted RRD files that contain an RRA with pdp_cnt or
    pdp_step equal to zero. The modulo operation at the heart of the
    timestamp calculation is now guarded: such files are rejected with
    a descriptive error message instead of crashing.
    Issue #783 reported by @rwhitworth, fix by @oetiker.

Features

    rrdgraph: new --vertical-label-angle and --right-axis-label-angle options
    to rotate the two y axis legends independently at run time. The compile
    time RRDGRAPH_YLEGEND_ANGLE remains the default for both, so existing
    graphs are unchanged. Use --right-axis-label-angle 270 to have the right
    hand legend read from the top down. Suggested by @blappm in #1377,
    implemented by @oetiker
    rrdgraph: new --right-axis-range min:max option to suppress right axis
    labels outside the given range, so a bounded right axis is no longer
    labelled with values it cannot reach when the left axis range does not
    line up. Either end may be left empty for unbounded. Suggested by @blappm
    in #1377, implemented by @oetiker


To generate a diff of this commit:
cvs rdiff -u -r1.9 -r1.10 pkgsrc/databases/py-rrdtool/distinfo
cvs rdiff -u -r1.174 -r1.175 pkgsrc/databases/rrdtool/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/databases/rrdtool/Makefile.common
cvs rdiff -u -r1.64 -r1.65 pkgsrc/databases/rrdtool/distinfo
cvs rdiff -u -r1.15 -r1.16 pkgsrc/databases/ruby-rrdtool/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/databases/py-rrdtool/distinfo
diff -u pkgsrc/databases/py-rrdtool/distinfo:1.9 pkgsrc/databases/py-rrdtool/distinfo:1.10
--- pkgsrc/databases/py-rrdtool/distinfo:1.9    Sun Jun  7 13:28:05 2026
+++ pkgsrc/databases/py-rrdtool/distinfo        Sun Aug  9 17:10:25 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.9 2026/06/07 13:28:05 wiz Exp $
+$NetBSD: distinfo,v 1.10 2026/08/09 17:10:25 wiz Exp $
 
-BLAKE2s (rrdtool-1.10.3.tar.gz) = 4f392573ba1d45ac5c7b279a3eafef1c121a656ec9b6033344e9a27a40dd545e
-SHA512 (rrdtool-1.10.3.tar.gz) = 99149f69545c613eaee914a543113ac0744f2b1d18577b049cdfd0dc0cd74cf2ed00c01d094d40aeb047504fc0e81c52b932e87d51cfa9544a1aa8bcb2afceec
-Size (rrdtool-1.10.3.tar.gz) = 2996378 bytes
+BLAKE2s (rrdtool-1.11.0.tar.gz) = 25d15949016f89e327b2ec38f68fb97f4847fe1a971ded91af0f56f4f71986af
+SHA512 (rrdtool-1.11.0.tar.gz) = 3b84bb3370ef7a6e8eb98aa17074bdc6a507b14dc13e3982226bd08d3aadb88a4c92e75247fb920aecd1c48f7ad44e2ec3d9559fdafcc7a112150ec4df47e7a1
+Size (rrdtool-1.11.0.tar.gz) = 2994499 bytes

Index: pkgsrc/databases/rrdtool/Makefile
diff -u pkgsrc/databases/rrdtool/Makefile:1.174 pkgsrc/databases/rrdtool/Makefile:1.175
--- pkgsrc/databases/rrdtool/Makefile:1.174     Thu Jul 16 19:01:48 2026
+++ pkgsrc/databases/rrdtool/Makefile   Sun Aug  9 17:10:25 2026
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.174 2026/07/16 19:01:48 wiz Exp $
+# $NetBSD: Makefile,v 1.175 2026/08/09 17:10:25 wiz Exp $
 
-PKGREVISION= 1
 .include "Makefile.common"
 
 DEPENDS+=              dejavu-ttf>=2.26:../../fonts/dejavu-ttf

Index: pkgsrc/databases/rrdtool/Makefile.common
diff -u pkgsrc/databases/rrdtool/Makefile.common:1.10 pkgsrc/databases/rrdtool/Makefile.common:1.11
--- pkgsrc/databases/rrdtool/Makefile.common:1.10       Wed May 27 07:50:53 2026
+++ pkgsrc/databases/rrdtool/Makefile.common    Sun Aug  9 17:10:25 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.10 2026/05/27 07:50:53 adam Exp $
+# $NetBSD: Makefile.common,v 1.11 2026/08/09 17:10:25 wiz Exp $
 # used by databases/rrdtool/Makefile
 # used by databases/py-rrdtool/Makefile
 # used by databases/ruby-rrdtool/Makefile
 
-DISTNAME=      rrdtool-1.10.3
+DISTNAME=      rrdtool-1.11.0
 CATEGORIES=    databases graphics net
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=oetiker/}
 GITHUB_PROJECT=        rrdtool-1.x

Index: pkgsrc/databases/rrdtool/distinfo
diff -u pkgsrc/databases/rrdtool/distinfo:1.64 pkgsrc/databases/rrdtool/distinfo:1.65
--- pkgsrc/databases/rrdtool/distinfo:1.64      Wed May 27 07:50:53 2026
+++ pkgsrc/databases/rrdtool/distinfo   Sun Aug  9 17:10:25 2026
@@ -1,12 +1,11 @@
-$NetBSD: distinfo,v 1.64 2026/05/27 07:50:53 adam Exp $
+$NetBSD: distinfo,v 1.65 2026/08/09 17:10:25 wiz Exp $
 
-BLAKE2s (rrdtool-1.10.3.tar.gz) = 4f392573ba1d45ac5c7b279a3eafef1c121a656ec9b6033344e9a27a40dd545e
-SHA512 (rrdtool-1.10.3.tar.gz) = 99149f69545c613eaee914a543113ac0744f2b1d18577b049cdfd0dc0cd74cf2ed00c01d094d40aeb047504fc0e81c52b932e87d51cfa9544a1aa8bcb2afceec
-Size (rrdtool-1.10.3.tar.gz) = 2996378 bytes
+BLAKE2s (rrdtool-1.11.0.tar.gz) = 25d15949016f89e327b2ec38f68fb97f4847fe1a971ded91af0f56f4f71986af
+SHA512 (rrdtool-1.11.0.tar.gz) = 3b84bb3370ef7a6e8eb98aa17074bdc6a507b14dc13e3982226bd08d3aadb88a4c92e75247fb920aecd1c48f7ad44e2ec3d9559fdafcc7a112150ec4df47e7a1
+Size (rrdtool-1.11.0.tar.gz) = 2994499 bytes
 SHA1 (patch-bindings_perl-shared_Makefile.PL) = 839b4474e89b59002d1629425c5839e4df3b8f5c
 SHA1 (patch-bindings_tcl_Makefile.in) = 0d2515d57ca6a541d1647308d55587046a0a80e8
 SHA1 (patch-configure) = b00e25841ed5d043feaa3bdc76435d82c273a626
-SHA1 (patch-doc_Makefile.in) = 749309b6532fff991a89c317a57e24f91a2804d1
 SHA1 (patch-examples_Makefile.in) = 985e90539340c8bac9788e897c4b7b899fe9f6b1
 SHA1 (patch-examples_rrdcached_Makefile.in) = be06ac61b314e225d62f9f27da28c24fb6a1b84b
 SHA1 (patch-src_gettext.h) = 1254beedc267d901e154ea98599bdfddbe49ddc0

Index: pkgsrc/databases/ruby-rrdtool/distinfo
diff -u pkgsrc/databases/ruby-rrdtool/distinfo:1.15 pkgsrc/databases/ruby-rrdtool/distinfo:1.16
--- pkgsrc/databases/ruby-rrdtool/distinfo:1.15 Sun Jun  7 13:28:04 2026
+++ pkgsrc/databases/ruby-rrdtool/distinfo      Sun Aug  9 17:10:25 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.15 2026/06/07 13:28:04 wiz Exp $
+$NetBSD: distinfo,v 1.16 2026/08/09 17:10:25 wiz Exp $
 
-BLAKE2s (rrdtool-1.10.3.tar.gz) = 4f392573ba1d45ac5c7b279a3eafef1c121a656ec9b6033344e9a27a40dd545e
-SHA512 (rrdtool-1.10.3.tar.gz) = 99149f69545c613eaee914a543113ac0744f2b1d18577b049cdfd0dc0cd74cf2ed00c01d094d40aeb047504fc0e81c52b932e87d51cfa9544a1aa8bcb2afceec
-Size (rrdtool-1.10.3.tar.gz) = 2996378 bytes
+BLAKE2s (rrdtool-1.11.0.tar.gz) = 25d15949016f89e327b2ec38f68fb97f4847fe1a971ded91af0f56f4f71986af
+SHA512 (rrdtool-1.11.0.tar.gz) = 3b84bb3370ef7a6e8eb98aa17074bdc6a507b14dc13e3982226bd08d3aadb88a4c92e75247fb920aecd1c48f7ad44e2ec3d9559fdafcc7a112150ec4df47e7a1
+Size (rrdtool-1.11.0.tar.gz) = 2994499 bytes