CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

archivers/brotli1.2.0,1

Generic-purpose lossless compression algorithm

Maintainer
osa@FreeBSD.org
Packages
brotli 1.2.0,1
Upstream
up to date
CPE
google:brotli from the port
WWW
https://github.com/google/brotli
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (1) · listed, port not fixed yet

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (33)

Ryan Steinmetz (zi) · 1.2.1,1
archivers/brotli: Update to 1.2.1

- Patch CVSS 9.2 issue

Approved by:	with hat ports-secteam
Security:	be3687ad-cf33-11f1-bceb-0050569f0b83
1f82b2df36
Sergey A. Osokin (osa) · 1.2.0,1
archivers/brotli: update 1.1.0 -> 1.2.0

ChangeLog:	https://github.com/google/brotli/compare/v1.1.0...v1.2.0

Reported by:	diizzy
Reviewed by:	sunpoet, diizzy
PR:		290637
Sponsored by:	tipi.work
bbf491027c
Baptiste Daroussin (bapt) · 1.1.0,1
archivers/*: remove unneeded USES=pathfix

The framework deals with .pc files without the needs of patching the
source (since 2017)
e3928d495a
Daniel Engberg (diizzy) · 1.1.0,1
archivers/brotli: Refresh distinfo for patch file

Metadata for checksum changed (shorter by one character) in generated
patch file from GitHub

Approved by:	portmgr (blanket, build fix)
efee2412d5
Sergey A. Osokin (osa) · 1.1.0,1
archivers/brotli: update from 1.0.9 to 1.1.0 (+)

PR:		272005
Reviewed by:	diizzy
Tested by:	diizzy
62740dc107
Stefan Eßer (se) · 1.0.9,1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.0.9,1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.0.9,1
archivers: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Albert Vernon <f3cun3c02@sneakemail.com>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Kuehn <freebsd@nagilum.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexander Zhuravlev <zaa@zaa.pp.ru>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alexey Dokuchaev <danfe@regency.nsu.ru>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Andreas Klemm <andreas@klemm.gtn.com>
  *  Andreev Maxim
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Chernov <ache@FreeBSD.org>
  *  Andrey Kostenko <andrey@kostenko.name>
  *  Anes Mukhametov <anes@anes.su>
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Ayumi M <ayu@commun.jp>
  *  Carsten Larsen <cs@innolan.dk>
  *  Chin-San Huang <chinsan.tw@gmail.com>
  *  Chris D. Faulhaber <jedgar@FreeBSD.org>
  *  Chris Larsen <darth@vader.dk>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Cyrille Lefevre <cyrille.lefevre@laposte.net>
  *  Dmitry Sivachenko <demon@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Felix Palmen <felix@palmen-it.de>
  *  Gabor Kovesdan <gabor@FreeBSD.org>
  *  Gea-Suan Lin (gslin@ccca.nctu.edu.tw)
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Greg Lewis <glewis@FreeBSD.org>
  *  Hsin-Han You <hhyou@cs.nctu.edu.tw>
  *  Hye-Shik Chang
  *  Hye-Shik Chang <perky@FreeBSD.org>
  *  Igor Pokrovsky <tiamat@telegraph.spb.ru>
  *  Jaap Boender <jaapb@kerguelen.org>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Jeff Burchell <toxic@doobie.com>
  *  Jeffrey H. Johnson <CPE1704TKS@bellsouth.net>
  *  Jerry Hicks
  *  Joao Carlos Mendes Luis <jonny@jonny.eng.br>
  *  John Marino <marino@FreeBSD.org>
  *  José García Juanino <jjuanino@gmail.com>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  Kevin Golding <ports@caomhin.org>
  *  Konstantin Reznichenko <kot@premierbank.dp.ua>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Lars Thegler <lth@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Kane <mark@mkproductions.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Matteo Cypriani <mcy@lm7.fr>
  *  Max Khon <fjoe@FreeBSD.org>
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Melvyn Sopacua <melvyn@magemana.nl>
  *  Miguel Mendez <flynn@energyhq.homeip.net>
  *  Nathan Ahlstrom <nra@FreeBSD.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Patrick Seal <patseal@hyperhost.net>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Per Wigren
  *  Philippe Casidy <pcasidy@casidy.com>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Poul-Henning Kamp <phk@FreeBSD.org>
  *  Radim Kolar
  *  Radim Kolar <hsn@filez.com>
  *  Radim Kolar <hsn@netmag.cz>
  *  Rainer Hurling <rhurlin@gwdg.de>
  *  Richard Gallamore <ultima@FreeBSD.org>
  *  Roman Shterenzon <roman@xpert.com>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Sam Lawrance <boris@brooknet.com.au>
  *  Sergey A. Osokin <osa@FreeBSD.org>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Sir l33tname <sirl33tname@gmail.com>
  *  Stanislav Sedov <ssedov@mbsd.msk.ru>
  *  Stefan Esser <se@FreeBSD.org>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steven Kreuzer <skreuzer@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas Abthorpe <thomas@goodking.ca>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Vanilla I. Shu <vanilla@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Will Andrews <andrews@technologist.com>
  *  Yarodin <yarodin@gmail.com>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  Yuri Victorovich <yuri@rawbw.com>
  *  ache
  *  adamw
  *  antoine@FreeBSD.org
  *  bf <bf2006a@yahoo.com>
  *  chinsan <chinsan.tw@gmail.com>
  *  giffunip@asme.org
  *  gurkan@phys.ethz.ch
  *  iblis <iblis.dif01@nctu.edu.tw>
  *  ijliao
  *  jmz
  *  kwm@FreeBSD.org
  *  lbartoletti <lbartoletti@FreeBSD.org>
  *  mm
  *  ports@c0decafe.net <ports@c0decafe.net>
  *  samm@freebsd.org
  *  swhetzel@gmail.com
  *  will

With hat:	portmgr
1ced9d288a
Dmitry Marakasov (amdmi3) · 1.0.9,1
*/*: fix trailing whitespace in pkg-descr's

Approved by:	portmgr blanket
7b4d1f0b36
Bernhard Froehlich (decke) · 1.0.9,1
archivers/brotli: Add CPE information

Approved by:	portmgr (blanket)
92e4f70b8b
Mathieu Arnold (mat) · 1.0.9,1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Sergey A. Osokin (osa) · 1.0.9,1
Update from 1.0.7 to 1.0.9.

<Security note>

Please consider updating brotli to version 1.0.9 (latest).

Version 1.0.9 contains a fix to "integer overflow" problem.  This
happens when "one-shot" decoding API is used (or input chunk for
streaming API is not limited), input size (chunk size) is larger
than 2GiB, and input contains uncompressed blocks. After the
overflow happens, `memcpy` is invoked with a gigantic `num`
value, that will likely cause the crash.

</Security note>
90c2d3aac3
Gerald Pfeifer (gerald) · 1.0.7_2,1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Gerald Pfeifer (gerald) · 1.0.7_1,1
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Sergey A. Osokin (osa) · 1.0.7,1
Upgrade from 1.0.6 to 1.0.7.
8b82b86765
Sergey A. Osokin (osa) · 1.0.6,1
Upgrade from 1.0.5 to 1.0.6.
16ef5a7268
Mathieu Arnold (mat) · 1.0.5_1,1
Add DOCS options to ports that should have one.

Also various fixes related to said option.

PR:		230864
Submitted by:	mat
exp-runs by:	antoine
e1bfdfbe56
Gerald Pfeifer (gerald) · 1.0.5_1,1
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6
Sergey A. Osokin (osa) · 1.0.5,1
Upgrade from 1.0.4 to 1.0.5.
bc6c809087
Sergey A. Osokin (osa) · 1.0.4,1
Remove the PORTDOCS duplicate. Do not bump PORTREVISION.

PR:	227649
1aae723a68
Sergey A. Osokin (osa) · 1.0.4,1
Upgrade from 1.0.2 to 1.0.4.
08df9bba32
Bernard Spil (brnrd) · 1.0.2,1
archivers/brotli: Update to 1.0.2

PR:		223966
Approved by:	osa (maintainer)
e6b0953e15
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.0_1,1
Add LICENSE_FILE

- Do not silence installation message

Approved by:	portmgr (blanket)
80dd5e925f
Gerald Pfeifer (gerald) · 0.6.0_1,1
Bump PORTREVISION for ports depending on the canonical version of GCC (via Mk/bsd.default-versions.mk and lang/gcc) which has moved from GCC 5.4 to GCC 6.4 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
   c++14-lang, c++0x, c11, or gcc-c++11-lib.

PR:		219275
e59c88cece
Bernard Spil (brnrd) · 0.6.0,1
archivers/brotli: Move and update to 0.6.0

- Move from devel/libbrotli to archivers/brotli
 - Remove meta-project for library build
 - Bump epoch for meta 1.0 to upstream 0.6 update
 - Add MOVED entry
 - Switch from autoconf to cmake

PR:		218813, 218851
Submitted by:	Markus Kohlmeyer <rootservice@gmail.com>
Approved by:	maintainer time-out
Differential Revision:	https://reviews.freebsd.org/D11290
fd9ed99e00
Sunpoet Po-Chuan Hsieh (sunpoet)
- Move archivers/brotli to archivers/py-brotli - Change MASTER_SITES to CHEESESHOP - Bump PORTREVISION
05432cf9dc
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.5.2
- Update to 0.5.2

Changes:	https://github.com/google/brotli/releases
a06052eea0
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.4.0
- Update to 0.4.0

Changes:	https://github.com/google/brotli/releases
8e9e8cb0f4
Jan Beich (jbeich) · 0.3.0_1
archivers/brotli, devel/libbrotli: fix buffer overflow

Obtained from:	upstream
Security:	1bcfd963-e483-41b8-ab8e-bad5c3ce49c9
MFH:		2016Q1
ba1bc35848
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.3.0
- Update to 0.3.0

Changes:	https://github.com/google/brotli/releases
5408c4270c
Mathieu Arnold (mat) · 0.2.0_1
Cleanup GH_* and variables order.

Sponsored by:	Absolight
7823fa4b7e
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.2.0_1
- Fix build on 9.x - Remove unnecessary USE_CXXSTD - Bump PORTREVISION for package change

Obtained from:	https://github.com/google/brotli/commit/4a7024dcde1aaf30d824ade299e70711a30f4399
MFH:		2015Q4
b3d5de7d49
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.2.0
- Add brotli 0.2.0

Brotli is a generic-purpose lossless compression algorithm that compresses data
using a combination of a modern variant of the LZ77 algorithm, Huffman coding
and 2nd order context modeling, with a compression ratio comparable to the best
currently available general-purpose compression methods. It is similar in speed
with deflate but offers more dense compression.

The specification of the Brotli Compressed Data Format is defined in the
following internet draft: http://www.ietf.org/id/draft-alakuijala-brotli

WWW: https://github.com/google/brotli
9f31e8ca82