archivers/brotli: Update to 1.2.1 - Patch CVSS 9.2 issue Approved by: with hat ports-secteam Security: be3687ad-cf33-11f1-bceb-0050569f0b831f82b2df36
brotli -- out-of-bounds write permits remote code executionentered 2026-10-22
Generic-purpose lossless compression algorithm
google:brotli from the portarchivers/brotli: Update to 1.2.1 - Patch CVSS 9.2 issue Approved by: with hat ports-secteam Security: be3687ad-cf33-11f1-bceb-0050569f0b831f82b2df36
archivers/brotli: update 1.1.0 -> 1.2.0 ChangeLog: https://github.com/google/brotli/compare/v1.1.0...v1.2.0 Reported by: diizzy Reviewed by: sunpoet, diizzy PR: 290637 Sponsored by: tipi.workbbf491027c
archivers/*: remove unneeded USES=pathfix The framework deals with .pc files without the needs of patching the source (since 2017)e3928d495a
archivers/brotli: Refresh distinfo for patch file Metadata for checksum changed (shorter by one character) in generated patch file from GitHub Approved by: portmgr (blanket, build fix)efee2412d5
archivers/brotli: update from 1.0.9 to 1.1.0 (+) PR: 272005 Reviewed by: diizzy Tested by: diizzy62740dc107
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
archivers: remove 'Created by' lines A big Thank You to the original contributors of these ports: * Aaron Dalton <aaron@FreeBSD.org> * Akinori MUSHA aka knu <knu@idaemons.org> * Albert Vernon <f3cun3c02@sneakemail.com> * Alex Dupre <ale@FreeBSD.org> * Alex Samorukov <samm@freebsd.org> * Alexander Kuehn <freebsd@nagilum.org> * Alexander Logvinov <ports@logvinov.com> * Alexander Zhuravlev <zaa@zaa.pp.ru> * Alexey Dokuchaev <danfe@FreeBSD.org> * Alexey Dokuchaev <danfe@regency.nsu.ru> * Anders Nordby <anders@FreeBSD.org> * Andreas Klemm <andreas@klemm.gtn.com> * Andreev Maxim * Andrew Pantyukhin <infofarmer@FreeBSD.org> * Andrey Chernov <ache@FreeBSD.org> * Andrey Kostenko <andrey@kostenko.name> * Anes Mukhametov <anes@anes.su> * Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>) * Ayumi M <ayu@commun.jp> * Carsten Larsen <cs@innolan.dk> * Chin-San Huang <chinsan.tw@gmail.com> * Chris D. Faulhaber <jedgar@FreeBSD.org> * Chris Larsen <darth@vader.dk> * Christopher Key <cjk32@cam.ac.uk> * Cyrille Lefevre <cyrille.lefevre@laposte.net> * Dmitry Sivachenko <demon@FreeBSD.org> * Emanuel Haupt <ehaupt@FreeBSD.org> * Emanuel Haupt <ehaupt@critical.ch> * Felix Palmen <felix@palmen-it.de> * Gabor Kovesdan <gabor@FreeBSD.org> * Gea-Suan Lin (gslin@ccca.nctu.edu.tw) * Gea-Suan Lin <gslin@gslin.org> * George Reid <greid@ukug.uk.freebsd.org> * Greg Lewis <glewis@FreeBSD.org> * Hsin-Han You <hhyou@cs.nctu.edu.tw> * Hye-Shik Chang * Hye-Shik Chang <perky@FreeBSD.org> * Igor Pokrovsky <tiamat@telegraph.spb.ru> * Jaap Boender <jaapb@kerguelen.org> * Jean-Yves Lefort <jylefort@brutele.be> * Jeff Burchell <toxic@doobie.com> * Jeffrey H. Johnson <CPE1704TKS@bellsouth.net> * Jerry Hicks * Joao Carlos Mendes Luis <jonny@jonny.eng.br> * John Marino <marino@FreeBSD.org> * José García Juanino <jjuanino@gmail.com> * Juergen Lock <nox@jelal.kn-bremen.de> * Kevin Golding <ports@caomhin.org> * Konstantin Reznichenko <kot@premierbank.dp.ua> * Koop Mast <kwm@FreeBSD.org> * Kubilay Kocak <koobs@FreeBSD.org> * Lars Thegler <lth@FreeBSD.org> * Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org> * Mark Felder <feld@FreeBSD.org> * Mark Kane <mark@mkproductions.org> * Mark Pulford <mark@kyne.com.au> * Martin Matuska <mm@FreeBSD.org> * Martin Wilke <miwi@FreeBSD.org> * Matteo Cypriani <mcy@lm7.fr> * Max Khon <fjoe@FreeBSD.org> * Maxim Sobolev <sobomax@FreeBSD.org> * Melvyn Sopacua <melvyn@magemana.nl> * Miguel Mendez <flynn@energyhq.homeip.net> * Nathan Ahlstrom <nra@FreeBSD.org> * Nicola Vitale <nivit@FreeBSD.org> * Patrick Seal <patseal@hyperhost.net> * Pav Lucistnik <pav@FreeBSD.org> * Per Wigren * Philippe Casidy <pcasidy@casidy.com> * Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Poul-Henning Kamp <phk@FreeBSD.org> * Radim Kolar * Radim Kolar <hsn@filez.com> * Radim Kolar <hsn@netmag.cz> * Rainer Hurling <rhurlin@gwdg.de> * Richard Gallamore <ultima@FreeBSD.org> * Roman Shterenzon <roman@xpert.com> * Ryan Steinmetz <zi@FreeBSD.org> * Sam Lawrance <boris@brooknet.com.au> * Sergey A. Osokin <osa@FreeBSD.org> * Sergey Skvortsov <skv@protey.ru> * Sir l33tname <sirl33tname@gmail.com> * Stanislav Sedov <ssedov@mbsd.msk.ru> * Stefan Esser <se@FreeBSD.org> * Steve Wills <swills@FreeBSD.org> * Steven Kreuzer <skreuzer@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net> * Sylvio Cesar <sylvio@FreeBSD.org> * TAKATSU Tomonari <tota@FreeBSD.org> * Thierry Thomas <thierry@pompo.net> * Thomas Abthorpe <thomas@goodking.ca> * Thomas Gellekum <tg@FreeBSD.org> * Vanilla I. Shu <vanilla@FreeBSD.org> * Wen Heping <wenheping@gmail.com> * Will Andrews <andrews@technologist.com> * Yarodin <yarodin@gmail.com> * Ying-Chieh Liao <ijliao@FreeBSD.org> * Yuri Victorovich <yuri@rawbw.com> * ache * adamw * antoine@FreeBSD.org * bf <bf2006a@yahoo.com> * chinsan <chinsan.tw@gmail.com> * giffunip@asme.org * gurkan@phys.ethz.ch * iblis <iblis.dif01@nctu.edu.tw> * ijliao * jmz * kwm@FreeBSD.org * lbartoletti <lbartoletti@FreeBSD.org> * mm * ports@c0decafe.net <ports@c0decafe.net> * samm@freebsd.org * swhetzel@gmail.com * will With hat: portmgr1ced9d288a
*/*: fix trailing whitespace in pkg-descr's Approved by: portmgr blanket7b4d1f0b36
archivers/brotli: Add CPE information Approved by: portmgr (blanket)92e4f70b8b
Remove # $FreeBSD$ from Makefiles.305f148f48
Update from 1.0.7 to 1.0.9. <Security note> Please consider updating brotli to version 1.0.9 (latest). Version 1.0.9 contains a fix to "integer overflow" problem. This happens when "one-shot" decoding API is used (or input chunk for streaming API is not limited), input size (chunk size) is larger than 2GiB, and input contains uncompressed blocks. After the overflow happens, `memcpy` is invoked with a gigantic `num` value, that will likely cause the crash. </Security note>90c2d3aac3
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371. This includes ports - with USE_GCC=yes or USE_GCC=any, - with USES=fortran, - using Mk/bsd.octave.mk which in turn features USES=fortran, and - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang, c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib plus, everything INDEX-11 shows with a dependency on lang/gcc9 now. PR: 238330ea8c8ec7da
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances. This includes ports - with USE_GCC=yes or USE_GCC=any, - with USES=fortran, - using Mk/bsd.octave.mk which in turn features USES=fortran, and - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang, c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib plus, as a double check, everything INDEX-11 showed depending on lang/gcc7. PR: 231590a9f015d155
Upgrade from 1.0.6 to 1.0.7.8b82b86765
Upgrade from 1.0.5 to 1.0.6.16ef5a7268
Add DOCS options to ports that should have one. Also various fixes related to said option. PR: 230864 Submitted by: mat exp-runs by: antoinee1bfdfbe56
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default. This includes ports - featuring USE_GCC=yes or USE_GCC=any, - featuring USES=fortran, - using Mk/bsd.octave.mk which in turn features USES=fortran, and those - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x, c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib. PR: 22254209f9633cb6
Upgrade from 1.0.4 to 1.0.5.bc6c809087
Remove the PORTDOCS duplicate. Do not bump PORTREVISION. PR: 2276491aae723a68
Upgrade from 1.0.2 to 1.0.4.08df9bba32
archivers/brotli: Update to 1.0.2 PR: 223966 Approved by: osa (maintainer)e6b0953e15
Add LICENSE_FILE - Do not silence installation message Approved by: portmgr (blanket)80dd5e925f
Bump PORTREVISION for ports depending on the canonical version of GCC (via Mk/bsd.default-versions.mk and lang/gcc) which has moved from GCC 5.4 to GCC 6.4 under most circumstances. This includes ports - with USE_GCC=yes or USE_GCC=any, - with USES=fortran, - using Mk/bsd.octave.mk which in turn features USES=fortran, and - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang, c++14-lang, c++0x, c11, or gcc-c++11-lib. PR: 219275e59c88cece
archivers/brotli: Move and update to 0.6.0 - Move from devel/libbrotli to archivers/brotli - Remove meta-project for library build - Bump epoch for meta 1.0 to upstream 0.6 update - Add MOVED entry - Switch from autoconf to cmake PR: 218813, 218851 Submitted by: Markus Kohlmeyer <rootservice@gmail.com> Approved by: maintainer time-out Differential Revision: https://reviews.freebsd.org/D11290fd9ed99e00
- Move archivers/brotli to archivers/py-brotli - Change MASTER_SITES to CHEESESHOP - Bump PORTREVISION05432cf9dc
- Update to 0.5.2 Changes: https://github.com/google/brotli/releasesa06052eea0
- Update to 0.4.0 Changes: https://github.com/google/brotli/releases8e9e8cb0f4
archivers/brotli, devel/libbrotli: fix buffer overflow Obtained from: upstream Security: 1bcfd963-e483-41b8-ab8e-bad5c3ce49c9 MFH: 2016Q1ba1bc35848
- Update to 0.3.0 Changes: https://github.com/google/brotli/releases5408c4270c
Cleanup GH_* and variables order. Sponsored by: Absolight7823fa4b7e
- Fix build on 9.x - Remove unnecessary USE_CXXSTD - Bump PORTREVISION for package change Obtained from: https://github.com/google/brotli/commit/4a7024dcde1aaf30d824ade299e70711a30f4399 MFH: 2015Q4b3d5de7d49
- Add brotli 0.2.0 Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. The specification of the Brotli Compressed Data Format is defined in the following internet draft: http://www.ietf.org/id/draft-alakuijala-brotli WWW: https://github.com/google/brotli9f31e8ca82