CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

archivers/cabextract 1.11_1

Program to extract Microsoft cabinet (.CAB) files

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.11_1
Upstream
up to date
Last update
to 1.11_1 · 62ed195754
Quarterly
2026Q4: 1.11_1
WWW
https://www.cabextract.org.uk/
Links
cgit · VuXML

Install

Package
# pkg install cabextract
installs 1.11_1 from latest; from quarterly (2026Q4) 1.11_1
Port
# cd /usr/ports/archivers/cabextract && make install clean
# make -C /usr/ports/archivers/cabextract config  # change options first
Size
74 KiB download · 191 KiB installed
Depends on
nothing
License
GPLv3
Options
1 of 1 on in the package: DOCS

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.11_11.11_1–
FreeBSD 151.11_11.11_1–
FreeBSD 141.11_11.11_11.11_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.11_11.11_1–
FreeBSD 141.11_11.11_11.11_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.11_1.

Fixed (4)

Show 4 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (49)

Po-Chuan Hsieh (sunpoet) · 1.11_1
*/*: Remove GNU_CONFIGURE_MANPREFIX=${PREFIX}/share after 9fd7ee1cdf6cbd5528159b58a966e1a40e2909a9
62ed195754
Po-Chuan Hsieh (sunpoet) · 1.11_1
archivers/cabextract: Sort PLIST after 45d5797433863e202be991d97159ed607fee0b64
96b350cf58
Muhammad Moinur Rahman (bofh) · 1.11_1
archivers/cabextract: Moved man to share/man

Approved by:    portmgr (blanket)
45d5797433
Po-Chuan Hsieh (sunpoet) · 1.11
archivers/cabextract: Update to 1.11

- Update WWW
- Reformat pkg-descr

Changes:	https://github.com/kyz/libmspack/blob/master/cabextract/NEWS
d4898f6695
Stefan Eßer (se) · 1.9.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.9.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.9.1
archivers: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Albert Vernon <f3cun3c02@sneakemail.com>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Kuehn <freebsd@nagilum.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexander Zhuravlev <zaa@zaa.pp.ru>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alexey Dokuchaev <danfe@regency.nsu.ru>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Andreas Klemm <andreas@klemm.gtn.com>
  *  Andreev Maxim
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Chernov <ache@FreeBSD.org>
  *  Andrey Kostenko <andrey@kostenko.name>
  *  Anes Mukhametov <anes@anes.su>
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Ayumi M <ayu@commun.jp>
  *  Carsten Larsen <cs@innolan.dk>
  *  Chin-San Huang <chinsan.tw@gmail.com>
  *  Chris D. Faulhaber <jedgar@FreeBSD.org>
  *  Chris Larsen <darth@vader.dk>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Cyrille Lefevre <cyrille.lefevre@laposte.net>
  *  Dmitry Sivachenko <demon@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Felix Palmen <felix@palmen-it.de>
  *  Gabor Kovesdan <gabor@FreeBSD.org>
  *  Gea-Suan Lin (gslin@ccca.nctu.edu.tw)
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Greg Lewis <glewis@FreeBSD.org>
  *  Hsin-Han You <hhyou@cs.nctu.edu.tw>
  *  Hye-Shik Chang
  *  Hye-Shik Chang <perky@FreeBSD.org>
  *  Igor Pokrovsky <tiamat@telegraph.spb.ru>
  *  Jaap Boender <jaapb@kerguelen.org>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Jeff Burchell <toxic@doobie.com>
  *  Jeffrey H. Johnson <CPE1704TKS@bellsouth.net>
  *  Jerry Hicks
  *  Joao Carlos Mendes Luis <jonny@jonny.eng.br>
  *  John Marino <marino@FreeBSD.org>
  *  José García Juanino <jjuanino@gmail.com>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  Kevin Golding <ports@caomhin.org>
  *  Konstantin Reznichenko <kot@premierbank.dp.ua>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Lars Thegler <lth@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Kane <mark@mkproductions.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Matteo Cypriani <mcy@lm7.fr>
  *  Max Khon <fjoe@FreeBSD.org>
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Melvyn Sopacua <melvyn@magemana.nl>
  *  Miguel Mendez <flynn@energyhq.homeip.net>
  *  Nathan Ahlstrom <nra@FreeBSD.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Patrick Seal <patseal@hyperhost.net>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Per Wigren
  *  Philippe Casidy <pcasidy@casidy.com>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Poul-Henning Kamp <phk@FreeBSD.org>
  *  Radim Kolar
  *  Radim Kolar <hsn@filez.com>
  *  Radim Kolar <hsn@netmag.cz>
  *  Rainer Hurling <rhurlin@gwdg.de>
  *  Richard Gallamore <ultima@FreeBSD.org>
  *  Roman Shterenzon <roman@xpert.com>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Sam Lawrance <boris@brooknet.com.au>
  *  Sergey A. Osokin <osa@FreeBSD.org>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Sir l33tname <sirl33tname@gmail.com>
  *  Stanislav Sedov <ssedov@mbsd.msk.ru>
  *  Stefan Esser <se@FreeBSD.org>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steven Kreuzer <skreuzer@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas Abthorpe <thomas@goodking.ca>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Vanilla I. Shu <vanilla@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Will Andrews <andrews@technologist.com>
  *  Yarodin <yarodin@gmail.com>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  Yuri Victorovich <yuri@rawbw.com>
  *  ache
  *  adamw
  *  antoine@FreeBSD.org
  *  bf <bf2006a@yahoo.com>
  *  chinsan <chinsan.tw@gmail.com>
  *  giffunip@asme.org
  *  gurkan@phys.ethz.ch
  *  iblis <iblis.dif01@nctu.edu.tw>
  *  ijliao
  *  jmz
  *  kwm@FreeBSD.org
  *  lbartoletti <lbartoletti@FreeBSD.org>
  *  mm
  *  ports@c0decafe.net <ports@c0decafe.net>
  *  samm@freebsd.org
  *  swhetzel@gmail.com
  *  will

With hat:	portmgr
1ced9d288a
Po-Chuan Hsieh (sunpoet) · 1.9.1
archivers/cabextract: Convert PLIST_FILES and PORTDOCS to PLIST entries
d3072779fe
Bernhard Froehlich (decke) · 1.9.1
archivers/cabextract: Fix CPE information because current one is deprecated

Approved by:    portmgr (blanket)
c63c431768
Mathieu Arnold (mat) · 1.9.1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.9.1
Remove no-op command

The manpage is already installed in do-install:
5334cecf99
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.9.1
Update to 1.9.1

- Add my LOCAL to MASTER_SITES
- Simplify PORTDOCS installation

Changes:	https://www.cabextract.org.uk/#changes
e81d69805b
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.9_2
Register iconv dependency

- Bump PORTREVISION for dependency and package change

PR:		233055
Submitted by:	Lorenzo Salvadore <phascolarctos@protonmail.ch>
f73a79e22d
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.9_1
Update distinfo

- Bump PORTREVISION for package change

Upstream rerolled the tarball.
Around 5,000 lines of differences are tab/space changes.

The original tarball is available at https://people.freebsd.org/~sunpoet/cabextract/cabextract-1.9.tar.gz
The diff -bru result is available at https://people.freebsd.org/~sunpoet/cabextract/cabextract.diff
83d1990aac
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.9
Update to 1.9

- Convert to options target helper

Changes:	https://www.cabextract.org.uk/#changes
8162abee34
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.8
Update to 1.8

Changes:	https://www.cabextract.org.uk/#changes
6c0b051993
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.7
Update to 1.7

- Update MASTER_SITES

Changes:	https://www.cabextract.org.uk/#changes
8cad07b5cd
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.6
Take maintainership
495f8aba76
Mark Felder (feld) · 1.6
Reset MAINTAINER

Multiple consecutive previous maintainer timeouts
c1ae883327
Dmitry Marakasov (amdmi3) · 1.6
- Update WWW

Approved by:	portmgr blanket
1a8bb85ccb
Xin LI (delphij) · 1.6
Security update to 1.6

PR:		198955
Security:	cc7548ef-06e1-11e5-8fda-002590263bf5
Security:	CVE-2014-9556
Security:	cfb12f02-06e1-11e5-8fda-002590263bf5
Security:	CVE-2015-2060
Submitted by:	Jason Unovitch <jason unovitch gmail com>
Reported by:	Sevan Janiyan <venture37 geeklan co uk>
Approved by:	maintainer timeout
MFH:		2015Q2
41b5957ac4
Dmitry Marakasov (amdmi3) · 1.4
- Add CPE info - Add LICENSE_FILE

Approved by:	portmgr blanket
6089e8defb
Baptiste Daroussin (bapt) · 1.4
Support stage
ea5b410a89
Baptiste Daroussin (bapt) · 1.4
Add NO_STAGE all over the place in preparation for the staging support (cat: archivers)
b80ec3e204
Alexey Dokuchaev (danfe) · 1.4
- Trim Makefile header per new bylaws - Drop indefinite article from COMMENT - Define LICENSE (and remove COPYING from portdocs) - Unmute installation commands - Convert NOPORTDOCS -> PORT_OPTIONS:MDOCS

Approved by:	maintainer (gabor)
61e6abfaa4
Gabor Kovesdan (gabor) · 1.4
- Update to 1.4
b9b2a12a31
Martin Wilke (miwi) · 1.3
- Get Rid MD5 support

With hat:	portmgr (myself)
65e190c0f0
Gabor Kovesdan (gabor) · 1.3
Update to 1.3, which fixes two security bugs. Detailed description from the author follows.

Bug 1: Infinite loop in MS-ZIP decoder [1]

The MS-ZIP and Quantum decoders read bits in roughly the same way as the LZX
decoder, however they don't have "inject two fake bytes" code.

In the situation where read() provides zero bytes, e.g. at the end of file or
end of a CAB block, the LZX decoder handles this by injecting two fake bytes,
then returns an error on subsequent calls. MS-ZIP and Quantum instead return
zero bytes without error. However, all three decoders are written to presume
they will get at least one byte. So this could lead to an infinite loop in
MS-ZIP and Quantum. An infinite loop has definitely been seen in MS-ZIP -
there is a while loop in inflate() of an uncompressed block (block type 0)
which won't end until enough input is provided.

Partial solution: change "if (read < 0)" to "if (read <= 0)" in mszipd.c and
qtmd.c.
- http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=90

However, this breaks compatibility with a number of MS-ZIP/Quantum encoded
files. A full solution would be to implement the same bit-reading system as
LZX. I've done this now, merging all the bit-reading and huffman-reading
code into two new files; readbits.h and readhuff.h
- http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=95

There are several further changes made to integrate readbits.h and readhuff.h,
I recommend you look at the latest version in the source repository.
- http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/

Bug 2: Segmentation fault in "cabextract -t"

This bug may not affect you, depending on your implementation of
mspack_system->write(). It does cause a segfault in cabextract's
cabx_write() in "-t" (test archive) mode.

In the Quantum decoder, when the window wrap is reached, all currently
unwritten data is flushed to disk. Sometimes, less data is needed than
is flushed, which makes the variable out_bytes negative.

When the main decoding loop finishes, a final call to write() is made if
out_bytes is not zero. In that situation, it calls mspack_system->write() with
a negative byte count, e.g. -129 bytes. You should reject this. In
cabextract's "-t" mode, this is not caught, but instead converted to an
unsigned integer and passed to md5_process_bytes(), which tries to
read e.g. 4294967167 bytes, causing it to read beyond the end of
valid process space and thus segfault.

Solution:
- Break out to the end of the decoding loop immediately if the flush would be more than needed.
   http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/qtmd.c?r1=114&r2=113
- Add checking of the "bytes" argument in mspack_system read() / write() implementations, just to be sure.
   http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=118

Security:	SA40719 [1]
cfdadd1d6c
Pav Lucistnik (pav) · 1.2
- Remove USE_GETOPT_LONG which is a no-op since March 2007
dad0d0873a
Maxim Sobolev (sobomax) · 1.2
Update MASTER_SITE and description to point to the new home page.

Submitted by:	Stuart Caie (author)
8ef9a651dc
Gabor Kovesdan (gabor) · 1.2
- Update to 1.2 - Remove unnecessary patch - Style

Approved by:	erwin (mentor)
d420ebcb28
Gabor Kovesdan (gabor) · 1.1_1
Change my e-mail address.

Approved by:	erwin (mentor)
7dc52a691f
Erwin Lansing (erwin) · 1.1_1
- Don't override CONFIGURE_TARGET, it compiles without that - Add some more PORTDOCS - Respect MAN1PREFIX - Bump PORTREVISION - Take maintainership

PR:		103103
Submitted by:	Gabor Kovesdan <gabor@FreeBSD.org>
eefb9f7f3b
Pav Lucistnik (pav) · 1.1
- Add SHA256
2c39b78ee6
David E. O'Brien (obrien) · 1.1
At Kris's request, back out the MACHINE_ARCH spelling correction until after 5.4-RELEASE.
c3d8037aeb
David E. O'Brien (obrien) · 1.1
Assist getting more ports working on AMD64 by obeying the Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.
f2fc2d60ae
OKAZAKI Tetsurou (okazaki) · 1.1
Update to version 1.1.

PR:		72817
Submitted by:	KATO Tsuguru
4d35df5f38
Kirill Ponomarev (krion) · 1.0
- Update to version 1.0

PR:		ports/64328
Submitted by:	Ports Fury
3376711136
Trevor Johnson (trevor) · 0.6_1
Use PLIST_FILES.

Reviewed by:	marcus
3c175cb569
Trevor Johnson (trevor) · 0.6_1
Add SIZE.
e8d5605043
Maxim Sobolev (sobomax) · 0.6_1
Let be hohest: I really don't have a time now to properly maintain all these great pieces of software, so that let others with more free time to take over them.
10588346d3
FUJISHIMA Satsuki (sf) · 0.6_1
get rid of libgnugetopt dependency for -CURRENT, use USE_GETOPT_LONG instead.
b185046be2
Ade Lovett (ade) · 0.6
Clear moonlight beckons. Requiem mors pacem pkg-comment, And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.
7e52725f2a
Maxim Sobolev (sobomax) · 0.6
Update to 0.6.

PR:		41729
Submitted by:	Ports Fury
8d7e11a216
Maxim Sobolev (sobomax) · 0.5
Update to 0.5.

Submitted by:	petef
54edf3598f
Maxim Sobolev (sobomax) · 0.4
Update to 0.4.
0cf6a54ffb
Maxim Sobolev (sobomax) · 0.3
Update to 0.3.
6dfe9f89dd
Maxim Sobolev (sobomax) · 0.2
Update to 0.2.
e1c54c9b65
Maxim Sobolev (sobomax) · 0.1
Add cabextract - a program to extract Microsoft cabinet (.CAB) files.
d78c0253c6