CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

archivers/dpkg1.19.8_1

Debian package maintenance system

Maintainer
ndowens04@gmail.com
Packages
dpkg 1.19.8_1
Upstream
Higher version available: 1.23.11
CPE
debian:dpkg from the port
WWW
https://packages.debian.org/dpkg
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2025-62978.2published 2025-07-01

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packa…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

VuXML entries whose affected range this version has left.

Commits (110)

Nuno Teixeira (eduardo) · 1.19.8_1
archivers/dpkg: Fix pkg-plist

Approved by:	portmgr (blanket)
Fixes:		418bb76f1e3b8ef46e787055a6ba5d9d0c110c48
504259023f
Muhammad Moinur Rahman (bofh) · 1.19.8_1
archivers/dpkg: Moved man to share/man

Approved by:    portmgr (blanket)
418bb76f1e
Muhammad Moinur Rahman (bofh) · 1.19.8
archivers/dpkg: Fix build with llvm16

- Update version 1.19.7=>1.19.8

Approved by:	portmgr (blanket)
Sponsored by:	The FreeBSD Foundation
7ef123444e
Stefan Eßer (se) · 1.19.7
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.19.7
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.19.7
archivers: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Albert Vernon <f3cun3c02@sneakemail.com>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Kuehn <freebsd@nagilum.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexander Zhuravlev <zaa@zaa.pp.ru>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alexey Dokuchaev <danfe@regency.nsu.ru>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Andreas Klemm <andreas@klemm.gtn.com>
  *  Andreev Maxim
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Chernov <ache@FreeBSD.org>
  *  Andrey Kostenko <andrey@kostenko.name>
  *  Anes Mukhametov <anes@anes.su>
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Ayumi M <ayu@commun.jp>
  *  Carsten Larsen <cs@innolan.dk>
  *  Chin-San Huang <chinsan.tw@gmail.com>
  *  Chris D. Faulhaber <jedgar@FreeBSD.org>
  *  Chris Larsen <darth@vader.dk>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Cyrille Lefevre <cyrille.lefevre@laposte.net>
  *  Dmitry Sivachenko <demon@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Felix Palmen <felix@palmen-it.de>
  *  Gabor Kovesdan <gabor@FreeBSD.org>
  *  Gea-Suan Lin (gslin@ccca.nctu.edu.tw)
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Greg Lewis <glewis@FreeBSD.org>
  *  Hsin-Han You <hhyou@cs.nctu.edu.tw>
  *  Hye-Shik Chang
  *  Hye-Shik Chang <perky@FreeBSD.org>
  *  Igor Pokrovsky <tiamat@telegraph.spb.ru>
  *  Jaap Boender <jaapb@kerguelen.org>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Jeff Burchell <toxic@doobie.com>
  *  Jeffrey H. Johnson <CPE1704TKS@bellsouth.net>
  *  Jerry Hicks
  *  Joao Carlos Mendes Luis <jonny@jonny.eng.br>
  *  John Marino <marino@FreeBSD.org>
  *  José García Juanino <jjuanino@gmail.com>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  Kevin Golding <ports@caomhin.org>
  *  Konstantin Reznichenko <kot@premierbank.dp.ua>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Lars Thegler <lth@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Kane <mark@mkproductions.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Matteo Cypriani <mcy@lm7.fr>
  *  Max Khon <fjoe@FreeBSD.org>
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Melvyn Sopacua <melvyn@magemana.nl>
  *  Miguel Mendez <flynn@energyhq.homeip.net>
  *  Nathan Ahlstrom <nra@FreeBSD.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Patrick Seal <patseal@hyperhost.net>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Per Wigren
  *  Philippe Casidy <pcasidy@casidy.com>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Poul-Henning Kamp <phk@FreeBSD.org>
  *  Radim Kolar
  *  Radim Kolar <hsn@filez.com>
  *  Radim Kolar <hsn@netmag.cz>
  *  Rainer Hurling <rhurlin@gwdg.de>
  *  Richard Gallamore <ultima@FreeBSD.org>
  *  Roman Shterenzon <roman@xpert.com>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Sam Lawrance <boris@brooknet.com.au>
  *  Sergey A. Osokin <osa@FreeBSD.org>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Sir l33tname <sirl33tname@gmail.com>
  *  Stanislav Sedov <ssedov@mbsd.msk.ru>
  *  Stefan Esser <se@FreeBSD.org>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steven Kreuzer <skreuzer@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas Abthorpe <thomas@goodking.ca>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Vanilla I. Shu <vanilla@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Will Andrews <andrews@technologist.com>
  *  Yarodin <yarodin@gmail.com>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  Yuri Victorovich <yuri@rawbw.com>
  *  ache
  *  adamw
  *  antoine@FreeBSD.org
  *  bf <bf2006a@yahoo.com>
  *  chinsan <chinsan.tw@gmail.com>
  *  giffunip@asme.org
  *  gurkan@phys.ethz.ch
  *  iblis <iblis.dif01@nctu.edu.tw>
  *  ijliao
  *  jmz
  *  kwm@FreeBSD.org
  *  lbartoletti <lbartoletti@FreeBSD.org>
  *  mm
  *  ports@c0decafe.net <ports@c0decafe.net>
  *  samm@freebsd.org
  *  swhetzel@gmail.com
  *  will

With hat:	portmgr
1ced9d288a
Mathieu Arnold (mat) · 1.19.7
Remove # $FreeBSD$ from Makefiles.
305f148f48
Koichiro Iwao (meta) · 1.19.7
archives/dpkg: Update to 1.19.7

Also, update maintainer's email.

PR:		241392
Submitted by:	Nathan <ndowens04@gmail.com> (maintainer)
1c3fc50cea
Gerald Pfeifer (gerald) · 1.19.4_1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Tobias C. Berner (tcberner) · 1.19.4
archivers/dpkg: Update to 1.19.4

PR:		235167
Submitted by:	Nathan <ndowens@yahoo.com> (maintainer)
49cf161a02
Gerald Pfeifer (gerald) · 1.19.2_1
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Steve Wills (swills) · 1.19.2
archivers/dpkg: fix build with GCC-based architectures

PR:		233840
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
Approved by:	Nathan <ndowens@yahoo.com> (maintainer)
090410f174
Kurt Jaeger (pi) · 1.19.2
archivers/dpkg: update 1.19.0.5 -> 1.19.2

PR:		233390
Submitted by:	Lorenzo Salvadore <phascolarctos@protonmail.ch>
Approved by:	Nathan <ndowens@yahoo.com> (maintainer)
Relnotes:	https://lists.debian.org/debian-dpkg/2018/10/msg00002.html
e37027b60d
Steve Wills (swills) · 1.19.0.5
archivers/dpkg: update to 1.19.0.5

While here, update maintainer email

PR:		231565
Submitted by:	Nathan <ndowens@yahoo.com> (maintainer)
b22c2cd1f2
Kurt Jaeger (pi) · 1.18.25
archivers/dpkg: update 1.18.24 -> 1.18.25

- submitter becomes maintainer

PR:		229797
Submitted by:	Nathan <ndowens.fbsd@yandex.com>
Relnotes:	http://metadata.ftp-master.debian.org/changelogs/main/d/dpkg/dpkg_1.18.25_changelog
80c8233913
Yuri Victorovich (yuri) · 1.18.24
Reset MAINTAINER on ports maintained by amutu@amutu.com

Based on the new policy of all maintained ports reset
when maintaner is absent for 3 months.

Bug#226400 for science/py-tensorflow is ignored since 2018-03-06 (3+ months).
portscout database indicates that 48.94% of his ports aren't updated.
d7ec60f5a5
Bradley T. Hughes (bhughes) · 1.18.24
archivers/dpkg: Update 1.18.23 -> 1.18.24, submitter takes maintainership

PR:		220011
Submitted by:	Jov <amutu@amutu.com>
Approved by:	mat (co-mentor)
Differential Revision:	https://reviews.freebsd.org/D11236
b9a9de528e
Shaun Amott (shaun) · 1.18.23
Update to 1.18.23.
6c064681fe
Vanilla I. Shu (vanilla) · 1.18.22
Update to 1.18.22.
ba93a36fb4
Vanilla I. Shu (vanilla) · 1.18.21
Update to 1.18.21.
ff782754b0
Vanilla I. Shu (vanilla) · 1.18.18
Update to 1.18.18.
cacf157f39
Lars Engels (lme) · 1.18.16
archivers/dpkg:

Update to 1.18.16
b54759d949
Dmitry Marakasov (amdmi3) · 1.18.15
- Fix LICENSE - Cosmetic fixes
4a8c8aca17
Greg Lewis (glewis) · 1.18.15
. Update to 1.18.15.
ce1a12902a
Pawel Pekala (pawel) · 1.18.14
- Update to version 1.18.14 - Drop maintainership
3d268ee432
Mark Linimon (linimon) · 1.18.10
I have been advised by the maintainer of debootstrap that this port can be used as a cross-tool.  Revert previous commit.

Submitted by:	Nikolai Lifanov <lifanov@mail.lifanov.com>
14e7242151
Mark Linimon (linimon) · 1.18.10
Mark as not for sparc64.  Debian claims to run on mips and powerpc but I do not know whether we support that in the linuxolator.

Approved by:	portmgr (tier-2 blanket)
1ea5ade346
Pawel Pekala (pawel) · 1.18.10
Update to version 1.18.10
776a6b8a6a
Mathieu Arnold (mat) · 1.18.9
Cleanup patches, a* categories.

Rename them to follow the make makepatch naming, and regenerate them.

With hat:	portmgr
Sponsored by:	Absolight
9fa9eb9ac7
Pawel Pekala (pawel) · 1.18.9
Update to version 1.18.9
efa9203faa
Pawel Pekala (pawel) · 1.18.8
Update to version 1.18.8
c3e9c6bb77
Pawel Pekala (pawel) · 1.18.7
Update to version 1.18.7
c2be2078d4
Pawel Pekala (pawel) · 1.18.6
Update to version 1.18.6
e23997f33b
Mathieu Arnold (mat) · 1.18.4_1
Remove ${PORTSDIR}/ from dependencies, Mk and categories a, b, and c.

With hat:	portmgr
Sponsored by:	Absolight
7f4572eae4
Pawel Pekala (pawel) · 1.18.4_1
Mistkenly some positions in pkg-plist were created as directories instead of empty files. Fix this and use @sample keyword for they removal management in place of install/deinstall scripts.

PR:		207527
Reported by:	amdmi3
8d8201cd5e
John Marino (marino) · 1.18.4
archivers/dpkg: document ncurses requirement (USES+=ncurses)

approved by:	infrastructure blanket
06a526b303
Pawel Pekala (pawel) · 1.18.4
Update to version 1.18.4

Fixes security CVE-2015-0860

PR:		205599
Submitted by:	rakuco
MFH:		2015Q4
022355534d
Pawel Pekala (pawel) · 1.18.3
Update to version 1.18.3
56a9f75549
Pawel Pekala (pawel) · 1.18.2
Update to version 1.18.2
746df85818
Pawel Pekala (pawel) · 1.18.1
- Update to version 1.18.1 - Our gzip don't support --rsyncable flag, add patch to fix it
a3692db463
Pawel Pekala (pawel) · 1.18.0_1
- Drop run dependency on sysutils/coreutils, checksums are now   calculated by perl functions - Port now compiles fine with warnings switches, don't turn them off - Remove configure PERL_LIBDIR patch, we set PERL_LIBDIR in   CONFIGURE_ENV so perl libdir path is set properly - Remove obsolete REINPLACE_CMD commands, in latest release all that   stuff was fixed and I missed it in last port update - 

CCLD     dpkg-deb
./lib/dpkg/.libs/libdpkg.a(buffer.o): In function `buffer_digest':
buffer.c:(.text+0x44): undefined reference to `_libmd_MD5Init'
buffer.c:(.text+0x52): undefined reference to `_libmd_MD5Update'
./lib/dpkg/.libs/libdpkg.a(buffer.o): In function `buffer_digest_done':
buffer.c:(.text+0xbf): undefined reference to `_libmd_MD5Final'
./lib/dpkg/.libs/libdpkg.a(buffer.o): In function `buffer_copy':
buffer.c:(.text+0x2fc): undefined reference to `_libmd_MD5Init'
buffer.c:(.text+0x39f): undefined reference to `_libmd_MD5Update'
cc: error: linker command failed with exit code 1 (use -v to see invocation)
56ed6d6c5a
Pawel Pekala (pawel) · 1.18.0
Update to version 1.18.0
1a84eb2468
Dmitry Marakasov (amdmi3) · 1.17.25
- Add CPE info

Approved by:	portmgr blanket
4f4c8777e7
Mathieu Arnold (mat) · 1.17.25
MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight
60d1a83c2a
Pawel Pekala (pawel) · 1.17.25
- Update to version 1.7.25 - Sort USES, use correct option helper, fix plist when NLS=off - Add build fix patch (when NLS=off and compiler == clang) which   prevents mixing C and C++ code in C header file
fbdbe019da
Pawel Pekala (pawel) · 1.17.24
Update to version 1.17.24
d7d8040e06
Pawel Pekala (pawel) · 1.17.23_1
Use /var/log for logdir

PR:		196626
Reported by:	Jordan Irwin <antumdeluge@gmail.com>
abfef89cae
Pawel Pekala (pawel) · 1.17.23
Update to version 1.17.23
0d7f20f4bb
Pawel Pekala (pawel) · 1.17.22
Upgrade to version 1.17.22
99cd9064df
Pawel Pekala (pawel) · 1.17.21
Update to version 1.17.21
79d140b3ca