CVE and update status of the FreeBSD ports tree3,456 unaddressed CVEs in 716 portsAll times are CET
Port details

archivers/py-brotli 1.2.1

Generic-purpose lossless compression algorithm

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.2.1
Upstream
up to date
Last update
to 1.2.1 · 8f66c3aaf1
Quarterly
not in the 2026Q4 packages
Formerly
archivers/brotli until 2016-11-24
WWW
https://github.com/google/brotli
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install py312-brotli
installs 1.2.1 from latest
Port
# cd /usr/ports/archivers/py-brotli && make install clean
Size
14 KiB download · 36 KiB installed
License
MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.2.11.2.0–
FreeBSD 15✗1.2.0–
FreeBSD 141.2.01.2.01.2.1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.2.01.2.0–
FreeBSD 141.2.01.2.01.2.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 2

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 15

6 categories

www 8
bunkerweb, py-django-compression-middleware, py-flask-compress, py-scrapy, py-searxng-devel, py-selenium-wire,
+2 morepy-yt-dlp, yt-dlp
devel 2
py-buildbot, py-geventhttpclient
print 2
py-fonttools, py-weasyprint
archivers 1
py-py7zr
net 1
py-cloudscraper
x11 1
xpra

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.2.1.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-1114979.22026-10-22A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated att…

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
299688maintainer-feedback? archivers/py-brotli: Fails to build with brotli 1.2.1New2026-10-24

Commits (42)

Sergey A. Osokin (osa) · 1.2.1 MFH 2026Q4 ✓
archivers/py-brotli: fix build by updating to the recent version

PR:		299686
Fixes:		1f82b2df36ccb735b728eb37d2c23f142fc8e9fe
Approved by:	portmgr (fix build, implicit)

Sponsored by:	tipi.work
8f66c3aaf1
Po-Chuan Hsieh (sunpoet) · 1.2.0
archivers/py-brotli: Update to 1.2.0

- Simplify setup.py patch

Changes:	https://github.com/google/brotli/releases
ba641e09b8
Po-Chuan Hsieh (sunpoet) · 1.1.0
archivers/py-brotli: Fix build

- Fix module name case: We should loosen PEP 517 installation for this
- Fix LOCALBASE substitution
1214f37c0d
Po-Chuan Hsieh (sunpoet) · 1.1.0
archivers/py-brotli: Update to 1.1.0

- Convert to USE_PYTHON=pep517

Changes:	https://github.com/google/brotli/releases
821a031c39
Po-Chuan Hsieh (sunpoet) · 1.0.9_1
archivers/py-brotli: Use archivers/brotli instead of bundled one

- Bump PORTREVISION for dependency and package change
6c6ce47499
Rene Ladan (rene) · 1.0.9
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Dmitry Marakasov (amdmi3) · 1.0.9
*/*: rename CHEESESHOP to PYPI in MASTER_SITES

PR:			267994
Differential revision:	D37518
Approved by:		bapt
77d68471ad
Stefan Eßer (se) · 1.0.9
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.0.9
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.0.9
archivers: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Albert Vernon <f3cun3c02@sneakemail.com>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Kuehn <freebsd@nagilum.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexander Zhuravlev <zaa@zaa.pp.ru>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alexey Dokuchaev <danfe@regency.nsu.ru>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Andreas Klemm <andreas@klemm.gtn.com>
  *  Andreev Maxim
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Chernov <ache@FreeBSD.org>
  *  Andrey Kostenko <andrey@kostenko.name>
  *  Anes Mukhametov <anes@anes.su>
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Ayumi M <ayu@commun.jp>
  *  Carsten Larsen <cs@innolan.dk>
  *  Chin-San Huang <chinsan.tw@gmail.com>
  *  Chris D. Faulhaber <jedgar@FreeBSD.org>
  *  Chris Larsen <darth@vader.dk>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Cyrille Lefevre <cyrille.lefevre@laposte.net>
  *  Dmitry Sivachenko <demon@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Felix Palmen <felix@palmen-it.de>
  *  Gabor Kovesdan <gabor@FreeBSD.org>
  *  Gea-Suan Lin (gslin@ccca.nctu.edu.tw)
  *  Gea-Suan Lin <gslin@gslin.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Greg Lewis <glewis@FreeBSD.org>
  *  Hsin-Han You <hhyou@cs.nctu.edu.tw>
  *  Hye-Shik Chang
  *  Hye-Shik Chang <perky@FreeBSD.org>
  *  Igor Pokrovsky <tiamat@telegraph.spb.ru>
  *  Jaap Boender <jaapb@kerguelen.org>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Jeff Burchell <toxic@doobie.com>
  *  Jeffrey H. Johnson <CPE1704TKS@bellsouth.net>
  *  Jerry Hicks
  *  Joao Carlos Mendes Luis <jonny@jonny.eng.br>
  *  John Marino <marino@FreeBSD.org>
  *  José García Juanino <jjuanino@gmail.com>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  Kevin Golding <ports@caomhin.org>
  *  Konstantin Reznichenko <kot@premierbank.dp.ua>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Lars Thegler <lth@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Kane <mark@mkproductions.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Matteo Cypriani <mcy@lm7.fr>
  *  Max Khon <fjoe@FreeBSD.org>
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Melvyn Sopacua <melvyn@magemana.nl>
  *  Miguel Mendez <flynn@energyhq.homeip.net>
  *  Nathan Ahlstrom <nra@FreeBSD.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Patrick Seal <patseal@hyperhost.net>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Per Wigren
  *  Philippe Casidy <pcasidy@casidy.com>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Poul-Henning Kamp <phk@FreeBSD.org>
  *  Radim Kolar
  *  Radim Kolar <hsn@filez.com>
  *  Radim Kolar <hsn@netmag.cz>
  *  Rainer Hurling <rhurlin@gwdg.de>
  *  Richard Gallamore <ultima@FreeBSD.org>
  *  Roman Shterenzon <roman@xpert.com>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Sam Lawrance <boris@brooknet.com.au>
  *  Sergey A. Osokin <osa@FreeBSD.org>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Sir l33tname <sirl33tname@gmail.com>
  *  Stanislav Sedov <ssedov@mbsd.msk.ru>
  *  Stefan Esser <se@FreeBSD.org>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steven Kreuzer <skreuzer@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas Abthorpe <thomas@goodking.ca>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Vanilla I. Shu <vanilla@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Will Andrews <andrews@technologist.com>
  *  Yarodin <yarodin@gmail.com>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  Yuri Victorovich <yuri@rawbw.com>
  *  ache
  *  adamw
  *  antoine@FreeBSD.org
  *  bf <bf2006a@yahoo.com>
  *  chinsan <chinsan.tw@gmail.com>
  *  giffunip@asme.org
  *  gurkan@phys.ethz.ch
  *  iblis <iblis.dif01@nctu.edu.tw>
  *  ijliao
  *  jmz
  *  kwm@FreeBSD.org
  *  lbartoletti <lbartoletti@FreeBSD.org>
  *  mm
  *  ports@c0decafe.net <ports@c0decafe.net>
  *  samm@freebsd.org
  *  swhetzel@gmail.com
  *  will

With hat:	portmgr
1ced9d288a
Po-Chuan Hsieh (sunpoet) · 1.0.9
archivers/py-brotli: Cosmetic change
b1516af32e
Bernhard Froehlich (decke) · 1.0.9
archivers/py-brotli: Add CPE information

Approved by:	portmgr (blanket)
20304d21ae
Po-Chuan Hsieh (sunpoet) · 1.0.9
archivers/py-brotli: Add CATEGORIES=python
ec7d6a6ffe
Mathieu Arnold (mat) · 1.0.9
Remove # $FreeBSD$ from Makefiles.
305f148f48
Antoine Brodin (antoine) · 1.0.9
Drop python 2.7 support from a few ports

With hat:	portmgr
aa7a6c429e
Kai Knoblich (kai) · 1.0.9
Relax hardcoded paths to fix build with Python 3.8.7

Since r558913 Python 3.8 incorporates BPO-42604 [1] which changed the
shared libs naming scheme.  This means "EXT_SUFFIX" is now derived from
SOABI and yields with Python 3.8 to ".cpython-38.so" instead of ".so".

The affected ports strip the libaries in the "post-install" target via
hardcoded path(s) and the build fails at the end because the new extension
is not expected at this place.

Remedy the issue by adding wildcards to these paths.  This should also
prepare the ports for future Python releases, which will use the new shared
libs naming scheme.

[1] https://bugs.python.org/issue42604

PR:		252057
Reported by:	John Kennedy
Reviewed by:	fluffy, koobs
Approved by:	koobs (python)
9cb5898561
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.9
Update to 1.0.9

- Change MASTER_SITES to CHEESESHOP
- Update LICENSE

Changes:	https://github.com/google/brotli/releases
51499886b8
Gerald Pfeifer (gerald) · 1.0.7_3
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.7_2
Remove bin/brotli to avoid CONFLICTS with archivers/brotli

- Bump PORTREVISION for package change
a716745f32
Gerald Pfeifer (gerald) · 1.0.7_1
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.7
Update to 1.0.7

Changes:	https://github.com/google/brotli/releases
fe3af831c4
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.6
Update to 1.0.6

Changes:	https://github.com/google/brotli/releases
56494a204f
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.5_1
Update pkg-descr
7f966d34ef
Gerald Pfeifer (gerald) · 1.0.5_1
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.5
Update to 1.0.5

Changes:	https://github.com/google/brotli/releases
020e442a3b
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.4
Update to 1.0.4

Changes:	https://github.com/google/brotli/releases
75b7c2abb4
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.3
Update to 1.0.3

Changes:	https://github.com/google/brotli/releases
947fb54a4e
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.2
Update to 1.0.2

- Change MASTER_SITES from CHEESESHOP to GitHub

Changes:	https://github.com/google/brotli/releases
4d6a71d952
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.1
Update to 1.0.1

Changes:	https://github.com/google/brotli/releases
99b5e61663
Gerald Pfeifer (gerald) · 0.6.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC (via Mk/bsd.default-versions.mk and lang/gcc) which has moved from GCC 5.4 to GCC 6.4 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
   c++14-lang, c++0x, c11, or gcc-c++11-lib.

PR:		219275
e59c88cece
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.0
Update to 0.6.0

Changes:	https://github.com/google/brotli/releases
9e8561e8f5
Gerald Pfeifer (gerald) · 0.5.2_4
Bump PORTREVISIONs for ports depending on the canonical version of GCC and lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some circumstances such as versions of FreeBSD or platforms).

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using using Mk/bsd.octave.mk which in turn has USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
   c++11-lang, c++0x, c11, or gcc-c++11-lib.

PR:		216707
04d6f52202
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.5.2_3
Fix shebang

- Bump PORTREVISION for package change

PR:		217332
Submitted by:	lifanov
f08d6dfb04
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.5.2_2
- Allow concurrent installation (USE_PYTHON=concurrent) - Bump PORTREVISION for package change
02d9d78d2c
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.5.2_1
- Move archivers/brotli to archivers/py-brotli - Change MASTER_SITES to CHEESESHOP - Bump PORTREVISION
05432cf9dc
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.5.2 · as archivers/brotli
- Update to 0.5.2

Changes:	https://github.com/google/brotli/releases
a06052eea0
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.4.0 · as archivers/brotli
- Update to 0.4.0

Changes:	https://github.com/google/brotli/releases
8e9e8cb0f4
Jan Beich (jbeich) · 0.3.0_1 · as archivers/brotli
archivers/brotli, devel/libbrotli: fix buffer overflow

Obtained from:	upstream
Security:	1bcfd963-e483-41b8-ab8e-bad5c3ce49c9
MFH:		2016Q1
ba1bc35848
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.3.0 · as archivers/brotli
- Update to 0.3.0

Changes:	https://github.com/google/brotli/releases
5408c4270c
Mathieu Arnold (mat) · 0.2.0_1 · as archivers/brotli
Cleanup GH_* and variables order.

Sponsored by:	Absolight
7823fa4b7e
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.2.0_1 · as archivers/brotli
- Fix build on 9.x - Remove unnecessary USE_CXXSTD - Bump PORTREVISION for package change

Obtained from:	https://github.com/google/brotli/commit/4a7024dcde1aaf30d824ade299e70711a30f4399
MFH:		2015Q4
b3d5de7d49
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.2.0 · as archivers/brotli
- Add brotli 0.2.0

Brotli is a generic-purpose lossless compression algorithm that compresses data
using a combination of a modern variant of the LZ77 algorithm, Huffman coding
and 2nd order context modeling, with a compression ratio comparable to the best
currently available general-purpose compression methods. It is similar in speed
with deflate but offers more dense compression.

The specification of the Brotli Compressed Data Format is defined in the
following internet draft: http://www.ietf.org/id/draft-alakuijala-brotli

WWW: https://github.com/google/brotli
9f31e8ca82