CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

astro/cfitsio4.7.0

Library for reading and writing files in FITS data format

Maintainer
sunpoet@FreeBSD.org
Packages
cfitsio 4.7.0
Upstream
up to date
CPE
nasa:cfitsio from the port
WWW
https://heasarc.gsfc.nasa.gov/fitsio/
Links
cgit · VuXML

Unaddressed (2) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2026-1111246.92026-10-15CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before the fits_…
CVE-2026-1111256.92026-10-15CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers to read past the compressed tile buffer …

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (72)

Po-Chuan Hsieh (sunpoet) · 4.7.0
astro/cfitsio: Update to 4.7.0

- Add maintainer section

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
8a8725b2e8
Po-Chuan Hsieh (sunpoet) · 4.6.4
astro/cfitsio: Update to 4.6.4

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
cb13705d5d
Po-Chuan Hsieh (sunpoet) · 4.6.3
astro/cfitsio: Remove USES=pathfix
2f822ec01b
Po-Chuan Hsieh (sunpoet) · 4.6.3
astro/cfitsio: Update to 4.6.3

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
62e6a49fa7
Po-Chuan Hsieh (sunpoet) · 4.6.2
astro/cfitsio: Update to 4.6.2

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
6068c04140
Po-Chuan Hsieh (sunpoet) · 4.6.0
astro/cfitsio: Update to 4.6.0

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
f7825fe402
Po-Chuan Hsieh (sunpoet) · 4.5.0
astro/cfitsio: Update to 4.5.0

- Clean up MASTER_SITES
- Update WWW
- Use USES=pathfix to fix .pc installation

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
1a93495aed
Po-Chuan Hsieh (sunpoet) · 4.4.1
astro/cfitsio: Update to 4.4.1

- Add LICENSE

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
1dcd735d61
Po-Chuan Hsieh (sunpoet) · 4.4.0
astro/cfitsio: Update to 4.4.0

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
77551d248f
Po-Chuan Hsieh (sunpoet) · 4.3.1
astro/cfitsio: Update to 4.3.1

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
957380cd09
Po-Chuan Hsieh (sunpoet) · 4.3.0
astro/cfitsio: Update to 4.3.0

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
12092ad379
Po-Chuan Hsieh (sunpoet) · 4.2.0
astro/cfitsio: Update to 4.2.0

- Convert REINPLACE_CMD to patch file
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
e73ed31d9f
Dimitry Andric (dim) · 4.1.0_1
astro/cfitsio: fix build with clang 15

During an exp-run for llvm 15 (see bug 265425), it turned out that
astro/cfitsio failed to build with clang 15:

  drvrnet.c:3887:23: warning: call to undeclared function 'gethostbyname'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration]
              hostent = gethostbyname(localhost);
                        ^
  drvrnet.c:3887:21: error: incompatible integer to pointer conversion assigning to 'struct hostent *' from 'int' [-Wint-conversion]
              hostent = gethostbyname(localhost);
                      ^ ~~~~~~~~~~~~~~~~~~~~~~~~
  1 warning and 1 error generated.

This is because the configure script defines _XOPEN_SOURCE=700, for
unclear reasons, and this hides the gethostbyname() declaration in
/usr/include/netdb.h. Fix it by removing the line that adds the define.

PR:		268302
Approved by:	portmgr (tcberner)
MFH:		2022Q4
7eda11c87c
Stefan Eßer (se) · 4.1.0_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 4.1.0_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 4.1.0_1
astro: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  ABURAYER Rewsirow <rewsirow@ff.iij4u.or.jp>
  *  Alexander Leidinger
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Zakhvatov
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Anton Berezin <tobez@tobez.org>
  *  Anton Karpov <toxa@toxahost.ru>
  *  Brion Moss <brion@queeg.com>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christian Brueffer <chris@unixpages.org>
  *  David Wolfskill
  *  Frank W. Josellis <frank@dynamical-systems.org>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  Gleb Smirnoff <glebius@FreeBSD.org>
  *  Hye-Shik Chang <perky@fallin.lv>
  *  Jan Srzednicki <w@wrzask.pl>
  *  Jean-Yves Lefort <jylefort@FreeBSD.org>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Jeremy Shaffner <jeremy@external.org>
  *  Keith Walker <kew@icehouse.net>
  *  Kirill Ponomarew <ponomarew@oberon.net>
  *  Kris Kennaway <kkennawa@physics.adelaide.edu.au>
  *  Kris Kennaway <kris@FreeBSD.org
  *  Laurent Courty
  *  Loïc BARTOLETTI <lbartoletti@FreeBSD.org>
  *  Lukas Maly <Iam@LukasMaly.NET>
  *  Markus Brueffer <markus@FreeBSD.org>
  *  Mathias Monnerville <mathias@monnerville.com>
  *  Muhammad Moinur Rahman <bofh@FreeBSD.org>
  *  Patrick Li <pat@FreeBSD.org>
  *  Patrick Li <pat@databits.net>
  *  Piero Serini <piero@FreeBSD.org>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Simon Olofsson <simon@olofsson.de>
  *  Slaven Rezic <slaven@rezic.de>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Sébastien Santoro <dereckson@gmail.com>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Tatsuki Makino <tatsuki_makino@hotmail.com>
  *  Tony Maher <tonymaher@optusnet.com.au>
  *  Wen Heping <wen@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Wen Heping<wen@FreeBSD.org>
  *  Will Andrews <andrews@technologist.com>
  *  asami
  *  chuck@pkix.net
  *  crwhipp@gmail.com
  *  darius@dons.net.au
  *  db
  *  erich@FreeBSD.org
  *  freebsd-ports@henrik.synth.no
  *  ijliao
  *  nwhitehorn
  *  pat
  *  searle
  *  thierry@pompo.net
  *  torstenb
  *  trevor
  *  will

With hat:	portmgr
b15254402b
Po-Chuan Hsieh (sunpoet) · 4.1.0_1
astro/cfitsio: Enable bzip2 and threading support

- Bump PORTREVISION for package change
3068321781
Po-Chuan Hsieh (sunpoet) · 4.1.0
astro/cfitsio: Update to 4.1.0

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
131f39565f
Po-Chuan Hsieh (sunpoet) · 4.0.0
astro/cfitsio: Simplify Makefile

- Use hard-coded shlib version
  It helps remind maintainer to bump PORTREVISION of dependent ports.
62a530d316
Po-Chuan Hsieh (sunpoet) · 4.0.0
astro/cfitsio: Update to 4.0.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
d1d14ca3e5
Bernhard Froehlich (decke) · 3.490
astro/cfitsio: Add CPE information

Approved by:	portmgr (blanket)
ea2e81f22e
Mathieu Arnold (mat) · 3.490
Remove # $FreeBSD$ from Makefiles.
305f148f48
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.490
Update to 3.49

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
PR:		252569
Exp-run by:	antoine
375d4e9fc4
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.470_1
Use bundled zlib

- Bump PORTREVISION for package change

PR:		238121
Reported by:	yuri
e96b8ef913
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.470
Update to 3.47

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
5edb3f8484
Yuri Victorovich (yuri) · 3.430_1
astro/cfitsio: Add missing dependency

Approved by:	portmgr blanket
9d5e0473f0
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.430
Update to 3.43

- Update MASTER_SITES

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes2.txt
3fef3d2c3e
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.420
Update to 3.42

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
cb7d8a1fd2
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.410
Update to 3.41

- Update pkg-descr
- Update WWW: use https://

Changes:	https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
d3f575f649
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.390
- Use USES=localbase - Cosmetic change
bf74332f92
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.390
- Fix build on Sparc64
6b9a68091d
Mark Linimon (linimon) · 3.390
Mark as broken on various tier-2 archs.

While here, pet portlint.

Approved by:	portmgr (tier-2 blanket)
d864fd0302
Wen Heping (wen) · 3.390
- Update to 3.390

PR:		212405
Submitted by:	wen@(myself)
Approved by:	maintainer(timeout, >=14 days)
f182c2856b
Mathieu Arnold (mat) · 3.370_1
Remove ${PORTSDIR}/ from dependencies, Mk and categories a, b, and c.

With hat:	portmgr
Sponsored by:	Absolight
7f4572eae4
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.370_1
- Fix LICENSE - Convert to new options target helper
5d44581a5b
Dmitry Marakasov (amdmi3) · 3.370_1
- Don't install static libraries with INSTALL_LIB (part 1/2)

Approved by:	portmgr blanket
MFH:		2015Q2
178592ab36
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.370
- Update to 3.370

Changes:	http://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
e6cf0b21eb
Tijl Coosemans (tijl) · 3.360_2
Support LIBS like LDFLAGS.

- Add LIBS="${LIBS}" to MAKE_ENV and CONFIGURE_ENV.
- Add an option helper for LIBS.
- Adjust all ports that already use LIBS.  Also remove references to
  PTHREAD_CFLAGS and PTHREAD_LIBS while here.
- Some ports did not support having a LIBS environment variable and
  required additional patches.

Somewhat simplified a linker command line looks like:

${CC} ${src_LDFLAGS} ${LDFLAGS} ${src_LIBS} ${LIBS}

where src_LDFLAGS and src_LIBS are controlled by upstream and LDFLAGS and
LIBS can be controlled by us.  If possible -L and -l flags need to be
added to LIBS to make sure they appear after any -L and -l flags set by
upstream.  Many ports currently add -L${LOCALBASE}/lib to LDFLAGS but this
may appear too early on the command line causing installed libraries to
be linked in instead of freshly built ones.

Additional changes:
benchmarks/netio: Replace WITH_IPV6 with an IPV6 option.
comms/gnokii: Replace some patches with USES=pathfix.  Also remove -fPIC.
graphics/gimageview: USES=libtool and install desktop file in DESKTOPDIR.
graphics/visionworkbench: Remove FreeBSD 7 support.
multimedia/libmovtar: New LIB_DEPENDS syntax.
multimedia/opencinematools: Use standard do-build.
net/siproxd: USES=libtool:keepla (port actually needs .la files for plugins)
net-mgmt/nagios: Remove -fPIC.
net-mgmt/nagios4: Remove -fPIC.
print/cups-base: Only add -lssp_nonshared on i386 and OSVERSION < 1000036.
security/p11-kit: Replace PTHREAD_LIBS in CONFIGURE_ENV with
ac_cv_func_pthread_mutexattr_init=no in CONFIGURE_ARGS.  This skips a test
in configure that falsely detects pthread_mutexattr_init in our libc.
sysutils/dar: Fix iconv detection.
x11/rxvt-unicode: Remove -lstdc++ and patch configure to remove a FreeBSD
hack and use $CXX as linker as on other platforms.

PR:		190592
Exp-run by:	antoine
Approved by:	portmgr (antoine)
9f8b4bcde3
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.360_2
- Pass -lz to libdata/pkgconfig/cfitsio.pc - Bump PORTREVISION for package change

PR:		ports/189487
Submitted by:	rakuco
9c92a8c8dd
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.360_1
- Build cfitsio compress/uncompress C files in zlib/ - Bump PORTREVISION for package change

Tested by:	cperciva, marino
8c80e22b4e
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.360
- Update to 3.360 - Build and install static library - Bump PORTREVISION for astro/cfitsio shlib change

Changes:	http://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt
d21f8c4177
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.350_1
- Fix shared library installation - Bump PORTREVISION for package change - While I'm here, convert to new LIB_DEPENDS format

PR:		ports/185951
Submitted by:	Florian Degner <f.degner@gmx.de>
8fc7e408f0
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.350
- Support STAGEDIR - Simplify Makefile
c24bbd3e67
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.350
- Update to 3.350 - Convert to new LIB_DEPENDS format

Changes:	http://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/changes.txt
8938416596
Baptiste Daroussin (bapt) · 3.330
Add NO_STAGE all over the place in preparation for the staging support (cat: astro)
701daf1eab
Alex Kozlov (ak) · 3.330
- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)
d4041784dc
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.330
- Rescue WRKSRC
987864fc3b
Baptiste Daroussin (bapt) · 3.330
Convert all a categories to USE=pkgconfig While here trim some headers and convert some gnomehack to pathfix
6ee4f3c0ed
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.330
- Update to 3.33 - Remove LICENSE_FILE for well-known licenses - Use PORTDOCS - Cosmetic change - Take maintainership

Changes:	http://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/changes.txt
a9afa08eb6
Armin Pirkovitsch (sperber) · 3.310
- Update to version 3.310 - Update MASTER_SITES - Add LICENSE - Add MAKE_JOBS_SAFE - Trim Makefile header

PR:           ports/171954
Submitted by: KATO Tsuguru <tkato432 _at_ yahoo.com>
Approved by:  beat (mentor)
Feature safe: yes
b88c2be154