CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

astro/gpsd3.25_3

Daemon that monitors one or more GPSes attached to a host computer

Maintainer
z7dr6ut7gs@snkmail.com
Packages
gpsd 3.25_3, gpsd-nox11 3.25_3
Upstream
Higher version available: 3.27.5
CPE
gpsd_project:gpsd from the port
WWW
https://gpsd.gitlab.io/gpsd/index.html
Links
cgit · VuXML

Unaddressed (3) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2025-672689.82026-01-02gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000…
CVE-2026-584598.42026-07-09gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype valu…
CVE-2025-672697.52026-01-02An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`. W…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (98)

Antoine Brodin (antoine) · 3.25_3
misc: fix build with python 3.12

PR:		285957
04470a19e6
Charlie Li (vishwin) · 3.25_3
graphics/py-pycairo: bump RUN_DEPENDS consumers after rename
a20e21b55c
Charlie Li (vishwin) · 3.25_2
graphics/py-pycairo: rename and update to 1.29.0

Changelog: https://pycairo.readthedocs.io/en/latest/changelog.html#v1-29-0

Notably, experimental support for free-threaded Python (3.13t, soon 3.14t)

Port and PKGNAME renamed to match Python package metadata, and to
properly build with USE_PYTHON=pep517. Test suite also now exposed.
Remove PORTSCOUT since this does not follow the even-odd version
split.
b01ea745e9
Gleb Popov (arrowd) · 3.25_2
*: Bump revisions after dbus update

PR:		285253
Reported by:	Martin Birgmeier <d8zNeCFG@aon.at>
a347a92e6e
Dima Panov (fluffy) · 3.25_1
astro/gpsd: mark as PIE_UNSAFE (+)

Reported by:	bulk -t

Approved by:	portmgr (blanket)

Sponsored by:	Future Crew, LLC
b93ca6e283
Charlie Li (vishwin) · 3.25_1
devel/py-pygobject: bump consumer PORTREVISIONs after port rename

With hat: gnome
PR: 273722
32a55d206d
Charlie Li (vishwin) · 3.25
devel/py-gobject3: use USE_GNOME=pygobject3 helper

The helper is equivalent to the previous explicit dependency
declaration so no functional or metadata changes.

With hat: gnome
PR: 273722
48060e03b6
Fernando Apesteguía (fernape) · 3.25
astro/gpsd: update to 3.25

PR:		279718
Reported by:	john@sanren.ac.za
Approved by:	z7dr6ut7gs@snkmail.com (maintainer, timeout > 2 weeks)
8f37092bac
Muhammad Moinur Rahman (bofh) · 3.23.1_3
astro/gpsd: Moved man to share/man

Approved by:	portmgr (blanket)
90b22f6576
Nuno Teixeira (eduardo) · 3.23.1_2
*/*: Bump consumers of x11-toolkits/gtk30

New version of gtk3 in tree
3572ca3e01
Rene Ladan (rene) · 3.23.1_1
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Tobias C. Berner (tcberner) · 3.23.1_1
accessibility/at-spi2-core: update to 2.46.0

What's new in at-spi2-core 2.46.0:
* Fix GetInterfaces documentation on org.a11y.atspi.Accessible
  interface.

What's new in at-spi2-core 2.45.91:
* Send device event controller events using the same signature as other
  events.
* Document the Accessible, Action, and Cache dbus interfaces.
* Fix license of atspi-gmain.c (#87).

What's new in at-spi2-core 2.45.90:
* xml: Add some documentation.
* xml: Fix event arguments.
* xml: Add some missing DeviceEventController methods.
* Bind the AT-SPI bus to the graphical session.
* Mark bus service as belonging to the session slice.
* Add ATSPI_ROLE_PUSH_BUTTON_MENU.
* Add an "announcement" event/signal to allow objects to send
  notifications (!63).
* Various code clean-ups and test improvements.

What's new in at-spi2-core 2.45.1:
* Atk and at-spi2-atk are now merged into this project.
* Now requires meson 0.56.2 and glib 2.67.4.
* at-spi2-atk: Expose the accessible hierarchy via dbus introspection.
* Properly escape the AT-SPI bus address; fixes warnings about the address
  not containing a colon (!55).
* Add a text value to AtspiValue, so that a value can expose a textual
  description, as in the new Atk value API.
* Add atspi_event_listener_register_with_app, to allow an event listener
  to be registered only for a given application (!52).

- accessibility/atk and accessibility/at-spi2-atk have been merged into
  accessibility/at-spi2-core

- accessibility/at-spi2-core: bump consumers of removed ports atk and at-spi2-atk

PR:		269704
Exp-run by:	antoine
---
fa81a4f5f8
Stefan Eßer (se) · 3.23.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.23.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 3.23.1
astro: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  ABURAYER Rewsirow <rewsirow@ff.iij4u.or.jp>
  *  Alexander Leidinger
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Zakhvatov
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Anton Berezin <tobez@tobez.org>
  *  Anton Karpov <toxa@toxahost.ru>
  *  Brion Moss <brion@queeg.com>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christian Brueffer <chris@unixpages.org>
  *  David Wolfskill
  *  Frank W. Josellis <frank@dynamical-systems.org>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  Gleb Smirnoff <glebius@FreeBSD.org>
  *  Hye-Shik Chang <perky@fallin.lv>
  *  Jan Srzednicki <w@wrzask.pl>
  *  Jean-Yves Lefort <jylefort@FreeBSD.org>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Jeremy Shaffner <jeremy@external.org>
  *  Keith Walker <kew@icehouse.net>
  *  Kirill Ponomarew <ponomarew@oberon.net>
  *  Kris Kennaway <kkennawa@physics.adelaide.edu.au>
  *  Kris Kennaway <kris@FreeBSD.org
  *  Laurent Courty
  *  Loïc BARTOLETTI <lbartoletti@FreeBSD.org>
  *  Lukas Maly <Iam@LukasMaly.NET>
  *  Markus Brueffer <markus@FreeBSD.org>
  *  Mathias Monnerville <mathias@monnerville.com>
  *  Muhammad Moinur Rahman <bofh@FreeBSD.org>
  *  Patrick Li <pat@FreeBSD.org>
  *  Patrick Li <pat@databits.net>
  *  Piero Serini <piero@FreeBSD.org>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Simon Olofsson <simon@olofsson.de>
  *  Slaven Rezic <slaven@rezic.de>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Sébastien Santoro <dereckson@gmail.com>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Tatsuki Makino <tatsuki_makino@hotmail.com>
  *  Tony Maher <tonymaher@optusnet.com.au>
  *  Wen Heping <wen@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Wen Heping<wen@FreeBSD.org>
  *  Will Andrews <andrews@technologist.com>
  *  asami
  *  chuck@pkix.net
  *  crwhipp@gmail.com
  *  darius@dons.net.au
  *  db
  *  erich@FreeBSD.org
  *  freebsd-ports@henrik.synth.no
  *  ijliao
  *  nwhitehorn
  *  pat
  *  searle
  *  thierry@pompo.net
  *  torstenb
  *  trevor
  *  will

With hat:	portmgr
b15254402b
Steve Wills (swills) · 3.23.1
astro/gpsd: update to 3.23.1

PR:		258109
Approved by:	z7dr6ut7gs@snkmail.com (maintainer timeout, >2 months)
c77cd8547d
Mathieu Arnold (mat) · 3.20_2
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 3.20_2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Dima Panov (fluffy) · 3.20_2
astro/gpsd: switch to PYTHON_EXT_SUFFIX
c33333d50d
Christoph Moench-Tegeder (cmt) · 3.20_2
switch gpsd to python3-scons for building

and amend plist with file found by testport

PR:		247623
Approved by:	maintainer (timeout)
f6c9e69f53
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.20_1
Move comms/py-serial to comms/py-pyserial

- While I'm here, add NO_ARCH
- Bump PORTREVISION of dependent ports for dependency change
  (devel/py-pyvisa-py and finance/odoo will be bumped in next commit, py-pyusb renaming)

PR:		246546
Submitted by:	sunpoet (myself)
Approved by:	maintainer (timeout, 40 days)
fa56610258
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.20
Update USES=scons to specify scons of Python 2

- While I'm here, convert emulators/gem5 and games/marsnomercy to USES=scons
dfe005ee44
Antoine Brodin (antoine) · 3.20
astro/gpsd supports any python 3.6+

PR:		244745
610180bb31
Loïc Bartoletti (lbartoletti) · 3.20
astro/gpsd: Update to 3.20

- Update to 3.20 (welcome ubxtool and gpsrinex!)
  - Fix SConstruct per python3 [1]
  - Replace spaces by tabs (pet portlint)
  - Fixes astro/foxtrotgps, astro/gpxloggerd and comms/direwolf

  Changelog:
  - https://gitlab.com/gpsd/gpsd/-/blob/master/NEWS#L16

[1] scons is py27 only and check py27 packages for a py37 port. I commented these tests in SConstruct since we already do it in our Makefile.

PR:	243980
Reviewed by:	tcberner (mentor)
Approved by:	tcberner (mentor), maintainer timeout (z7dr6ut7gs@snkmail.com, > 2 weeks)
Differential Revision:	https://reviews.freebsd.org/D23920
6bc7a46bf8
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.17_1
Update WWW

Approved by:	portmgr (blanket)
5b1f4c26fb
Tobias Kortkamp (tobik) · 3.17_1
a-b: Add missing USES={gnome,php,sdl,xorg}
6a379e2d3a
Tobias C. Berner (tcberner) · 3.17_1
astro/gpsd: remove QTBIND option (Qt4 deprecation)

Approved by:	portmgr (implicit)
18140ef64e
Rene Ladan (rene) · 3.17
Mark QT4 ports/functionality for removal on 2019-03-15

While here, chase some KDE4 ports and functionality, these are scheduled for
removal on 2018-12-31. Change the default option/flavor to QT5 where applicable
or use alternative toolkits like GTK.

Submitted by:	tcberner
Reviewed by:	adridg, jhale, rene, tcberner
Approved by:	portmgr (implicit, flavor hook)
Differential Revision:	https://reviews.freebsd.org/D17741
99d6d12a38
Tobias C. Berner (tcberner) · 3.17
Replace bsd.qt.mk by Uses/qt.mk and Uses/qt-dist.mk

From now on, ports that depend on Qt4 will have to set
	USES=		qt:4
	USE_QT=		foo bar
ports depending on Qt5 will use
	USES=		qt:5
	USE_QT=		foo bar

PR:		229225
Exp-run by:	antoine
Reviewed by:	mat
Approved by:	portmgr (antoine)
Differential Revision:	→https://reviews.freebsd.org/D15540
b1a1d38bf9
Mathieu Arnold (mat) · 3.17
Use PY_FLAVOR for dependencies.

FLAVOR is the current port's flavor, it should not be used outside of
this scope.

Sponsored by:	Absolight
4376dbbb58
Thomas Zander (riggs) · 3.17
Update to upstream version 3.17

Details:
- bin/ntpshmmon is dependent on PPS option (see sConstruct)
- remove patch that has been upstreamed
- explicitly reference python2.7 rather than python2 (per current ports
  tree guidelines)
- use python flavors (Note: there is support for python3 in upstream.
  Reserving that change for a future update (as yet untested) )
- plist changes to reflect upstream changes: lib version bumps, added man
  page, removed a pkg-config file
- add X11 option for bin/xpgs*; update dependencies for 3.17 version of
  xgps* (needs python gi module & gtk3)

PR:		225310
Submitted by:	z7dr6ut7gs@snkmail.com
e2be731d97
Dmitry Marakasov (amdmi3) · 3.16
- Don't needlessly rebuild bundled manpages, drop unneeded build depends

PR:		217147
Submitted by:	jau@iki.fi
Approved by:	z7dr6ut7gs@snkmail.com (maintainer)
c38ec7f95e
Dmitry Marakasov (amdmi3) · 3.16
- Update to 3.16

PR:		207273
Submitted by:	z7dr6ut7gs@snkmail.com (maintainer)
ed928e4a44
Martin Wilke (miwi) · 3.14_4
- Fix shebangs
5cf0569ebb
John Marino (marino) · 3.14_3
astro/gpsd: Set USES+=ncurses when NCURSES option is on

Approved by:	ncurses blanket
804f966150
Mathieu Arnold (mat) · 3.14_3
Cleanup patches, a* categories.

Rename them to follow the make makepatch naming, and regenerate them.

With hat:	portmgr
Sponsored by:	Absolight
9fa9eb9ac7
Mathieu Arnold (mat) · 3.14_3
Remove ${PORTSDIR}/ from dependencies, Mk and categories a, b, and c.

With hat:	portmgr
Sponsored by:	Absolight
7f4572eae4
Gleb Smirnoff (glebius) · 3.14_3
Pass maintainership to John Hein <z7dr6ut7gs snkmail.com>.  Unfortunately, I no longer travel with my precious FreeBSD based CarPC.
83f2968045
Mathieu Arnold (mat) · 3.14_3
Convert ports to use the options helpers in categories [abc]*, and minor fixes.

Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3412?
bb271f0bf7
Gleb Smirnoff (glebius) · 3.14_3
Fix paths in pkgconf installed files.

Submitted by:	Craig Whipp <crwhipp gmail.com>
fa37b8b192
Gleb Smirnoff (glebius) · 3.14_2
Disable PPS support by default. The PPS thread enters infinite loop and GPSD consumes 100% of CPU time. I'm out of time to debug that now, so simply turn off by default.
3a140124a1
Gleb Smirnoff (glebius) · 3.14_1
Use MAKE_ARGS instead of SCONS_ARGS, which is now ignored.

Submitted by:	bapt
60737e448f
Dmitry Marakasov (amdmi3) · 3.14
- Update to 3.14

Submitted by:	glebius (maintainer)
e987d2ef45
Dmitry Marakasov (amdmi3) · 3.9
- Add CPE info

Approved by:	portmgr blanket
41466094ec
Raphael Kubo da Costa (rakuco) · 3.9
Fix LIB_DEPENDS for the DBUS option.

The dependency on devel/dbus was still using a shorthand name instead of the
full file name of the library.

Not bumping PORTREVISION because the build was broken before if the DBUS
option was on.

PR:		198223
Submitted by:	Tobias Berner <tcberner@gmail.com>
Approved by:	glebius (maintainer)
MFH:		2015Q1
2b8a4b6c14
Baptiste Daroussin (bapt) · 3.9
Cleanup plist
4988946cd5
Marcus von Appen (mva) · 3.9
- Convert to USES=python

Approved by:	portmgr (implicit)
With hat:	python@
25704b2ec4
Baptiste Daroussin (bapt) · 3.9
Fix some LIB_DEPENDS

With hat:	portmgr
c9bf4ab3ee
Dmitry Marakasov (amdmi3) · 3.9
- Stagify - Switch to USES=scons

Approved by:	glebius (maintainer)
ff777799b6
Baptiste Daroussin (bapt) · 3.9
Add NO_STAGE all over the place in preparation for the staging support (cat: astro)
701daf1eab