2 of 4 on in the package: DOCSEXTERNALShow the 2 options that are off
MANPAGESTEST
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
1.2.2.20251216
1.2.2.20251216
–
FreeBSD 15
1.2.2.20251216
1.2.2.20251216
–
FreeBSD 14
1.2.2.20251216
1.2.2.20251216
1.2.2.20251216
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
1.2.2.20251216
1.2.2.20251216
–
FreeBSD 14
1.2.2.20251216
1.2.2.20251216
1.2.2.20251216
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.2.2.20251216.
Fixed (9)
Show 9 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (101)
Daniel Engberg (diizzy) · 1.2.2.20251216
audio/libsndfile: Update to latest commit
* Update to latest commit upstream, fixes various bugs and issues
* Backport upstream PR 1106
* Remove STATIC option
* Rework "make test" so it doesn't depend on other options or toggles
* Disable lossy_comp_test_ogg_opus test as it breaks with opus 1.6.0+
Changelog:
https://github.com/libsndfile/libsndfile/compare/1.2.2...ea9ff56
References:
https://github.com/libsndfile/libsndfile/pull/1106
https://github.com/libsndfile/libsndfile/issues/1107
audio/libsndfile: Bump PORTREVISION after appling fix for CVE-2022-33065
Bump PORTREVISION to push the CVE fix
Reported by: Chad Jacob Milios <milios@ccsys.com>
Masachika ISHIZUKA <ish@amail.plala.or.jp>
Fixes: a1f663e - audio/libsndfile: Fix CVE-2022-33065
audio/libsndfile: Fix CVE-2022-33065
Multiple signed integers overflow in function au_read_header in
src/au.c and in functions mat4_open and mat4_read_header in
src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service
or other unspecified impacts.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2022-33065
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
audio/libsndfile: apply upstream patch for ALSA
When ALSA is installed, some preprocessor-defines may have
overlapping values. This patch was proposed (I think) in the
PR mentioned, and then upstreamed.
PR: 258362
Reported by: user WHR
Obtained from: upstream repository
Approved by: tcberner (multimedia@)
Backport patches from upstream against all currently known CVEs
PR: 227669
Submitted by: p5B2E9A8F@t-online.de
MFH: 2019Q1
Security: CVE-2018-19661
CVE-2018-19662
CVE-2017-17456
CVE-2017-17457
CVE-2018-19758
Replace USES=libtool:oldver with USES=libtool or USES=libtool:keepla in the 32 ports that still use it. Bump PORTREVISION on their dependent ports except the ones that depend on these:
audio/libogg
audio/libvorbis
devel/pcre
ftp/curl
graphics/jpeg
graphics/libart_lgpl
graphics/tiff
textproc/expat2
textproc/libxslt
In these cases the same trick as in the recent gettext update is used.
The ports install a symlink with the old library version. When enough
of their dependent ports have had regular updates the remaining ones can
get a PORTREVISION bump and the links can be removed.
Also remove the devel/pcre dependency from USE_GNOME=glib20. It causes
over 2200 packages to depend on devel/pcre while less than 200 actually
link with it. The glib20 package still depends on devel/pcre so this
should not make a difference for ports with USE_GNOME=glib20. Also,
libdata/pkgconfig/glib-2.0.pc lists pcre as a private library so
USE_GNOME=glib20 should not propagate it.
PR: 195724
Exp-run by: antoine
Approved by: portmgr (antoine)
Convert audio from USE_GMAKE to USES=gmake While here: - Trim headers - Convert some USE_GNOME=pkgconfig to USES=pkgconfig - Add some missing pkgconf dependencies - Convert some USE_GNOME=gnomehack to USES=pathfix
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
Remove USE_GNOME=gnometarget from ports. It has been a empty keyword since mid 2008.
PR: ports/159624
Submitted by: Ruslan Mahmatkhanov <cvs-src@yandex.ru>