CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

cad/libredwg0.12.4

Library and command line tools to handle DWG files

Maintainer
danfe@FreeBSD.org
Packages
libredwg 0.12.4
Upstream
Higher version available: 0.14
CPE
gnu:libredwg from the port
WWW
https://www.gnu.org/software/libredwg/
Links
cgit · VuXML

Unaddressed (5) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2022-351649.8published 2022-08-18

LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.

CVE-2023-362718.8published 2023-06-23

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.

CVE-2023-362728.8published 2023-06-23

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.

CVE-2023-362748.8published 2023-06-23

LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c.

CVE-2023-261575.5published 2024-01-02

Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (27)

Alexey Dokuchaev (danfe) · 0.12.4
Convert more of my ports to new manual page location (part two).
9a81a60255
Muhammad Moinur Rahman (bofh) · 0.12.4
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree

- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
  ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
  Also move conditional flags for non sparc64/arm ARCH to fixed flags.

Reviewed by:	brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
bbab7f59e9
Rene Ladan (rene) · 0.12.4
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Alexey Dokuchaev (danfe) · 0.12.4
cad/libredwg: revert commit a534aad1cee and fix the problem differently

Do not build LLVM-based fuzzers: they are hardly interesting to regular
LibreDWG consumers and not even being installed.

Reported by:	pkg-fallout
85d135cf7a
Piotr Kubaj (pkubaj) · 0.12.4
cad/libredwg: fix build on powerpc64*

Use newer LLVM with sanitizer libraries:
ld: error: cannot open /usr/lib/clang/13.0.0/lib/freebsd/libclang_rt.asan-powerpc64le.a: No such file or directory
a534aad1ce
Stefan Eßer (se) · 0.12.4
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.12.4
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 0.12.4
cad: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  AMAKAWA Shuhei <amakawa@jp.FreeBSD.org>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Anders Andersson <anders@hack.org>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Christoph Moench-Tegeder <cmt@FreeBSD.org>
  *  David Yeske <dyeske@gmail.com>
  *  Diane Bruce <db@db.net>
  *  Joachim Strombergson <watchman@ludd.ltu.se>
  *  Johnny Sorocil <jsorocil@gmail.com>
  *  Julian Jenkins <kaveman@magna.com.au>
  *  Marc Fonvieille <blackend@FreeBSD.org>
  *  Mario S F Ferreira <lioux@linf.unb.br> et al.
  *  Martin Dieringer <martin.dieringe@gmx.de>
  *  Matthias Petermann <matthias@petermann-it.de>
  *  Michael Durian <durian@shadetreesoftware.com>
  *  Michael Reifenberger <mr@FreeBSD.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Otacilio de Araujo Ramos Neto <otacilio.neto@bsd.com.br>
  *  Pedro F. Giffuni
  *  Pedro F. Giffuni <giffunip@asme.org>
  *  Pedro Giffuni
  *  Pedro Giffuni <giffunip@asme.org>
  *  Rusmir Dusko <nemysis@FreeBSD.org>
  *  Sarod Yatawatta <sarod@cs.pdn.ac.lk>
  *  Sergio Lenzi <lenzi.sergio@gmail.com>
  *  Stanislav Sedov <ssedov@mbsd.msk.ru>
  *  Thierry Thomas <thierry@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Vanilla I. Shu <vanilla@FreeBSD.org>
  *  Veniamin Gvozdikov <vg@FreeBSD.org>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  gahr
  *  hrs
  *  ijliao
  *  lbartoletti <lbartoletti@FreeBSD.org>
  *  lon_kamikaze@gmx.de
  *  stas
  *  swallace
  *  thierry@pompo.net

With hat:	portmgr
b46abf8056
Bernhard Froehlich (decke) · 0.12.4
cad/libredwg: Add CPE information

Approved by:	portmgr (blanket)
7d84dacb0a
Alexey Dokuchaev (danfe) · 0.12.4
Update LibreDWG to version 0.12.4, another bugfix release.
f7668a0f9d
Mathieu Arnold (mat) · 0.12.3
Remove # $FreeBSD$ from Makefiles.
305f148f48
Alexey Dokuchaev (danfe) · 0.12.3
Update LibreDWG to version 0.12.3, which fixes many minor fuzzing errors (quoting upstream, libfuzzer is much better than afl++ and honggfuzz).

Reported by:	portscout
6fc15cce17
Alexey Dokuchaev (danfe) · 0.12.2
Update to version 0.12.2, bugfix release.

Found out via:	repology.org
3f23cae04f
Alexey Dokuchaev (danfe) · 0.12.1
- Update LibreDWG to version 0.12.1 (mostly bugfix release) - Move PSLIB_PLIST_FILES into normal pkg-plist: after r561350,   OPTIONS_SUB is required for PYTHON option anyways, so it makes   little sense to track files in two separate locations

Found out via:	repology.org
3b09bc29f7
Alexey Dokuchaev (danfe) · 0.12
- Update LibreDWG to version 0.12 - Disable Perl bindings for now (there are issues) - Add missing bits for the proper Python support - Install examples (and put them where they belong)
68cea9596c
Alexey Dokuchaev (danfe) · 0.11.1
Update to version 0.11.1, which brings ``out_dxf'' bugfixes mostly.

0.11 failed to produce dxf files which could be imported into AutoCAD.
This bugfix release improves DXF importing from 10% to about 90%.

Found out via:	repology.org
fedbf1bf16
Alexey Dokuchaev (danfe) · 0.11
Update to version 0.11.

Reported by:	portscout
b479d12240
Alexey Dokuchaev (danfe) · 0.10.1_1
Provide an option to build `dwggrep' utility with regex support and make it enabled by default since `devel/pcre2' is rather common dependency.

Because previously built packages could link to PCRE2 libraries without
this dependency being recorded, bump port revision.
619409dfd9
Alexey Dokuchaev (danfe) · 0.10.1
Update GNU LibreDWG to version 0.10.1.
4644bc2a1d
Alexey Dokuchaev (danfe) · 0.10
- Update LibreDWG to the latest version 0.10 - Some minor API changes and bugfixes, mostly stabilization

Reported by:	portscout
0d00bfd7e9
Alexey Dokuchaev (danfe) · 0.9.3
Update GNU LibreDWG to version 0.9.3.

PR:	243004
1952461945
Alexey Dokuchaev (danfe) · 0.9
- Update LibreDWG to version 0.9 - Enable runtime tracing by default: it has no noticeable effect   during normal usage but greatly improves debugging experience

Reported by:	portscout
b139175895
Alexey Dokuchaev (danfe) · 0.8
- Update LibreDWG to version 0.8 - Hook the tests to our framework (tests pass on x86,   but fail on powerpc/sparc64 unfortunately) - Add the PYTHON option, disabled by default

Tested on:	i386, amd64, powerpc, sparc64
91376a7adb
Alexey Dokuchaev (danfe) · 0.7
Update to version 0.7, which is an important bugfix release.

Reported by:	portscout
cd6c91194c
Baptiste Daroussin (bapt) · 0.6.2_1
Install texinfo files (GNU info) into ${PREFIX}/share/info

After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816
7990f81066
Alexey Dokuchaev (danfe) · 0.6.2
- Update `cad/libredwg' to version 0.6.2 which brings numerous important   fixes, including several out_dxf segfaults - Build with PostScript export support (dwg2ps) by default (due to lack   of --disable-pslib configure switch, leave a note that while currently   pre-installed `print/pslib' port would not be silently picked up, this   might change in the future and explain how to handle this situ
79afd47666
Alexey Dokuchaev (danfe) · 0.6
GNU LibreDWG is a C library to handle DWG files which aims to be a free replacement for the OpenDWG libraries.

There are command line tools and libraries to read and write DWG files,
with converters for various formats: DXF, DXFB, SVG, PS, JSON, XML, etc.

WWW: https://www.gnu.org/software/libredwg/
bf54e29e8e