CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

cad/openfpgaloader1.1.1

Universal utility for programming FPGA

Maintainer
yuri@FreeBSD.org
Packages
openfpgaloader 1.1.1
Upstream
Higher version available: 1.2.0
CPE
trabucayre:openfpgaloader from the port
WWW
https://github.com/trabucayre/openFPGALoader
Links
cgit · VuXML

Unaddressed (2) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2026-351707.1published 2026-04-06

openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in BitParser::parseHeader() that allows out-of-bounds heap memory access when parsing a crafted .bit file. No FPGA hardware is required to trigger this vulnerability.

CVE-2026-351767.1published 2026-04-06

openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in POFParser::parseSection() that allows out-of-bounds heap memory access when parsing a crafted .pof file. No FPGA hardware is required to trigger this vulnerability.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (30)

Bernard Spil (brnrd) · 1.1.1
cad/*: Add CPE info
fa06accf73
Yuri Victorovich (yuri) · 1.1.1
cad/openfpgaloader: update 1.1.0 → 1.1.1

Reported by:	portscout
e588c96d06
Yuri Victorovich (yuri) · 1.1.0
cad/openfpgaloader: Add missing patch
b85c7ff77f
Yuri Victorovich (yuri) · 1.1.0
cad/openfpgaloader: update 1.0.0 → 1.1.0

Reported by:	portscout
9287361397
Älven (alven) · 1.0.0
cad/openfpgaloader: 0.13.1 => 1.0.0

Changelogs:
* https://github.com/trabucayre/openFPGALoader/releases/tag/v1.0.0
* https://github.com/trabucayre/openFPGALoader/compare/v0.13.1...v1.0.0

* Clarify LICENSE

Approved by:		yuri@ (maintainer, Mentor)
Differential Revision:	https://reviews.freebsd.org/D53572
0161b29108
Yuri Victorovich (yuri) · 0.13.1
cad/openfpgaloader: update 0.12.1 → 0.13.1

Reported by:	portscout
5f8370b3ab
Yuri Victorovich (yuri) · 0.12.1
cad/openfpgaloader: update 0.12.0 → 0.12.1

Reported by:	portscout
89cef5ff73
Yuri Victorovich (yuri) · 0.12.0
cad/openfpgaloader: update 0.11.0 → 0.12.0

Reported by:	portscout
ad22053706
Yuri Victorovich (yuri) · 0.11.0
cad/openfpgaloader: Update 0.10.0 → 0.11.0

Reported by:	portscout
6503cd0766
Yuri Victorovich (yuri) · 0.10.0
cad/openfpgaloader: Update 0.9.1 -> 0.10.0

Reported by:	portscout
7fa547f57b
Yuri Victorovich (yuri) · 0.9.1
cad/openfpgaloader: Update 0.9.0 -> 0.9.1

Reported by:	portscout
769145c157
Stefan Eßer (se) · 0.9.0_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.9.0_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dima Panov (fluffy) · 0.9.0_1
*/*: bump all consumers after recent boost upgrade
4cf39decb3
Yuri Victorovich (yuri) · 0.9.0
cad/openfpgaloader: Update 0.8.0 -> 0.9.0

Reported by:	portscout
42064a3c71
Yuri Victorovich (yuri) · 0.8.0
cad/openfpgaloader: Update 0.7.0 -> 0.8.0

Reported by:	portscout
ad1f1c0f6b
Yuri Victorovich (yuri) · 0.7.0
cad/openfpgaloader: Update 0.6.1 -> 0.7.0

Reported by:	portscout
2b870319dc
Yuri Victorovich (yuri) · 0.6.1
cad/openfpgaloader: Update 0.5.0 -> 0.6.1

Reported by:	portscout
63452f6076
Yuri Victorovich (yuri) · 0.5.0
cad/openfpgaloader: Update 0.4.0 -> 0.5.0

Reported by:	portscout
68022df8ac
Yuri Victorovich (yuri) · 0.4.0
cad/openfpgaloader: Update 0.3.0 -> 0.4.0

Reported by:	portscout
d779b4376f
Yuri Victorovich (yuri) · 0.3.0
cad/openfpgaloader: Update 0.2.6 -> 0.3.0

Reported by:	portscout
78a0145a68
Yuri Victorovich (yuri) · 0.2.6
cad/openfpgaloader: Update 0.2.5 -> 0.2.6

Reported by:	portscout
c5b605ecf1
Mathieu Arnold (mat) · 0.2.5
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.2.5
Remove # $FreeBSD$ from Makefiles.
305f148f48
Yuri Victorovich (yuri) · 0.2.5
cad/openfpgaloader: Update 0.2.1 -> 0.2.5
f4746f8134
Piotr Kubaj (pkubaj) · 0.2.1
cad/openfpgaloader: fix build on GCC architectures

Additional files now use ETIME.
b093f9d546
Yuri Victorovich (yuri) · 0.2.1
cad/openfpgaloader: Update 0.2 -> 0.2.1

Reported by:	portscout
d372219490
Yuri Victorovich (yuri) · 0.2
cad/openfpgaloader: Update 0.1 -> 0.2

Reported by:	portscout
7b7b954478
Piotr Kubaj (pkubaj) · 0.1
cad/openfpgaloader: fix build on GCC architectures

ETIME is not defined on GCC architectures, define it to the value that Clang uses.
1ba7e4e6ed
Yuri Victorovich (yuri) · 0.1
New port: cad/openfpgaloader: Universal utility for programming FPGA
d5f3f07605