CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

cad/openscad-devel 2026.10.23

Programmer's solid 3D CAD modeller

Port info

Maintainer
mr@FreeBSD.org
Packages
latest: 2026.09.03_2, update to 2026.10.23 not built yet
Upstream
up to date
Last update
to 2026.10.23 · 4bbb207f72
Quarterly
2026Q4: 2026.09.03_2
WWW
https://www.openscad.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install openscad-devel
installs 2026.09.03_2 from latest; from quarterly (2026Q4) 2026.09.03_2
Port
# cd /usr/ports/cad/openscad-devel && make install clean
Size
6.8 MiB download · 28 MiB installed
Depends on
archivers/libzip 1.12.1, cad/lib3mf 2.5.0, comms/hidapi 0.15.0, devel/boost-libs 1.92.0, devel/desktop-file-utils 0.28, devel/double-conversion 3.4.0, devel/gettext-runtime 1.0_1, devel/glib20 2.88.3,2, devel/onetbb 2023.1.0, devel/qscintilla2 2.14.1,1, devel/qt6-5compat 6.11.2, devel/qt6-base 6.11.2_1, devel/qt6-tools 6.11.2, graphics/cairo 1.18.2,3, graphics/glew 2.3.1, graphics/libGLU 9.0.3, graphics/libglvnd 1.7.0, graphics/opencsg 1.8.2, graphics/qt6-svg 6.11.2, lang/python312 3.12.15, math/gmp 6.3.0, math/mpfr 4.2.2,1, misc/shared-mime-info 2.4_2, multimedia/qt6-multimedia 6.11.2_1, print/freetype2 2.14.3, print/harfbuzz 14.6.0, textproc/libxml2 2.15.4, x11-fonts/fontconfig 2.18.3,1, x11/libX11 1.8.14,1
License
GPLv2+

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162026.09.03_22026.09.03_2–
FreeBSD 152026.09.03_22026.09.03_2–
FreeBSD 142026.09.03_22026.09.03_22026.09.03_2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152026.09.03_22026.09.03_2–
FreeBSD 142026.09.03_22026.09.03_22026.09.03_2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2026.09.03_2.

Not counted (2)

CVEs that match this port only loosely: inherited from the whole project, or with versions that cannot be compared. What does this mean?

2 with versions that cannot be compared
The CVE record gives dates or the port uses snapshot versions (or the other way round), so the version of this port cannot be placed in the affected range.
CVECVSSPublishedDescription
CVE-2022-04977.12022-08-29A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations.
CVE-2022-04965.52022-08-29A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when i…

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (98)

Dima Panov (fluffy) · 2021.02.09_12
devel/boost-all: bump all library consumers after boost upgrade

PR:	246106
b082b3d13e
Charlie Li (vishwin) · 2021.02.09_11
textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
d63665f7cd
Loïc Bartoletti (lbartoletti) · 2021.02.09_10
devel/qscintilla-qt5: Update to 2.13.2

Change:
  - https://riverbankcomputing.com/news/QScintilla_2.13.2_Released
8f81938500
Matthias Fechner (mfechner) · 2021.02.09_9
textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
247c7db751
Loïc Bartoletti (lbartoletti) · 2021.02.09_8
*/*: Update qscintilla2 to 2.13.1

Changes:
  - https://riverbankcomputing.com/news/QScintilla_2.13.1_Released
354d8cf1c3
Jimmy Olgeni (olgeni) · 2021.02.09_7
*: fix tab vs. space issues, and comments according to the guide.
4460cf727a
Loïc Bartoletti (lbartoletti) · 2021.02.09_7
cad/openscad*: Fix build against CGAL 5.3

PR:		258085
Approved by:	wen
Obtained from:	https://github.com/openscad/openscad/pull/3844
912ab64cc1
Bernhard Froehlich (decke) · 2021.02.09_6
cad/openscad-devel: Add CPE information

Approved by:	portmgr (blanket)
667d2d1648
Loïc Bartoletti (lbartoletti) · 2021.02.09_6
*/*: PyQt Update qscintilla2 to 2.13.0 and py-qt5-sip to 12.9.0

Changes:
  - https://riverbankcomputing.com/news/QScintilla_2.13.0_Released
  - https://www.riverbankcomputing.com/hg/sip/raw-file/tip/NEWS
PR:	257308
Exp-run by:	antoine
8b9c482b90
Loïc Bartoletti (lbartoletti) · 2021.02.09_5
devel/qscintilla2: Update to 2.12.1

Changelog:
	https://riverbankcomputing.com/news/QScintilla_2.12.1_Released

PR:		257002
Exp-run by:	antoine
9713ff93f2
Kevin Bowling (kbowling) · 2021.02.09_4
graphics/mesa-libs: Bump reverse deps for libglvnd

Per discussion with bapt on helping pkg handle the changing of these
deps and avoiding impossible upgrade senarios.

PR:		246767
Reviewed by:	manu, bapt
Approved by:	x11
Differential Revision:	https://reviews.freebsd.org/D30824
da3162c7c9
Loïc Bartoletti (lbartoletti) · 2021.02.09_3
math/cgal: Update to 5.2.1

- Remove files/patch-CMakeLists.txt
 - Remove LD_CONFIG and move USES (pet porlint)
 - Bump ports

Changes:
   - https://www.cgal.org/2021/03/17/cgal521/
   - https://www.cgal.org/2020/12/22/cgal52/

PR:		255171
Approved by:	wen
6d6c5520f6
Tobias Kortkamp (tobik) · 2021.02.09_2
Clean up all commented PORTREVISION and PORTEPOCH lines

No revision bump tool that we have cleans them up or deals with
them, so we end up with duplicated lines.  Instead of implementing
that just clean up the 51 ports that do this.

PORTREVISION and PORTEPOCH can be set to 0 explicitly instead if
you need a reminder or placeholder.
1bf865fed5
Mathieu Arnold (mat) · 2021.02.09_2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Loïc Bartoletti (lbartoletti) · 2021.02.09_2
PyQt5: Update PyQt5 to 5.15.4 and py-qtbuilder to 1.9.1

PR:		254218
Exp-run by:	antoine
0b7a24020a
Loïc Bartoletti (lbartoletti) · 2021.02.09_1
PyQt5: Update PyQt5 to 5.15.3, QScintilla2 to 2.12.0, py-qtbuilder to 1.9.0

* PyQt5: update to 5.15.3

This is a minor feature and bug-fix release. There are corresponding releases of the other PyQt5-related packages.

 - Added the missing QImage.setAlphaChannel().
 - Support for the QtNetworkAuth library has been moved to a separate PyQtNetworkAuth package.
 - Wheels no longer bundle the corresponding Qt libraries and instead automatically install them from an external wheel.

* QScintilla2: update to 2.12.0

This adds support for Qt6 and removes support for Qt4.

 - Change the new distname (again)i due to a conflict
 - Use the new sip-build system

* devel/py-qtbuilder: update to 1.9.0
* devel/py-sip: fix flavor for sip-distinfo

PR:		253865
Exp-run by:	antoine
108f234f7f
Michael Reifenberger (mr) · 2021.02.09
Update openscad to 2021.01 and openscad-devel to the latest commit
3358b9e28b
Loïc Bartoletti (lbartoletti) · 2020.01.04_5
Update qscintilla2 to 2.11.6
661f174fd0
Thierry Thomas (thierry) · 2020.01.04_4
- Upgrade math/eigen3 to 3.3.8;

- Add some dependencies which might be detected by Find_Package but not registered;

- Bump PORTREVISION of consumers.

PR:		250833
Submitted by:	/me
Approved by:	tcberner@ (KDE / maintainer) + exp-run
0b5864f66c
Loïc Bartoletti (lbartoletti) · 2020.01.04_3
Update PyQt to 5.15.0, py-sip to 4.19.24 and qscintilla2 to 2.11.5

- Update PyQt to 5.15.0, py-sip to 4.19.24 and qscintilla2 to 2.11.5
- Use pypi for PYQT [1]
- Add devel/py-qt5-sip (Don't use it for now. It will be used in future updates of PyQt with py-sip >= 5)
- Add missing py-qt5 ports: comms/py-qt5-sensors, devel/py-qt5-location, devel/py-qt5-remoteobjects, net/py-qt5-networkauth
- Strip libs
- Refactor *_PATH and *_PORT parts

[1] RiverBankComputing doesn't offer links to download latest version of some ports

PR:		247369
Reviewed by:	tcberner
Differential Revision:	https://reviews.freebsd.org/D25749
Exp-run by:	antoine
2933bb22c3
Loïc Bartoletti (lbartoletti) · 2020.01.04_2
smath/cgal: Update to 5.0.2

The new version of CGAL brings improvements and a lot of changes, including 2 major ones [1](header only[2] and require c++14) requiring to patch all software depending on it.

[1] https://www.cgal.org/2019/11/08/cgal50/
[2] https://doc.cgal.org/latest/Manual/installation.html

math/cgal:

   - Update to 5.0.2

databases/sfcgal:

   - Fix with cgal5 : use c++14 and add gmpxx link

databases/postgis*:

   - bump portversion needed due to cgal and sfcgal changes

cad/openscad:

   - remove LIB_DEPENDS and add BUILD_DEPENDS
   - Use c++14

cad/openscad-devel:

   - remove LIB_DEPENDS and add BUILD_DEPENDS
   - Use c++14

games/flightgear-terragear:

   - remove LIB_DEPENDS and add BUILD_DEPENDS
   - fix Boost error (ld: error: undefined symbol: boost::thread::hardware_concurrency())

graphics/colmap:

   - remove LIB_DEPENDS and add BUILD_DEPENDS
   - fix CMAKE_CXX_FLAGS with c++14

PR:		245824
Approved by:	wen, jbeich, tcberner (mentor)
Differential Revision:	D24578
be7d93cd66
Loïc Bartoletti (lbartoletti) · 2020.01.04_1
Update py-sip to 4.19.21 and qscintilla2 to 2.11.4

- Update py-sip to 4.19.21
  - Update qscintilla2 to 2.11.4
  - Replace MASTER_SITE_RIVERBANK with https versions
  - Replace QSCI2_DISTNAME to match with the new one

PR:		245308
Approved by:	tcberner (mentor)
Exp-run by:	antoine
5ead0a2f78
Michael Reifenberger (mr) · 2020.01.04
Update to latest commit from 2020.01.04
dd31dfe452
Jan Beich (jbeich) · 2019.09.05_1
devel/boost-*: update to 1.72.0

Changes:	http://www.boost.org/users/history/version_1_72_0.html
PR:		241449
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D22136
701aa3bcf8
Niclas Zeising (zeising) · 2019.09.05
Add USES=xorg USES=gl, ports categories c

Add USES=xorg, USES=gl and in a few cases USES=gnome to ports in categories
starting with 'c'.
c2e845d0c8
Jan Beich (jbeich) · 2019.09.05
cad/openscad: unbreak with boost 1.72

src/parser.y:68:6: error: no template named 'stack' in namespace 'std'
std::stack<LocalScope *> scope_stack;
~~~~~^
0ba996e9c1
Michael Reifenberger (mr) · 2019.09.05
Update to 2019.09.05
8605cafcda
Jan Beich (jbeich) · 2019.04.04_4
devel/boost-*: update to 1.71.0

Changes:	http://www.boost.org/users/history/version_1_71_0.html
PR:		238827
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D20774
befa71e0f3
Yuri Victorovich (yuri) · 2019.04.04_3
devel/double-conversion: Update 3.0.0 -> 3.1.5-11

Maintainer reset due to the extended timeout, as per policy.
Take maintainership.

7 ports are bumped.

PR:		239367
Approved by:	waitman@waitman.net (maintainer's timeout; ~6months on a PR#235789 for the same port)
2439819ae3
Gerald Pfeifer (gerald) · 2019.04.04_2
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Jan Beich (jbeich) · 2019.04.04_1
devel/boost-*: update to 1.70.0

Changes:	http://www.boost.org/users/history/version_1_70_0.html
PR:		235956
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19303
9b21a3a084
Michael Reifenberger (mr) · 2019.04.04
Update to latest version from 2019.04.04 and fix pkg-plist to fix build errors.

PR:	237015
4b9a35c73c
Michael Reifenberger (mr) · 2019.02.05_1
Update to 2019.02.05
1d36556c0e
Tijl Coosemans (tijl) · 2018.10.22_4
Fix Qt5 symbol version scripts to put the catch-all clause first.  When a symbol matches multiple clauses the last one takes precedence.  If the catch-all is last it captures everything.  In the case of Qt5 libraries this caused all symbols to have a Qt_5 label while some should have Qt_5_PRIVATE_API.  This only affects lld because GNU ld always gives the catch-all lowest priority.

Older versions of Qt5Webengine exported some memory allocation symbols from
the bundled Chromium.  Version 5.9 stopped exporting these [1] but the
symbols were kept as weak wrappers for the standard allocation functions to
maintain binary compatibility. [2][3]  The problem is that the call to the
standard function in these weak wrappers is only resolved to the standard
function if there's a call to this standard function in other parts of
Qt5Webengine, because only then is there a non-weak symbol that takes
precedence over the weak one.  If there's no such non-weak symbol the call
in the weak wrapper resolves to the weak wrapper itself creating an infinite
call loop that overflows the stack and causes a crash.  Some of the
allocation functions are variants of C++ new and delete and it probably
depends on the compiler whether these variants are used in other parts of
Qt5Webengine.

Remove the weak wrappers (make them Linux specific).  This isn't binary
compatible but we are already breaking that with the changes to the symbol
versions.

[1] https://github.com/qt/qtwebengine/commit/5c2cbfccf9aafb547b0b30914c4056abd25942a4
[2] https://github.com/qt/qtwebengine/commit/2ed5054e3a800fa97c2c9e920ba1e6ea4b6ef2a5
[3] https://github.com/qt/qtwebengine/commit/009f5ebb4bd6e50188671e0815a5dae6afe39db5

Bump all ports that depend on Qt5.

PR:		234070
Exp-run by:	antoine
Approved by:	kde (adridg)
1bf487d3e7
Tobias C. Berner (tcberner) · 2018.10.22_3
Update math/eigen3 to 3.3.7

- http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.3.6
- http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.3.7
8a4ab05d84
Gerald Pfeifer (gerald) · 2018.10.22_2
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Jan Beich (jbeich) · 2018.10.22_1
devel/boost-*: update to 1.69.0

Changes:	http://www.boost.org/users/history/version_1_69_0.html
PR:		232525
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17645
7c879267dc
Michael Reifenberger (mr) · 2018.10.22
Update 2018.10.22: 	Unbreak with Boost 1.69 	Drop dependency on -lcompat 	Replace time.h with ctime

PR:	232516
Submitted by:	Jan Beich jbeich@
78b45230c5
Niclas Zeising (zeising) · 2018.04.19_5
Change x11/xorgproto to become a build dep

Change x11/xorgproto to become a build time dependency when added to
USE_XORG.  Change the dependency to be on the port, rather than a file the
port installs.
Fix fallout.
Bump portrevision on depending ports.

PR:		230909
Reviewed by:	eadler
Approved by:	portmgr (antoine)
Obtained from:	https://github.com/FreeBSDDesktop/freebsd-ports/tree/feature/xorgproto
exp-run:	antoine
Differential Revision:	https://reviews.freebsd.org/D16906
0fae2e9e0e
Jan Beich (jbeich) · 2018.04.19_4
devel/boost-*: update to 1.68.0

- Switch to C++14 for libboost_system to support C++14 consumers

Changes:	http://www.boost.org/users/history/version_1_68_0.html
PR:		229569
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D16165
0b055d47f2
Gerald Pfeifer (gerald) · 2018.04.19_3
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6
Tobias C. Berner (tcberner) · 2018.04.19_2
Replace bsd.qt.mk by Uses/qt.mk and Uses/qt-dist.mk

From now on, ports that depend on Qt4 will have to set
	USES=		qt:4
	USE_QT=		foo bar
ports depending on Qt5 will use
	USES=		qt:5
	USE_QT=		foo bar

PR:		229225
Exp-run by:	antoine
Reviewed by:	mat
Approved by:	portmgr (antoine)
Differential Revision:	→https://reviews.freebsd.org/D15540
b1a1d38bf9
Dmitry Marakasov (amdmi3) · 2018.04.19_2
- Whitespace fix

Approved by:	portmgr blanket
dfa670f62b
Jan Beich (jbeich) · 2018.04.19_2
Drop FreeBSD 10.3 support

Reviewed by:	yuri (SoPlex), sunpoet (nghttp2), cpm (chromium), brooks (llvm*)
Approved by:	portmgr (rene)
Differential Revision:	https://reviews.freebsd.org/D15238
67a9073255
Tobias C. Berner (tcberner) · 2018.04.19_2
Update the QScintilla2 ports to 2.10.4
ddd37ce3fd
Michael Reifenberger (mr) · 2018.04.19_1
Reenable for FreeBSD >= 10.4 Use the CONFIG argument to enable experimental features

Submitted by:	jbeich@
5a7e9b17e3
Michael Reifenberger (mr) · 2018.04.19_1
Enable experimental features. Make portlint happy. Mark Broken for FreeBSD 10 due to compile/link error.
55caf84116
Michael Reifenberger (mr) · 2018.04.19
Add openscad-devel as of 2018.04.19

PR:		227581
8de9090183