CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

deskutils/lxqt-notificationd2.4.0_2

LXQt notification daemon

Maintainer
lxqt@FreeBSD.org
Packages
lxqt-notificationd 2.4.0_2
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://lxqt-project.org
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (39)

Jason E. Hale (jhale) · 2.4.0_2
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.11.2 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt

MFH:		2026Q3
82a328aa9b
Jason E. Hale (jhale) · 2.4.0_1
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.11.1 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt
4dab0722de
Jose Alonso Cardenas Marquez (acm) · 2.4.0
x11-wm/lxqt: Update to 2.4.0

ChangeLog at:   https://lxqt-project.org/release/2026/04/20/release-lxqt-2-4-0/
With hat:       lxqt
178068950d
Jason E. Hale (jhale) · 2.3.1_2
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.10.2 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt
8c49a1e64d
Jason E. Hale (jhale) · 2.3.1_1
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.10.1 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt
45fef8811c
Jose Alonso Cardenas Marquez (acm) · 2.3.1
deskutils/lxqt-notificationd: Update to 2.3.1

ChangeLog at:   https://lxqt-project.org/release/2025/12/04/point-release-lxqt-notificationd-2-3-1/
With hat:       lxqt
de6afc5013
Jose Alonso Cardenas Marquez (acm) · 2.3.0
x11-wm/lxqt: Update to 2.3.0

- Update x11/screengrab to 3.1.0
- Update editors/featherpad to 1.6.2
- Add xdg-desktop-portal like RUN_DEPENDS to xdg-desktop-portal-lxqt [1]

ChangeLog at:   https://lxqt-project.org/release/2025/11/05/release-lxqt-2-3-0/
With hat:       lxqt
PR:		290488
Reported by:	Siva Mahadevan <me at svmhdvn.name> [1]
427e49cad5
Jason E. Hale (jhale) · 2.2.0_4
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.9.3 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt

MFH:		2025Q4
073274bd7f
Jason E. Hale (jhale) · 2.2.0_3
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.9.2 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.

[1] https://wiki.freebsd.org/KDE/Qt

MFH:		2025Q3
ca55e461e4
Jose Alonso Cardenas Marquez (acm) · 2.2.0_2
devel/lxqt2-build-tools: Update to 2.2.1

- Bump PORTREVISION of some lxqt ports
- Fix build with plasma6 6.4.0

With hat:       lxqt
PR:		287604
e4c325e8b5
Jason E. Hale (jhale) · 2.2.0_1
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.9.1 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.

This list of bumps is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please let kde@ know
so we can correct this for future updates.
ea63faffc8
Jose Alonso Cardenas Marquez (acm) · 2.2.0
x11-wm/lxqt: Update to 2.2.0

ChangeLog at:   https://lxqt-project.org/release/2025/04/17/release-lxqt-2-2-0/

With hat:       lxqt
f3d282504c
Jason E. Hale (jhale) · 2.1.1_2
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.8.3 edition.

These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.

Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility even between patch
releases and its use is highly discouraged.

This list of bumps is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please let kde@ know
so we can correct this for future updates.

Grep new entires for "_p.h". If they look Qt-ish, please reject. It's a
burden on the users at large and your local Qt maintainers to allow this
irresponsible behavior from downstream projects to continue.
7b1543362f
Jason E. Hale (jhale) · 2.1.1_1
*/*: Bump PORTREVISION for known Qt private API abusers

Qt 6.8.2 edition.

These ports directly use or link to a library that uses the Qt
private API and must be rebuilt with every Qt update.

Qt public API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
using the private API is highly discouraged since this is unstable even
between patch releases and is really only meant for internal use.

Adding devel/libqt6xdg and its consumers to the list this time around
based on [1].

PR:		283950 [1]
740d89cf91
Jose Alonso Cardenas Marquez (acm) · 2.1.1
deskutils/lxqt-notificationd: Update to 2.1.1

With hat:	lxqt
946356d139
Jose Alonso Cardenas Marquez (acm) · 2.1.0
x11-wm/lxqt: Update to 2.1.0

This release add initial support for wayland. More information at:

https://github.com/lxqt/lxqt/wiki/ConfigWaylandSettings

Release highlights at:

https://lxqt-project.org/release/2024/11/05/release-lxqt-2-1-0/

With hat:       lxqt
55f09ad6fc
Jose Alonso Cardenas Marquez (acm) · 2.0.1
x11-wm/lxqt: Update to 2.0.0

- Update mostly lxqt ports to 2.0.x
- Update some lxqt dependencies to latest version
- Update Mk/Uses/lxqt.mk file for support some legacy and new lxqt ports
- Add devel/libdbusmenu-lxqt
- Add x11/libfm-qt6
- Add devel/libqt6xdg
- Add sysutils/libsysstat-qt6
- Add devel/lxqt2-build-tools
- Add sysutils/lxqt-qt6plugin
- Add deskutils/xdg-desktop-portal-lxqt
- Add x11-toolkits/qtermwidget-qt5 for no break x11/coreterminal
- Pass maintainership to new lxqt@ group
- Few other modifications

PR:		278905
Approved by:	jsm
385fcf599e
Jesper Schmitz Mouridsen (jsm) · 1.4.0
LXQt: update to 1.4.0

Changelog:
 https://lxqt-project.org/release/2023/11/05/release-lxqt-1-4-0/

PR:	277376
fd6fe4e3db
Jesper Schmitz Mouridsen (jsm) · 1.3.0
x11-wm/lxqt: Update to 1.3.0

PR:	271509
436af066ae
Jan Beich (jbeich) · 1.2.0
deskutils/lxqt-notificationd: unbreak after 020693c166d1

CMake Error at /usr/local/share/cmake/Modules/FindPackageHandleStandardArgs.cmake:230 (message):
  Could NOT find Perl (missing: PERL_EXECUTABLE)

PR:		266007
Reported by:	antoine (via exp-run)
8bf9831fdf
Jesper Schmitz Mouridsen (jsm) · 1.2.0
deskutils/lxqt-notificationd: Update to 1.2.0
956c16861a
Felix Palmen (zirias) · 1.1.0
Mk/Uses: always use colon for build/run suffix

Most USES use a colon for build/run(/test) suffixes. Change kde.mk,
qt.mk and pyqt.mk to do the same, and update all ports using that.

Document in CHANGES.

PR:			266034
Exp-run by:		antoine
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36349
ddae4e92d8
Stefan Eßer (se) · 1.1.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.1.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.1.0
deskutils: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Alex "lissyara" Keda <admin@lissyara.su>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexander Vereeken <Alexander88207@protonmail.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Andreas Kohn <andreas@syndrom23.de>
  *  Andrew Hsu <ahsu@users.sf.net>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Zakhvatov
  *  Andrey Zakhvatov <andy@icc.surw.chel.su>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Beat Gaetzi <beat@chruetertee.ch>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christian Brueffer <chris@unixpages.org>
  *  Cyrille Lefevre <clefevre@citeweb.net>
  *  Daniel Eischen <deischen@FreeBSD.org>
  *  Danilo Egea Gondolfo <danilo@FreeBSD.org>
  *  Dean Povey <povey@wedgetail.com>
  *  Dennis Herrmann <dhn@FreeBSD.org>
  *  Edwin Groothuis
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emmanuel Vadot <manu@FreeBSD.org>
  *  Eric L. Hernes <erich@FreeBSD.org>
  *  Eric Turgeon <ericbsd@FreeBSD.org>
  *  Eric Turgeon <ericturgeon@ghostbsd.org>
  *  FreeBSD GNOME Team
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Guillaume Paquet <amyfoub@gmail.com>
  *  Gustau Perez <gustau.perez@gmail.com>
  *  Gustau Perez i Querol <gustau.perez@gmail.com>
  *  Gvozdikov Veniamin <g.veniamin@googlemail.com>
  *  Herbert J. Skuhra <h.skuhra@gmail.com>
  *  Jason Helfman <jgh@FreeBSD.org>
  *  Jeremy Messenger <mezz@FreeBSD.org>
  *  Jim Mock <jim@FreeBSD.org>
  *  Jimmy Olgeni <olgeni@uli.it>
  *  Joe Marcus Clarke <marcus@FreeBSD.org>
  *  Joey Mingrone <joey@mingrone.org>
  *  Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe>
  *  Joseph Benden <joe@thrallingpenguin.com>
  *  Ken Moore <ken@pcbsd.org>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kris Kennaway <kris@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Leinier Cruz Salfran <salfrancl@yahoo.es>
  *  Lewis Thompson <purple@lewiz.net>
  *  Loïc Bartoletti <lbartoletti@FreeBSD.org>
  *  Lucas Holt <luke@justjournal.com>
  *  MITA Yoshio <mita@iis.u-tokyo.ac.jp>
  *  Marcin Cieslak <saper@saper.info>
  *  Markus Brueffer <brueffer@phoenix-systems.de>
  *  Markus Brueffer <markus@FreeBSD.org>
  *  Martin Klaffenboeck <martin.klaffenboeck@gmx.at>
  *  Martin Wilke
  *  Mathieu Arnold
  *  Matt Braithwaite <mab@red-bean.com>
  *  Matt Lancereau <matt@rimasec.net>
  *  Matthew Seaman <matthew@FreeBSD.org>
  *  Matthias Andree <mandree@FreeBSD.org>
  *  Nicola Stanislao Vitale <nivit@FreeBSD.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Olivier Duchateau
  *  Pav Lucistnik <pav@oook.cz>
  *  Pete Fritchman <petef@databits.net>
  *  Richard Gallamore <ultima@FreeBSD.org>
  *  Rob Evers <rob@debank.tv>
  *  Roman Bogorodskiy <bogorodskiy@inbox.ru>
  *  Rusmir Dusko <nemysis@FreeBSD.org>
  *  Thierry Thomas (<thierry@thomas.as>)
  *  Thierry Thomas <thierry@pompo.net>
  *  Thorsten Greiner <thorsten.greiner@web.de>
  *  Tobias Roth <ports@fsck.ch>
  *  Veniamin Gvozdikov <vg@FreeBSD.org>
  *  alepulver@FreeBSD.org
  *  cartola (Carlos E. G. Carvalho)
  *  che@bein.link
  *  gahr
  *  ijliao
  *  jamrich.majo@gmail.com
  *  joerg
  *  johans
  *  john@jnielsen.net
  *  lightside <lightside@gmx.com>
  *  mi
  *  mi@aldan.ziplink.net
  *  olevole@olevole.ru
  *  shanee@rabbit.augusta.de
  *  stas
  *  thierry@pompo.net

With hat:	portmgr
4dd7a7430e
Jesper Schmitz Mouridsen (jsm) · 1.1.0
deskutils/lxqt-notificationd: Update to 1.1.0
f52bd27b02
Li-Wen Hsu (lwhsu) · 1.0.0
*/lxqt*: Update WWW
988c8752f0
Jesper Schmitz Mouridsen (jsm) · 1.0.0
deskutils/lxqt-notificationd: Update to 1.0.0
284fec6859
Jesper Schmitz Mouridsen (jsm) · 0.17.0
deskutils/lxqt-notificationd: Update to 0.17.0
604ef17159
Mathieu Arnold (mat) · 0.16.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Jesper Schmitz Mouridsen (jsm) · 0.16.0
deskutils/lxqt-notificationd Update to 0.16.0
e7f4232612
Jesper Schmitz Mouridsen (jsm) · 0.15.0
Upgrade to 0.15.0

Approved by: swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D24713
5134159be7
Jesper Schmitz Mouridsen (jsm) · 0.14.1
Update LXQt to 0.14.1

Update devel/libqtxdg to 3.4.0
Update x11/lxqt-globalkeys to 0.14.3

Official announcement https://forum.lxqt.org/t/release-lxqt-0-14-1/648

PR: 239427
Approved by: swills (mentor) mbeis@xs4all.nl (maintainer)
Differential Revision: https://reviews.freebsd.org/D21056
a8a2ebda28
Gerald Pfeifer (gerald) · 0.14.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Jesper Schmitz Mouridsen (jsm) · 0.14.0
Upgrade the LXQt desktop environment to 0.14.0 Upstream announcement https://forum.lxqt.org/t/release-lxqt-0-14-0/572

Approved by: miwi (mentor)
Differential Revision: https://reviews.freebsd.org/D19056
0f8e28c12e
Tijl Coosemans (tijl) · 0.13.0_2
Fix Qt5 symbol version scripts to put the catch-all clause first.  When a symbol matches multiple clauses the last one takes precedence.  If the catch-all is last it captures everything.  In the case of Qt5 libraries this caused all symbols to have a Qt_5 label while some should have Qt_5_PRIVATE_API.  This only affects lld because GNU ld always gives the catch-all lowest priority.

Older versions of Qt5Webengine exported some memory allocation symbols from
the bundled Chromium.  Version 5.9 stopped exporting these [1] but the
symbols were kept as weak wrappers for the standard allocation functions to
maintain binary compatibility. [2][3]  The problem is that the call to the
standard function in these weak wrappers is only resolved to the standard
function if there's a call to this standard function in other parts of
Qt5Webengine, because only then is there a non-weak symbol that takes
precedence over the weak one.  If there's no such non-weak symbol the call
in the weak wrapper resolves to the weak wrapper itself creating an infinite
call loop that overflows the stack and causes a crash.  Some of the
allocation functions are variants of C++ new and delete and it probably
depends on the compiler whether these variants are used in other parts of
Qt5Webengine.

Remove the weak wrappers (make them Linux specific).  This isn't binary
compatible but we are already breaking that with the changes to the symbol
versions.

[1] https://github.com/qt/qtwebengine/commit/5c2cbfccf9aafb547b0b30914c4056abd25942a4
[2] https://github.com/qt/qtwebengine/commit/2ed5054e3a800fa97c2c9e920ba1e6ea4b6ef2a5
[3] https://github.com/qt/qtwebengine/commit/009f5ebb4bd6e50188671e0815a5dae6afe39db5

Bump all ports that depend on Qt5.

PR:		234070
Exp-run by:	antoine
Approved by:	kde (adridg)
1bf487d3e7
Tobias C. Berner (tcberner) · 0.13.0_1
Change cmake default behaviour to outsource.

Ports that build out of source now simply can use "USES=cmake"
instead of "USES=cmake:outsource". Ports that fail to build
out of source now need to specify "USES=cmake:insource".

I tried to only set insource where explictely needed.

PR:		232038
Exp-run by:	antoine
707c6bf295
Gerald Pfeifer (gerald) · 0.13.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Jesper Schmitz Mouridsen (jsm) · 0.13.0
New port deskutils/lxqt-notificationd

PR: 229302
Approved by: swills (mentor)
Differential Revision: https://reviews.freebsd.org/D16812
34c35b0efb