CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

devel/shiboken25.15.19

Python binding generator for C++ libraries

Maintainer
kde@FreeBSD.org
Packages
py312-shiboken2 5.15.19
Upstream
unknown
CPE
none, CVEs only via VuXML
WWW
https://wiki.qt.io/PySide2
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (55)

Max Brazhnikov (makc)
devel/shiboken2: Remove, not needed anymore

Should have been removed along with PySide2 ports.

PR:		299945
Reported by:	Patrick Crandol
d2d21be326
Rene Ladan (rene)
all: bump USES=python version to 3.11+ in preparation of removing lang/python310
4b13291392
Gleb Popov (arrowd)
devel/shiboken2: Fix building with CMake 4
688bd82aed
Jason E. Hale (jhale)
Qt5: Update to 5.15.19

This is the final release of Qt5. If your port still uses Qt5 and could
possibly use Qt6 instead, now would be a good time to make the switch.

PySide2: Update to 5.15.19

Announcement:
https://lists.qt-project.org/pipermail/announce/2026-May/000626.html
Release notes:
https://code.qt.io/cgit/qt/qtreleasenotes.git/tree/qt/5.15.19/release-note.md
1817deda1e
Antoine Brodin (antoine)
*: allow testing 3.12 as default python version

PR:		285957
8d81b85e23
Jason E. Hale (jhale)
Qt5: Update to 5.15.18

This is the penultimate release of Qt5. While Qt5 is EOL, due to the
LGPL releases being a year behind the commercial releases, there will
still be one more patch release in May 2026.

PySide2: Update to 5.15.18

Announcement:
https://lists.qt-project.org/pipermail/announce/2025-October/000592.html
Release notes:
https://code.qt.io/cgit/qt/qtreleasenotes.git/tree/qt/5.15.18/release-note.md

MFH:		2025Q4
bc01cbb5a1
Antoine Brodin (antoine)
misc: unbreak the ports tree
5375237040
Matthias Andree (mandree)
*: Revise USES=python:... version range constraints

and strip all lower bounds of 3.9 or 3.10 because they are implied now.

python:3.9-X  -> python:-X
python:3.9+   -> python
python:3.10-X -> python:-X
python:3.10+  -> python
(options such as ,build preserved)
1403bb7765
Baptiste Daroussin (bapt)
libxml2: chase libxml soversion bump
3068854dd0
Jason E. Hale (jhale)
PySide2: Update to 5.15.17

Reported by:	rhurlin
cdec76c278
Muhammad Moinur Rahman (bofh)
*/*: Remove defunct references to python3.8

- Remove non DEFAULT python option in finance/quickfix
- Remove python conditionals for sysutils/py-borgmatic
- Remove python confitional deskutils/py-bugwarrior/Makefile

Approved by:	portmgr (just-fix-it)
f17754bc05
Jason E. Hale (jhale)
Qt5: Update to 5.15.16

Update devel/pyside2* and devel/shiboken2 to 5.15.16

Update www/qt5-webengine to include the latest security fixes in
the chromium submodule [1]

Release note:
https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.16/release-note.md

MFH:		2024Q4
Security:	16e472d5-a8aa-11ef-b680-4ccc6adda413 [1]
501ccfe6dd
Jason E. Hale (jhale)
Qt5: Update to 5.15.15

Update devel/pyside2* and devel/shiboken2 to 5.15.15

Update www/qt5-webengine to include the latest security fixes in
the chromium submodule

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.15/release-note.md

MFH:		2024Q3
Security:	66907dab-6bb2-11ef-b813-4ccc6adda413
9e1e9e17c5
Jason E. Hale (jhale)
Qt5: Update to 5.15.14

Update devel/pyside2* and devel/shiboken to 5.15.14

Update devel/qt5-script* and www/qt5-webengine to 5.15.17

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.14/release-note.md
72a628f271
Jason E. Hale (jhale)
Qt5: Update to 5.15.13

Update devel/pyside2* and devel/shiboken to 5.15.13

Update www/qt5-webengine to latest commit. Python 3.x support has been
integrated upstream, so local patches have been removed.

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.13/release-note.md
9793a1e61a
Charlie Li (vishwin)
devel/py-setuptools-scm: update to 8.0.4

Directory and PORTNAME changed to match normalised name in release
tarball; consumers updated to match.

Although setuptools itself is specified as a run dependency in the
Python package metadata, it is currently left out here to prevent
environment pollution until at least PR 270510 is committed.
Additionally, this version of setuptools-scm requires setuptools>=61,
which means this version is only meant for USE_PYTHON=pep517 ports
as all USE_PYTHON=distutils ports will switch to devel/py-setuptools58
also after PR 270510. science/py-emmet-core is switched to
devel/py-setuptools_scm7 accordingly, as it specifies setuptools-scm<8.
devel/py-{flit-scm,hatch-vcs} have ${PY_SETUPTOOLS} added to
RUN_DEPENDS to compensate.

Further details: https://wiki.freebsd.org/Python/setuptools

Reported by: yuri
Co-authored by: matthew
Exp-run by: antoine (earlier iteration)
Approved by: yuri (science/py-emmet-core, previous iteration)
PR: 272134
Differential Revision: https://reviews.freebsd.org/D39288
5d4139f8bd
Jason E. Hale (jhale)
Qt5: Update to 5.15.12

Update devel/pyside2* and devel/shiboken2 to 5.15.12

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.12/release-note.md
dc05989834
Jason E. Hale (jhale)
devel/shiboken2: Bump supported Python version

Shiboken2 5.15.11 has initial support for Python 3.11 and this will
help the python@ team transition to Python 3.11 as the default.

While here, add the noexport flag to USES=llvm to allow building with
ccache.

Reported by:	wen (via the kde-freebsd mailing list)
bfe377d24c
Jason E. Hale (jhale)
Qt5: Update to 5.15.11

Update devel/pyside2* and devel/shiboken2 to 5.15.11

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.11/release-note.md
7f496af089
Dima Panov (fluffy) · 5.15.10
devel/shiboken2: allow with Python 3.10 (+)

Shiboken2 have backported Python 3.10 support from PySide6 since 5.15.8 release
ad0af83d91
Jason E. Hale (jhale) · 5.15.10
Qt5: Update to 5.15.10

Update devel/qt5-script* and www/qt5-webengine to 5.15.15-lts
Update devel/pyside2* and devel/shiboken2 to 5.15.10

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.10/release-note.md

PR:		273934
Exp-run by:	antoine
2a5c778173
Rene Ladan (rene) · 5.15.2_5
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Loïc Bartoletti (lbartoletti) · 5.15.2_5
devel/shiboken*: fix conflicts between 2 and 6

shiboken_tool.py is an useless tool which doesn't works on 2 nor 6.
rm'em all
bc270d2796
Tobias C. Berner (tcberner) · 5.15.2_4
devel/shiboken2: explicitely disable numpy support

Build failure due to numpy being present in the environment:
	[...]
	error: use of undeclared identifier 'NPY_ARRAY_UPDATEIFCOPY'
		if ((flags & NPY_ARRAY_UPDATEIFCOPY) != 0)
				^
	[...]

Reported by:		rhurlin
ad57704993
Tobias C. Berner (tcberner) · 5.15.2_4
devel/shiboken2: convert to USES=llvm
9c81803e27
Felix Palmen (zirias) · 5.15.2_4
Mk/Uses: always use colon for build/run suffix

Most USES use a colon for build/run(/test) suffixes. Change kde.mk,
qt.mk and pyqt.mk to do the same, and update all ports using that.

Document in CHANGES.

PR:			266034
Exp-run by:		antoine
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36349
ddae4e92d8
Stefan Eßer (se) · 5.15.2_4
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 5.15.2_4
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Charlie Li (vishwin) · 5.15.2_4
textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
d63665f7cd
Matthias Fechner (mfechner) · 5.15.2_3
textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
247c7db751
Dmitry Marakasov (amdmi3) · 5.15.2_2
devel/shiboken2: limit supported python versions

With python 3.10:

pyside-setup-opensource-src-5.15.2/sources/shiboken2/libshiboken/pep384impl.cpp:755:12: error: use of undeclared identifier '_Py_Mangle'
    return _Py_Mangle(privateobj, name);
           ^
pyside-setup-opensource-src-5.15.2/sources/shiboken2/libshiboken/sbkstring.cpp:250:23: error: expression is not assignable
        Py_REFCNT(ob) = 1;
        ~~~~~~~~~~~~~ ^

Also mark BROKEN with python < 3.8 due to plist issues

Approved by:	portmgr blanket
d7c018f5c4
Loïc Bartoletti (lbartoletti) · 5.15.2_2
misc/qtchooser: remove

QtChooser allows you to select your version of Qt among those installed.
However, this tool is no longer supported upstream and will not be
available for Qt6.
By default, our Qt installations are done in
${LOCALBASE}/lib/qt${QT_VERSION} as recommended.

We have added symbolic linking for the main binaries to
${LOCALBASE}/bin with the suffix -qt5.
be86c4fe23
Mathieu Arnold (mat) · 5.15.2_1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 5.15.2_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Christoph Moench-Tegeder (cmt) · 5.15.2_1
devel/shiboken2: depend on correct llvm port

between shiboken2's build system picking the highest versioned
llvm-config available and pkg registering a dependency on the
highest versioned libclang.so available, we need to
- pass the correct llvm-config via cmake variable and not via
  environment, as the environment variable is not used by
  shiboken's build system
- specify the dependency on libclang.so with it's version number; and
  to avoid breaking (or requiring manual intervention) with the next
  LLVM_DEFAULT switch, extract that version number from LLVM_DEFAULT
  in a way that should be working for llvm versions from 6 to 59
  (unless we choose to change our llvm port naming scheme), which
  seems to give us some safety margin.

PR:		253749
Approved by:	lbartoletti (kde@)
88cee8f4d5
Mark Linimon (linimon) · 5.15.2
Mark BROKEN on riscv64:

/usr/include/c++/v1/__config:1141:6: error: "No thread API"
  /usr/include/c++/v1/__threading_support:135:3: error: Unsupported architecture

Approved by:	portmgr (tier-2 blanket)
7a6cd12fd7
Loïc Bartoletti (lbartoletti) · 5.15.2
PySide pass maintainership to kde@

PySide is the "official" QT/Python-binding and should be under the same maintainership as qt.

Approved by:	cmt (via email)
e77acf9992
Loïc Bartoletti (lbartoletti) · 5.15.2
Update Qt/PySide2 to 5.15.2 / PyQt to 5.15.1 / SIP to 5.4.0 This commit combines several updates.

- Update Qt to 5.12.2
- Update PyQt to 5.15.1
- Since PySide 5.15.1 is broken with Qt 5.15.2, so PySide and Shiboken are also updated to 5.15.2.
- Update sip to 5.4.0

SIP is a collection of tools  to create Python bindings for C and C++ libraries and used by PyQt and wxPython. There are some changes with sip5 [1]:
- python 3.5+ is required
- sip drops support of old deprecated methods as sipdistutils & cie.
- this version breaks also PyQt5 extension ABI. SIP files will be installed in ${PYTHON_SITELIBDIR}/PyQt${_PYQT_VERSION}/bindings
- some ports will use the new pyqtbuilder package with the pyproject.toml setup. Instead if the project have a setup.py, you should use sip-build to build it.
- if a port needs sip, it should also needs pysip. BTW, py-qt5-core requires pysip, so that should be enough for PyQt packages.

List of ports impacted by this change. Most of the patches have been integrated or are in the process of being integrated upstream:

- devel/libsavitar
- graphics/py-python-poppler-qt5
- net-im/scudcloud
- net/libarcus
- print/py-frescobaldi
- science/py-veusz
- graphics/qgis and graphics/qgis-ltr
- deskutils/calibre

A special note regarding calibre. New versions require sip>=5, we update it to the latest version (thanks to madpilot@)

science/scidavis will remove the PyQt binding soon and there is no patch planned, so we remove the python option (ok makc@)

While here, convert some ports to USE_PYQT (cad/cura, cad/uranium, devel/eric6, ...)

Thanks to tcberner and adridg!

[1] https://www.riverbankcomputing.com/static/Docs/sip/

PR:                250853
Exp-run by:        antoine
47b26d9293
Christoph Moench-Tegeder (cmt) · 5.15.1
update pyside2 to 5.15.1
f2b4188cb7
Christoph Moench-Tegeder (cmt) · 5.15.0
remove leftovers from pyside2 ports

python 2 support was removed from these ports in r531621, but I forgot
to remove the python2/python3 switcheroo from pkg-plist back then.
c45e04d94e
Christoph Moench-Tegeder (cmt) · 5.15.0
update pyside2 and friends to 5.15.0

following the Qt 5 upgrade.
bump cad/freecad for "needed shared library changed"
e387a37742
Christoph Moench-Tegeder (cmt) · 5.14.2.2
update pyside2 to 5.14.2.2

https://lists.qt-project.org/pipermail/pyside/2020-May/002965.html
b98eeb8e4d
Christoph Moench-Tegeder (cmt) · 5.14.2.1
pyside2 and friends: update to 5.14.2.1

Announcement:
  https://lists.qt-project.org/pipermail/pyside/2020-April/002951.html
dae75c219c
Christoph Moench-Tegeder (cmt) · 5.14.2
update devel/pyside2 and friends to 5.14.2

following r531601 (Qt 5.14.2), PySide2 can be updated, too
- pyside2-tools don't bring their own pyside2-rcc and pyside2-uic but
  use Qt's rcc and uic - patch cad/freecad to handle that
- remove Python 2 support: it's going to go away soon anyway, it did
  complicate these ports a lot, and it would have required more
  workarounds in FreeCAD when using Qt's rcc instead of the old pyside2-rcc.
- while here, do some polishing in freecad's makefile
885808273b
Mark Linimon (linimon) · 5.13.2
Fix build on GCC-based systems:

CMake Error in ApiExtractor/CMakeLists.txt: The compiler feature
    "cxx_decltype" is not known to CXX compiler "GNU" version 4.2.1.

Approved by:	portmgr (tier-2 blanket)
749f624ae6
Christoph Moench-Tegeder (cmt) · 5.13.2
update "Qt for Python" to 5.13.2

that's shiboken2, pyside2, pyside2-tools

Announcement:
  https://lists.qt-project.org/pipermail/pyside/2019-November/002803.html

The distfile now uses a slightly different naming.
bd382642ef
Christoph Moench-Tegeder (cmt) · 5.13.1
devel/pyside2 and friends: update to 5.13.1

Announcement:
  https://lists.qt-project.org/pipermail/pyside/2019-September/002786.html

While here, pet portlint. Bump FreeCAD, pyside2's consumer
4e795cc7ba
Jan Beich (jbeich) · 5.12.3_1
Switch default devel/llvm* to 90

PR:		239682
Reviewed by:	tobik
Differential Revision:	https://reviews.freebsd.org/D21172
3f1915711d
Tobias Kortkamp (tobik) · 5.12.3
devel/shiboken2: Remove nop python_OLD_COMMAND

Should have been python_OLD_CMD, but shebangfix already knows about
"/usr/bin/env python".
56fb558697
Christoph Moench-Tegeder (cmt) · 5.12.3
update PySide2 ports to 5.12.3

Announcement: https://lists.qt-project.org/pipermail/pyside/2019-May/002734.html
1f14a12992