- Update to 0.8319352eb39f
dcraw -- integer overflow conditionentered 2015-05-15
Port details
graphics/dcraw 9.28_5
Decoder for RAW files from digital cameras
Port info
- Maintainer
- sunpoet@FreeBSD.org
- Packages
- latest: 9.28_5
- Upstream
- up to date
- Last update
- to 9.28_5 · 2adc4bef7d
- Quarterly
- 2026Q4: 9.28_5
- WWW
- https://dechifro.org/dcraw/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install dcrawinstalls 9.28_5 fromlatest; fromquarterly(2026Q4) 9.28_5- Port
# cd /usr/ports/graphics/dcraw && make install clean- Size
- 174 KiB download · 359 KiB installed
- Depends on
- graphics/jasper 4.2.9, graphics/jpeg-turbo 3.1.4.1, graphics/lcms2 2.19.1
- License
- GPLv2+
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 9.28_5 | 9.28_5 | – |
| FreeBSD 15 | 9.28_5 | 9.28_5 | – |
| FreeBSD 14 | 9.28_5 | 9.28_5 | 9.28_5 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 9.28_5 | 9.28_5 | – |
| FreeBSD 14 | 9.28_5 | 9.28_5 | 9.28_5 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (5)
The CVE record lists the packaged version 9.28_5 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2018-19655 | 8.8 | 2018-11-29 | A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a … |
| CVE-2018-19565 | 7.1 | 2018-11-26 | A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw c… |
| CVE-2018-19566 | 7.1 | 2018-11-26 | A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw … |
| CVE-2018-19567 | 5.5 | 2018-11-26 | A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcr… |
| CVE-2018-19568 | 5.5 | 2018-11-26 | A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles th… |
VuXML only (0)
Listed in VuXML, the packaged version 9.28_5 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (1)
Show 1 fixed
VuXML entries whose affected range the packaged version has left.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (100)
- Update to 8.82f16ca8f4c3
- Update to 8.81e9259e85a8
- Update to 8.77c9d4ddd4fd
- Update to 8.768e9f2b778a
- Update to 8.74058cc1aefe
- Update to 8.7390c75aeaa1
- Update to 8.721f9cdb2ffc
- Update to 8.70a713cc23f6
- Update to 8.69f17e367ecf
- Update to 8.683ad1a8b14e
- Update to 8.6741cdc7a81b
- Update to 8.6633ea0f850c
- Update to 8.63473015c47f
- Update to 8.62a3dc9645ea
- Update to 8.61687a2e1a8f
- Update to 8.6024a775a3d9
- Update to 8.54f29ec3fb3b
- Update to 8.530fd2203651
- Update to 8.52518521e05a
- Update to 8.490db9d44de7
- Update to 8.43579e927720
- Update to 8.412a0d0219b8
- Update to 8.402e18ce935c
- Update to 8.39a562e68733
- Update to 8.389dd86b6f36
- Update to 8.3381e028e7ef
- Update to 8.32eb1e3d95a0
- Update to 8.3015866c33cd
- Update to 8.29834eb346f0
- Update to 8.281ca816edeb
- Update to 8.272bbdf40a6f
- Provide additional mirrors where needed - Convert to "magic" master sites - Various minor portlint-prodded fixesc36ad3d129
- Update to 8.25d28a06eb40
- Update to 8.22f5b4248a61
- Update to v8.21 Approved by: krion (mentor, implicit)85c44e3dd9
- Update to v8.18 Approved by: krion (mentor, implicit)3a06835737
Update my e-mail address Approved by: krion (mentor, implicit)5ea57a0fd3
- Update to 8.15. - Added more master sites. PR: 96817 Submitted by: maintainerbbbe08cd41
Update to 8.13 PR: 95790 Submitted by: Andrew Pantyukhin <infofarmer@gmail.com>ef91739bb0
- Update to 8.11 PR: ports/95207 Submitted by: Andrew Pantyukhin <infofarmer@gmail.com> (maintainer)a4c595a302
- Update to 8.10 PR: ports/95144 Submitted by: Andrew Pantyukhin <infofarmer@gmail.com> (maintainer)161a1d25bd
- Update to 8.05 - Pass maintainer-ship to submitter PR: 92495 Submitted by: Andrew Pantyukhin <infofarmer@gmail.com> Approved by: Arjan van Leeuwen <avleeuwen@gmail.com> (maintainer)7b8522faa3
- Update to 8.00 PR: ports/92158 Submitted by: Andrew Pantyukhin <infofarmer@gmail.com> Approved by: Arjan van Leeuwen <avleeuwen@piwebs.com> (maintainer)7c0d12165f
- Update to 7.94 PR: ports/91432 Submitted by: Andrew Pantyukhin <infofarmer@gmail.com> Approved by: Arjan van Leeuwen <avleeuwen@piwebs.com> (maintainer)a063a69417
Update to 1.289 PR: 87453 Submitted by: Arjan van Leeuwen <avleeuwen@piwebs.com>f37b25492c
Update to 1.236 PR: 78456 Submitted by: Arjan van Leeuwen <avleeuwen@piwebs.com>f848fdbbf0
Update to 1.195 PR: 68274 Submitted by: Arjan van Leeuwendf31a58891
This patch updates the graphics/dcraw port to the dcraw version with CVS revision 1.181. This version fixes some problems with newer cameras, like the Nikon D70. Reported by: Wayne Pascoe (wayne@penguinpowered.org) PR: ports/65503 Submitted by: Arjan van Leeuwen <avleeuwen@piwebs.com>662840e9fd
Add dcraw, a decoder for RAW files from digital cameras. PR: ports/62928 Submitted by: Arjan van Leeuwen <avleeuwen@piwebs.com>6f9df5a38e