CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

graphics/digikam8.8.0_8

KDE digital photo management application

Maintainer
kde@FreeBSD.org
Packages
digikam 8.8.0_8
Upstream
Higher version available: 9.1.0
CPE
none, CVEs only via VuXML
WWW
https://www.digikam.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (178)

Gleb Popov (arrowd) · 8.8.0_8
*: Bump PORTREVISION on multimedia/x265 consumers

PR:		299194
e8660dbf74
Gleb Popov (arrowd) · 8.8.0_7
*: Bump PORTREVISION on multimedia/x265 consumers

PR:		298481
d98c0147b3
Jan Beich (jbeich) · 8.8.0_6
graphics/libjxl: update to 0.12

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.12.0
Reported by:	GitHub (watch releases)
fc57321249
Gleb Popov (arrowd) · 8.8.0_5
graphics/ImageMagick: update to 7.1.2-25

Changes:	https://github.com/ImageMagick/ImageMagick/compare/7.1.2-24...7.1.2-25
Security:	CVE-2026-53460
Security:	CVE-2026-53461
Security:	CVE-2026-53462
Security:	CVE-2026-53463
Security:	CVE-2026-53464
Security:	CVE-2026-53465
PR:		296190
320e46a6ce
Max Brazhnikov (makc) · 8.8.0_4
*/*: force rebuild after devel/kf6-kio update
c2d5342be2
Po-Chuan Hsieh (sunpoet) · 8.8.0_3
graphics/lcms2: Bump PORTREVISION of dependent ports for shlib change

PR:		292881
Reported by:	Petr Lampa <lampa@fit.vutbr.cz>
2adc4bef7d
Baptiste Daroussin (bapt) · 8.8.0_2
multimedia/ffmpeg: bump revision to chase lib version change
18ea9c7108
Robert Clausecker (fuz) · 8.8.0_1
*/*: bump PORTREVISION following lib/libx265.so soname change

Reported by:	vvd
e6242cd11e
Jason E. Hale (jhale) · 8.8.0
graphics/digikam: Update to 8.8.0

https://www.digikam.org/news/2025-10-19-8.8.0_release_announcement/
f3450f48a1
Robert Clausecker (fuz) · 8.7.0
graphics/digikam: fix build on armv7

Same issue as with math/labplot

Approved by:	portmgr (build fix blanket)
MFH:		2025Q3
40033e6911
Jason E. Hale (jhale) · 8.7.0
graphics/digikam: Update to 8.7.0

Add AITOOLS option which will globally install the DNN (deep neural
network) data currently required by the image autorotation feature.

As with the other options in the DATA group, DNN files can easily be
downloaded locally within the DigiKam application. The DNN files are
very large and are, therefore, disabled by default to keep the pre-built
packages provided by FreeBSD reasonably sized for the average consumer.

The face detection feature gained an in-app test, but is only useful
if graphics/opencv is built with the OPENCL option enabled. The test
image is still checked for in the download prompt, regardless.

Upstream seems to now prefer the WEBP format over PNG, including the
splash screen, so add a runtime dep on graphics/qt6-imageformats, which
provides WEBP support to the QImage class. This is a plugin and is not
linked to.

Announcement:
https://www.digikam.org/news/2025-06-30-8.7.0_release_announcement/
2f9b7edeee
Baptiste Daroussin (bapt) · 8.6.0_2
libxml2: chase libxml soversion bump
3068854dd0
Jason E. Hale (jhale) · 8.6.0_1
graphics/digikam: Fix fetch with AUTOTAGS option

Remove unused (confirmed by upstream maintainer Michael Miller
<michael_miller@msn.com>) and no longer available for download
resnet152-v2-7.onnx.

PR:		286147
Reported by:	Brett <vbasiccd@msn.com>
MFH:		2025Q2
6ef2642c38
Jason E. Hale (jhale) · 8.6.0
graphics/digikam: Fix install for AESTHETIC option

Reported by:	rhurlin (via private mail)
Fixes:		06b53b319185 graphics/digikam: Update to 8.6.0
Pointy hat:	jhale
111fe3c6ec
Jason E. Hale (jhale) · 8.6.0
graphics/digikam: Update to 8.6.0

Group model data options together.

Prepare for Qt 6.9.

https://www.digikam.org/news/2025-03-15-8.6.0_release_announcement/
06b53b3191
Max Brazhnikov (makc) · 8.5.0_2
KDE: remove reference to kipi
40967778d7
Jason E. Hale (jhale) · 8.5.0_2
graphics/digikam: Remove broken NLS option

KDE apps typically build unconditionially multilingual. DigiKam
is no exception as it hard requires devel/kf6-i18n which requires
devel/gettext-tools.

PR:		284648
0764846b21
Jason E. Hale (jhale) · 8.5.0_1
graphics/digikam: Build against Qt6/KF6

PR:		284648
d42218a45a
Jason E. Hale (jhale) · 8.5.0
graphics/digikam: Update to 8.5.0

https://www.digikam.org/news/2024-11-16-8.5.0_release_announcement/
8376a18d45
Dima Panov (fluffy) · 8.4.0_3
Revert "graphics/digikam: make Marble integration optional"

This reverts commit ed2fb20283e97e18da5b8cdf74a3f6587a21e355.

Obliviously it was come from mix of work and vanilla repo :(

Sponsored by:	Future Crew, LLC
51dfd0c006
Dima Panov (fluffy) · 8.4.0_2
graphics/digikam: make Marble integration optional

Sponsored by:	Future Crew, LLC
ed2fb20283
Robert Clausecker (fuz) · 8.4.0_2
*/*: bump port revisions of dependents following x265 updates

PR:		281680
90e15809d9
Jan Beich (jbeich) · 8.4.0_1
graphics/libjxl: update to 0.11.0

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.11.0
Reported by:	GitHub (watch releases)
402b658a02
Jason E. Hale (jhale) · 8.4.0
graphics/digikam: Update to 8.4.0

Nothing much of importance to note in the port itself. A LIB_DEPENDS was
added for graphics/libjxl to support JPEG-XL compression in the updated
Adobe DNG SDK. DigiKam is still locally using KF5, but is ready for and
will soon be switched to KF6, so heads up!

Unfortunately, the usually more elaborate, visually appealing, and
relatable release announcement was not available at time of commit. Keep
an eye on: https://www.digikam.org/news/ for the announcement, which, in
recent times, has typically appeared a few days after release.

The important technical changes, however, can be found at a lovely URL
that fits very neatly within the 72 column constraint recommended by our
commit template. Surviving IBM punch cards from the 1970's will surely
rejoice, just as our faithful DigiKam users hopefully will upon reading:

https://invent.kde.org/graphics/digikam/-/blob/master/project/NEWS.8.4.0
d9266669d3
Yuri Victorovich (yuri) · 8.3.0_1
graphics/opencv: update 4.6.0 → 4.9.0

PR:	275977
Approved by:	desktop@FreeBSD.org (maintainers timeout; 4+ months)
0a2c5ca042
Jason E. Hale (jhale) · 8.3.0
graphics/digikam: Update to 8.3.0

Unversion the distfiles location. The main application distfiles are
already versioned and it is wasteful to user disk space and user/host
bandwidth to redownload the very large, seldom-changing neural network
data into a separate directory with each update.

Add AUTOTAGS option to install data required for automatically
tagging images. Non-default, as with the FACEDETECT option, as this
would significantly increase the default package size and the files
needed for this functionality can still be easily downloaded and used
by any individual user locally via a dialog in the program.

All of the previously available sound options for the Media Player
(OPENAL, PORTAUDIO, and PULSEAUDIO) were removed upstream and are no
longer relevant. Remove other unneeded dependencies and in the case of
boost, it is only needed at build (headers only).

Improve Makefile order more in line to what PHB and, to an extent, what
portclippy(1) suggest.

https://www.digikam.org/news/2024-03-17-8.3.0_release_announcement/
f946bcf065
Tijl Coosemans (tijl) · 8.2.0_4
graphics/tiff: Update to 4.6.0

PR:		278577
Exp-run by:	antoine
98bf25875a
Muhammad Moinur Rahman (bofh) · 8.2.0_3
Mk/Uses: Move man to share/man for kde framework

All ports utilizing USES=kde has been tested. If there are breakage on
other parts of the tree buzz me.

Approved by:	portmgr (blanket)
39c1f7c5dd
Jason E. Hale (jhale) · 8.2.0_2
graphics/digikam: Remove WEBENGINE option.

After removal of www/qt5-webkit, www/qt5-webengine is the only
alternative.

While here, remove the dependency on graphics/liblqr-1 which has been
non-optionally bundled starting with 8.2.0 release. The Akonadi patches
need some work, but it builds, so I'll save that for the next release
along with a few other cleanups. Not depending on a non-existent port
is more pressing at this time.

MFH:		2024Q1
ac885a609f
Muhammad Moinur Rahman (bofh) · 8.2.0_1
databases/mysql57-*: Remove expired port
e716c4e0ea
Muhammad Moinur Rahman (bofh) · 8.2.0_1
databases/mysqlwsrep57-server: Remove expired port

Depends on upstream EOL MySQL 5.7.
74b5232a29
Jason E. Hale (jhale) · 8.2.0_1
graphics/digikam: Update IGNORE_WITH_MYSQL

We need to ignore the recently introduced databases/mysql81* as the
MYSQL_INTERNAL option only works with MariaDB. Also remove check for
databases/percona57* which has been removed from the ports tree.
d7f566a5d4
Jan Beich (jbeich) · 8.2.0_1
multimedia/x265: force rebuild consumers after 645419c8e465

$ ffmpeg
ld-elf.so.1: Shared object "libx265.so.192" not found, required by "libavcodec.so.60"

PR:		274526
Reported by:	vvd (on dev-commits-ports-main@ list)
Reported by:	Kevin Oberman (on multimedia@ list)
10be66c9da
Dima Panov (fluffy) · 8.2.0
graphics/digikam: update to 8.2.0 release (+)

Release Notes:	https://www.digikam.org/news/2023-12-03-8.2.0_release_announcement/

Sponsored by:        Serenity Cybersecurity, LLC
f38d2979c2
Tobias C. Berner (tcberner) · 8.1.0_3
KDE: make ecm a build-only dependency in kde@ maintained ports
c6274ee942
Gleb Popov (arrowd) · 8.1.0_2
audio/pulseaudio: Update to 16.1

Bump PORTREVISION on consumers.

Sponsored by:	Serenity Cybersecurity, LLC

PR:		262713
b1ecad53b0
Daniel Engberg (diizzy) · 8.1.0_1
*/*: Bump jpeg-turbo users treewide

New major version 3.0.0
664a2fa1e5
Jason E. Hale (jhale) · 8.1.0
graphics/digikam: Update to 8.1.0

Remove DOCS option: The docs haven't been shipped with digikam starting
with 6.0.0 and are now in a separate repository:
https://invent.kde.org/documentation/digikam-doc
This could potentially be a separate port, but they've been gone for
4 years and the online docs are still available from within digikam
through the help menu or using a webbrowser.

Remove DOXYGEN option: Enabling the DOXYGEN option was just creating
the target to build the API docs, but we weren't actually building that
target. They probably are not useful to most users and would just
add to the build overhead.

Remove KVKONTAKTE option: Plugin was removed upstream.

Add FACEDETECT option: This installs data required for the facial
recognition feature to work. The files total about 420MB, so this is
set to off by default for now. Could be a seperate port to make it
easier to allow users to add later if they want.

Re-enable the MEDIAPLAYER option and add options pertaining to it.
QtAV was imported into the digikam codebase after being abandoned by
the original author and can now build with ffmpeg 6.x.

Add options for finer database control and disable internal MySQL
support by default as it only works with MariaDB.

8.1.0: https://www.digikam.org/news/2023-07-09-8.1.0_release_announcement/
8.0.0: https://www.digikam.org/news/2023-04-16-8.0.0_release_announcement/
dbbf964f8c
Matthias Andree (mandree) · 7.10.0_7
graphics/digikam: make compatible with exiv2 0.28

NOTE: Upstream has just tagged digikam 8.1.0 which
should also work with exiv2 0.28, see here:
https://invent.kde.org/graphics/digikam/-/blob/v8.1.0/NEWS

But the web site does not yet mention 8.1.0 and the release
tarball is not available, so upgrading might be premature.

PR:		272311
7314f3d14a
Tobias C. Berner (tcberner) · 7.10.0_6
graphics/digikam: remove broken MEDIAPLAYER from default options

- this remove the dependency on the unavailable QtAV backend

Suggested by:	avg
4f90439e95
Po-Chuan Hsieh (sunpoet) · 7.10.0_5
graphics/jasper: Update to 4.0.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/jasper-software/jasper/releases
Security:	CVE-2022-2963, CVE-2022-40755
b1c370eb31
Felix Palmen (zirias) · 7.10.0_4
Mk/Uses/magick.mk: Bump all consumers

Bump all consumers of ImageMagick ports after flavorizing them.

Approved by:	tcberner (mentor, implicit)
a6bb2f8c5e
Daniel Engberg (diizzy) · 7.10.0_3
*/*: Bump all users of multimedia/ffmpeg*

...to make sure all picks up new version(s)
f7accb23bf
Dima Panov (fluffy) · 7.10.0_2
graphics/digikam: unbreak build after KDE PIM 23.04 (+)

In KDE PIM 23.04 the KF5:: targets have been renamed to KPim5::
While the KF5:: targets are kept for backwards compatibility, they no longer recursively include other KF5:: targets.
We need to search for Akonadi explicitly so that the KF5::AkonadiCore target is defined.

Backport from:	https://invent.kde.org/graphics/digikam/-/commit/5b4ba173f6a84a8be1131b1523dc42df95171ec7
1712e3f212
Christian Weisgerber (naddy) · 7.10.0_2
audio/opus: bump consumers after update to 1.4
feb1fa34f5
Gerald Pfeifer (gerald) · 7.10.0_1
*: Bump PORTREVISIONs for math/mpc update to 1.3.1
8d3e020ed0
Dima Panov (fluffy) · 7.10.0
graphics/digikam: update to 7.10.0 release (+)

Release notes:	https://www.digikam.org/news/2023-03-13-7.10.0_release_announcement/

Sponsored by:	Serenity Cybersecurity, LLC
f27bf84e9c
Dima Panov (fluffy) · 7.9.0
graphics/digikam: update to 7.9.0 release
262356a9ef
Dima Panov (fluffy) · 7.8.0_2
devel/grantlee5: bump library consumers after grantlee update
e6475127d6
Felix Palmen (zirias) · 7.8.0_1
Mk/Uses: always use colon for build/run suffix

Most USES use a colon for build/run(/test) suffixes. Change kde.mk,
qt.mk and pyqt.mk to do the same, and update all ports using that.

Document in CHANGES.

PR:			266034
Exp-run by:		antoine
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36349
ddae4e92d8