CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

graphics/gmic3.1.6_12

Framework for image processing

Maintainer
yuri@FreeBSD.org
Packages
gmic 3.1.6_12
Upstream
Higher version available: 4.0.6
CPE
none, CVEs only via VuXML
WWW
https://gmic.eu/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (105)

Matthias Andree (mandree) · 3.1.6_12
*: Bump PORTREVISION of graphics/openexr users

(including those where openexr is only an option)
d6519311ed
Matthias Andree (mandree) · 3.1.6_11
*: Bump PORTREVISION for math/Imath update
566d74ed6b
Matthias Andree (mandree) · 3.1.6_10
graphics/openexr: PORTREVISION bump of openexr users due to ABI change
f3127fabc6
Yuri Victorovich (yuri) · 3.1.6_9
graphics/opencv: update 4.6.0 → 4.9.0

PR:	275977
Approved by:	desktop@FreeBSD.org (maintainers timeout; 4+ months)
0a2c5ca042
Tijl Coosemans (tijl) · 3.1.6_8
graphics/tiff: Update to 4.6.0

PR:		278577
Exp-run by:	antoine
98bf25875a
Matthias Andree (mandree) · 3.1.6_7
*: Bump PORTREVISION for OpenEXR users

Because OpenEXR's SONAME has changed with the 3.2.0 update.
New SONAME: libOpenEXR-3_2.so.31
1b4453302b
Daniel Engberg (diizzy) · 3.1.6_6
*/*: Bump jpeg-turbo users treewide

New major version 3.0.0
664a2fa1e5
Matthias Andree (mandree) · 3.1.6_5
*: bump PORTREVISION of Imath users

...because math/Imath 3.1.9 reset the major version of
libImath to 29 from 31. See math/Imath 3.1.9 for details.
a5fbd2fa98
Matthias Andree (mandree) · 3.1.6_4
*: Bump revision of ports using math/Imath

...after its major revision update.
e434b50017
Gerald Pfeifer (gerald) · 3.1.6_3
*: Bump PORTREVISIONs for math/mpc update to 1.3.1
8d3e020ed0
Matthias Andree (mandree) · 3.1.6_2
*: Bump PORTREVISION of math/Imath users
5327591576
Stefan Eßer (se) · 3.1.6_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.1.6_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 3.1.6_1
graphics/opencv: bump consumers after e21578d954550998435c5d6d532e2d5a67398bfe

This was missed in the upgrade of graphics/opencv.

Reported by:	VVD
a49cb0f435
Yuri Victorovich (yuri) · 3.1.6
graphics/gmic: Update 3.1.5 -> 3.1.6

Reported by:	portscout
7639784aa8
Dima Panov (fluffy) · 3.1.5_2
*/*: bump all consumers after recent boost upgrade
4cf39decb3
Yuri Victorovich (yuri) · 3.1.5_1
graphics/gmic: Broken on systems where OpenMP isn't enabled

Reported by:	fallout
c166293d75
Yuri Victorovich (yuri) · 3.1.5_1
graphics/gmic: Restore gmic executable

... that got removed from the port after the upstream refactored
the build and switched to GNU Make. Special target 'cli' should
be added for gmic executable to be built.

Reported by:	Andrea Venturoli <ml@netfence.it>
0cc44b495d
Yuri Victorovich (yuri) · 3.1.5
graphics/gmic: Update 3.1.3 -> 3.1.5

Reported by:	portscout
11422944c5
Yuri Victorovich (yuri) · 3.1.3
graphics/gmic: Update 3.1.2 -> 3.1.3

Reported by:	portscout
9979006bad
Yuri Victorovich (yuri) · 3.1.2
graphics/gmic: Add patch
4aa7761005
Yuri Victorovich (yuri) · 3.1.2
graphics/gmic: Update 3.0.1 -> 3.1.2
27089289ec
Loïc Bartoletti (lbartoletti) · 3.0.1
devel/cmake: Update to 3.23.0

Update to 3.23.0.
Fix pkg-plist: using the default share/man location

Release Notes:
  https://cmake.org/cmake/help/v3.23/release/3.23.html

PR:		262886
Exp-run by:	antoine
2d34c2bfea
Yuri Victorovich (yuri) · 3.0.1
graphics/gmic: Update 3.0.0 -> 3.0.1

Reported by:	portscout
b867eea4a8
Yuri Victorovich (yuri) · 3.0.0
graphics/gmic: Update 2.9.9 -> 3.0.0

Reported by:	portscout
ebf30e54ce
Yuri Victorovich (yuri) · 2.9.9
graphics/gmic: Update 2.9.8 -> 2.9.9

Reported by:	portscout
d30f192a86
Matthias Andree (mandree) · 2.9.8_1
*: graphics/openexr PORTREVISION bumps

OpenEXR changes its SONAME again, so bump PORTREVISION of its users.
56ffa089e2
Yuri Victorovich (yuri) · 2.9.8
graphics/gmic: Update 2.9.7 -> 2.9.8

Reported by:	portscout
07a66e5591
Matthias Andree (mandree) · 2.9.7_3
*: bump PORTREVISION after math/Imath update
3cda93bdf6
Matthias Andree (mandree) · 2.9.7_2
*: Bump PORTREVISION for openexr update

OpenEXR's patchlevel updated bumped the major version
of the OpenEXR library, hence bump PORTREVISION of all
ports that require OpenEXR.
4030a14b56
Matthias Andree (mandree) · 2.9.7_1
Bump portrevisions of openexr and Imath users.
1d5b7c913b
Yuri Victorovich (yuri) · 2.9.7
graphics/gmic: Update 2.9.6 -> 2.9.7

Reported by:	portscout
7bc4a6fd22
Matthias Andree (mandree) · 2.9.6_1
chase library renames for OpenEXR/Imath 3.0
73ab07c25a
Mathieu Arnold (mat) · 2.9.6
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.9.6
Remove # $FreeBSD$ from Makefiles.
305f148f48
Yuri Victorovich (yuri) · 2.9.6
graphics/gmic: Update 2.9.5 -> 2.9.6

Reported by:	portscout
f6ebaf1d4e
Matthias Andree (mandree) · 2.9.5_1
graphics/openexr, ilmbase: security update to v2.5.5

https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.5.5

"Specific OSS-fuzz issues include:

    OSS-fuzz #30291 Timeout in openexr_exrcheck_fuzzer
    OSS-fuzz #29106 Heap-buffer-overflow in Imf_2_5::FastHufDecoder::decode
    OSS-fuzz #28971 Undefined-shift in Imf_2_5::cachePadding
    OSS-fuzz #29829 Integer-overflow in Imf_2_5::DwaCompressor::initializeBuffers
    OSS-fuzz #30121 Out-of-memory in openexr_exrcheck_fuzzer"

Bump PORTREVISION of ports that directly depend on openexr and/or ilmbase.

MFH:		2021Q1
Security:	98044aba-6d72-11eb-aed7-1b1b8a70cc8b
1c11b9ae32
Yuri Victorovich (yuri) · 2.9.5
graphics/gmic: Update 2.9.4 -> 2.9.5

Reported by:	portscout
02c1ad21a6
Tobias C. Berner (tcberner) · 2.9.4_3
graphics/opencv: update to 4.5.1 -- and make port more easily maintainable

This is a major upgrade from 3.x to 4.x.

Changelog from versions 3.4.1--4.5.1 can be found here:
    https://github.com/opencv/opencv/wiki/ChangeLog

Note: this has explicitely not been added as a new graphics/opencv4 port, but replaces the
      previous graphics/opencv[3] port. Again, to improve maintainability by not giving ports
      the option to pick the "wrong one" - this leads however to some abandoned ports being
      broken.

The port has been greatly simplified:
    * graphics/opencv-core which existed to enable ffmpeg to depend on opencv, and vice versa
      has been removed. ffmpeg no longer can depend on opencv.
    * graphics/py-opencv has been integrated into graphics/opencv, the default versions python
      bindings will be built unless the PYTHON option is explicitely turned off.
    * graphics/opencv-java has been integrated into graphics/opencv -- it is off by default,
      but can be enabled by toggling the JAVA option -- there are no consumers in the tree,
      so that option might go away in the future.
    * All the previous options have been removed and replaced by a (hopefully) sane set of
      dependencies that make the port and package most usable for the majority of consumers.
      - Please let me know if you think there are better defaults (i.e. anything that is missing,
        or something that should not be dependet on).
      - If you think something should be added or removed, please open a bug report.
      - If you think something should be added as an optional dependency, please open a
        bug report (with a good reason [tm]).

The depending ports have been updated to work against opencv4, or marked broken.
    * Ports broken:
      - graphics/rubygem-objectdetect: OpenCV4 no longer ships opencv-1.0 API
      - graphics/p5-Image-ObjectDetect: OpenCV4 no longer ships opencv-1.0 API
      - graphics/gimp-gmic-plugin: OpenCV4 no longer ships opencv-1.0 API
    * Backports:
      - misc/visp: https://github.com/lagadic/visp/commit/dfa7e4bd47c24cd2e631477e6afb18806733ff8a
      - multimedia/zart: https://github.com/c-koi/zart/commit/6ca1964690afbbc78627d7c868a692401043a584,
                         https://github.com/c-koi/zart/commit/d3a2931b1a07ec0322211f253468000363c4b6cb
    * Others:
      - misc/actiona: switch to pkgconfig 'opencv4'
      - multimedia/libav: drop opencv support
      - misc/darknet: already failed to build prior to the upgrade
      - math/saga: remove patching added to work against opencv3
7a09f7fbc2
Matthias Andree (mandree) · 2.9.4_2
graphics/openexr: really commit v2.5.4 update.

Unfortunately, this was missed with the ilmbase update, and
causes yet another PORTREVISION bump on all dependent ports.

repeating ilmbase's commit log here:

"Patch release with various bug/sanitizer/security fixes, primarily related to
reading corrupted input files."
<https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.5.4>

Cherry-pick upstream commit for GCC 11 compatibility:
<https://github.com/AcademySoftwareFoundation/openexr/commit/a40a6151c4e746eb8f93c7c06992d0ec11289fdc>

Since this changes the patchlevel of the solibs, bump PORTREVISION of dependent
ports just to be sure.
(graphics/py-openshadinglanguage is unaltered and .includes the revision bump
from .../openshadinglanguage.)

MFH:		2021Q1 (this requires discussion by ports-secteam@!)

Reported by:	VVD (IRC, #bsdports)
c77c064297
Matthias Andree (mandree) · 2.9.4_1
graphics/openexr: graphics/ilmbase: v2.5.4 update

"Patch release with various bug/sanitizer/security fixes, primarily related to
reading corrupted input files."
<https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.5.4>

Cherry-pick upstream commit for GCC 11 compatibility:
<https://github.com/AcademySoftwareFoundation/openexr/commit/a40a6151c4e746eb8f93c7c06992d0ec11289fdc>

Since this changes the patchlevel of the solibs, bump PORTREVISION of dependent
ports just to be sure.
(graphics/py-openshadinglanguage is unaltered and .includes the revision bump
from .../openshadinglanguage.)

MFH:		2021Q1 (this requires discussion by ports-secteam@!)
db0013e446
Yuri Victorovich (yuri) · 2.9.4
graphics/gmic: Update 2.9.3 -> 2.9.4
375dbe4591
Yuri Victorovich (yuri) · 2.9.3
graphics/gmic: Update 2.9.2 -> 2.9.3
5632b9e2a4
Yuri Victorovich (yuri) · 2.9.2
graphics/gmic: Update 2.9.1 -> 2.9.2

Reported by:	portscout
31650827a1
Matthias Andree (mandree) · 2.9.1_2
graphics/ilmbase, graphics/openexr: PORTREVISION bump for users

ilmbase and openexr were updated to v2.5.3 and their shlibs changed
from *.25.0.1 to *.25.0.2.

This is a PORTREVISION bump to ports using ilmbase or openexr
to chase that change and trigger rebuild.
721533a798
Matthias Andree (mandree) · 2.9.1_1
openexr/ilmbase update w/ shlib rename => PORTREVISION bumps of dependent ports

OpenEXR and ILMBASE updates to 2.5.2 rename the full shlib version
names from .0.0 to .0.1 => to be on the safe side, bump PORTREVISIONs.

Approved by:	portmgr (blanket)
MFH:		2020Q3 (PORTREVISION bump after OpenEXR/ilmbase update)
Security:	714e6c35-c75b-11ea-aa29-d74973d1f9f3
59eb5b4b37
Yuri Victorovich (yuri) · 2.9.1
graphics/gmic: Update 2.9.0 -> 2.9.1

Reported by:	portscout
98c81e3273
Matthias Andree (mandree) · 2.9.0_2
graphics/ilmbase: graphics/openexr: update to upstream release 2.5.1

Upstream release notes:
* A patch release that corrects the SO version for the v2.5 release,
  which missed getting bumped in v2.5.0.

* This release also fixes an improper failure in IlmImfTest
  when running on ARMv7 and AAarch64.

Bump PORTREVISION of all port directly requiring ilmbase or openexr
that are not marked BROKEN (shlib/.so file version bump).

Test build of all port directly depending on ilmbase or openexr
succeeded in poudriere in a 12.1-RELEASE amd64 jail.
38f53fd85b
Matthias Andree (mandree) · 2.9.0_1
graphics/ilmbase: graphics/openexr: update to v2.5.0

ChangeLog:
- https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.5.0

* Bump PORTREVISION of all consumers except py-openimageio (BROKEN).

* cad/PrusaSlicer:
    LIB_DEPENDS: remove version from libHalf.so
    BUILD_DEPENDS+=qt5-buildtools as package (needed on bare metal builds)
    USE_GL+=gl
    USES+=pkgconfig (needed to find libHalf)
ded32047a7
Yuri Victorovich (yuri) · 2.9.0
graphics/gmic: Update 2.8.4 -> 2.9.0

Reported by:	portscout
9c45c8adea