CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

graphics/libjxl0.12.0

JPEG XL reference encoder/decoder

Maintainer
jbeich@FreeBSD.org
Packages
libjxl 0.12.0
Upstream
up to date
CPE
libjxl_project:libjxl from the port
WWW
https://jpeg.org/jpegxl/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (72)

Jan Beich (jbeich) · 0.12.0
graphics/libjxl: update to 0.12

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.12.0
Reported by:	GitHub (watch releases)
fc57321249
Jan Beich (jbeich) · 0.11.2
graphics/libjxl: update to 0.11.2

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.11.2
Reported by:	GitHub (watch releases)
Security:	CVE-2025-12474 CVE-2026-1837
8673787a8a
Po-Chuan Hsieh (sunpoet) · 0.11.1_3
graphics/lcms2: Bump PORTREVISION of dependent ports for shlib change

PR:		292881
Reported by:	Petr Lampa <lampa@fit.vutbr.cz>
2adc4bef7d
Matthias Andree (mandree) · 0.11.1_2
*: Bump PORTREVISION of graphics/openexr users

(including those where openexr is only an option)
d6519311ed
Charlie Li (vishwin) · 0.11.1_1
gnome.mk: rename gdkpixbuf2 to gdkpixbuf to prepare for port move

The GTK 1-based gdk-pixbuf has not existed for some time.

No functional or package changes.
e87d8134a3
Jan Beich (jbeich) · 0.11.1_1
graphics/libjxl: unbreak fetch via local copy

Index abbreviation in git-format-patch(1) output seems to change
frequently, probably due to GitHub load balancing.

$ make checksum TRYBROKEN= MASTER_SITE_BACKUP= DISTDIR=$(mktemp -dt distfiles)
===>  License BSD3CLAUSE accepted by the user
===>   libjxl-0.11.1_1 depends on file: /usr/local/sbin/pkg - found
=> d2411cebb0c3.patch doesn't seem to exist in /tmp/distfiles.oqai7utRVB/.
=> Attempting to fetch https://github.com/libjxl/libjxl/commit/d2411cebb0c3.patch
fetch: https://github.com/libjxl/libjxl/commit/d2411cebb0c3.patch: size mismatch: expected 3857, actual 3853
=> Couldn't fetch it - please try to retrieve this
=> port manually into /tmp/distfiles.oqai7utRVB/ and try again.
*** Error code 1

Reported by:	pkg-fallout (beefy21)
720153c0a6
Jan Beich (jbeich) · 0.11.1_1
graphics/libjxl: unbreak fetch due to repo growth

fetch: https://github.com/libjxl/libjxl/commit/d2411cebb0c3.patch: size mismatch: expected 3853, actual 3857

-index 6cbed220975..c2b656bd6c2 100644
+index 6cbed220975e..c2b656bd6c2e 100644
-index 59edd63eb86..4213d8ec577 100644
+index 59edd63eb863..4213d8ec5773 100644

Reported by:	many
a2bcfe8332
Jan Beich (jbeich) · 0.11.1_1
graphics/libjxl: fix OPENEXR=on regression after 175bbab74c9b
b1a5b588e9
Jan Beich (jbeich) · 0.11.1
graphics/libjxl: update to 0.11.1

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.11.1
Reported by:	GitHub (watch releases)
Security:	CVE-2024-11403 CVE-2024-11498
3a871c689e
Jan Beich (jbeich) · 0.11.0_2
graphics/libjxl: enable AVX512 runtime detection (amd64-only)

Upstream default is optimized for bundling or Linux-style micro-packages.
FreeBSD currently doesn't split docs/headers/plugins, so minor binary size
increase (7 MiB -> 9 MiB) is less important. FreeBSD is primarily used on
servers where AVX512 is more common while on old desktops libjxl bloat is
dwarfed by many other packages (e.g., firefox, llvm*, gcc*, boost-libs).

See also https://github.com/libjxl/libjxl/pull/2627#issuecomment-1618237136
18d435c1e3
Jan Beich (jbeich) · 0.11.0_1
graphics/libjxl: expose LCMS2 support (disabled by default)

lcms2 and skcms interpret color profiles differently. Upstream
default seems to be optimized for rendering in Chromium and Firefox.

https://github.com/libjxl/libjxl/blob/v0.11.0/doc/color_management.md#cms-library
https://github.com/libjxl/libjxl/issues/1579#issuecomment-1180561564
cafd30223c
Jan Beich (jbeich) · 0.11.0_1
graphics/libjxl: unbreak JPEG=off build after 70e2590d63b0

In file included from lib/extras/dec/jpegli.cc:16:
In file included from lib/extras/enc/jpegli.cc:27:
In file included from lib/jpegli/common.h:23:
lib/jxl/base/include_jpeglib.h:15:10: fatal error: 'jpeglib.h' file not found
   15 | #include <jpeglib.h>  // IWYU pragma: keep
      |          ^~~~~~~~~~~

PR:		282926
Reported by:	amdmi3
ada3d2df83
Piotr Kubaj (pkubaj) · 0.11.0_1
graphics/libjxl: fix build on big-endian

-- Big-endian architecture detected; defaulting to lcms2 instead of skcms
7dbe2e17c9
Matthias Andree (mandree) · 0.11.0_1
graphics/openexr: PORTREVISION bump of openexr users due to ABI change
f3127fabc6
Jan Beich (jbeich) · 0.11.0
graphics/libjxl: update to 0.11.0

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.11.0
Reported by:	GitHub (watch releases)
402b658a02
Jan Beich (jbeich) · 0.10.3
graphics/libjxl: update to 0.10.3

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.10.3
Reported by:	GitHub (watch releases)
d73ca94c97
Jan Beich (jbeich) · 0.10.2
graphics/libjxl: simplify plist updates
fad385cf80
Jan Beich (jbeich) · 0.10.2
graphics/libjxl: update to 0.10.2

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.10.2
Reported by:	GitHub (watch releases)
cedc691db6
Jan Beich (jbeich) · 0.10.1
graphics/libjxl: update to 0.10.1

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.10.1
Reported by:	GitHub (watch releases)
1552075f79
Jan Beich (jbeich) · 0.10.0
graphics/libjxl: update to 0.10.0

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.10.0
Reported by:	GitHub (watch releases)
4c1f4b3f46
Jan Beich (jbeich) · 0.9.2
graphics/libjxl: update to 0.9.2

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.9.2
Reported by:	GitHub (watch releases)
f0b61161e3
Jan Beich (jbeich) · 0.9.1
graphics/libjxl: update to 0.9.1

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.9.1
Reported by:	GitHub (watch releases)
08f4b95485
Jan Beich (jbeich) · 0.9.0
graphics/libjxl: drop bundled graphics/jpeg-turbo after 11b08d733b7c
70e2590d63
Jan Beich (jbeich) · 0.9.0
graphics/libjxl: update to 0.9.0

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.9.0
Reported by:	GitHub (watch releases)
11b08d733b
Matthias Andree (mandree) · 0.8.2_3
*: Bump PORTREVISION for OpenEXR users

Because OpenEXR's SONAME has changed with the 3.2.0 update.
New SONAME: libOpenEXR-3_2.so.31
1b4453302b
Piotr Kubaj (pkubaj) · 0.8.2_2
graphics/libjxl: allow LTO and PPC8 crypto on powerpc64
4ef0e6dadc
Piotr Kubaj (pkubaj) · 0.8.2_1
graphics/libjxl: remove noop powerpc knob
9633c4df8d
Daniel Engberg (diizzy) · 0.8.2_1
*/*: Bump jpeg-turbo users treewide

New major version 3.0.0
664a2fa1e5
Jan Beich (jbeich) · 0.8.2
graphics/libjxl: update to 0.8.2

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.8.2
Reported by:	GitHub (watch releases)
753122117e
Jan Beich (jbeich) · 0.8.1
graphics/libjxl: unbreak JPEG=off after 115fc1237eeb

Error: Missing: bin/cjpeg_hdr

https://github.com/libjxl/libjxl/commit/759a29f9e6e0

PR:		271124
Submitted by:	fsbruva@yahoo.com
0bafdac681
Piotr Kubaj (pkubaj) · 0.8.1
graphics/libjxl: fix build on powerpc / powerpc64

/usr/local/include/hwy/ops/ppc_vsx-inl.h:2719:34: error: use of 'long long' with '__vector' requires VSX support (available on POWER7 or later) to be enabled
c6132c766d
Jan Beich (jbeich) · 0.8.1
graphics/libjxl: unbreak some tests after 7ea47cecaa27

$ make test
[...]
83% tests passed, 748 tests failed out of 4401

https://github.com/libjxl/libjxl/commit/73df8b879862
0b4ef05121
Jan Beich (jbeich) · 0.8.1
graphics/libjxl: convert PIXBUF=off to CMAKE_BOOL after 7ea47cecaa27

https://github.com/libjxl/libjxl/commit/043d52913b63
60194bbd3a
Jan Beich (jbeich) · 0.8.1
graphics/libjxl: update to 0.8.1

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.8.1
Reported by:	GitHub (watch releases)
2adedbc4bd
Jan Beich (jbeich) · 0.8.0
graphics/libjxl: update to 0.8.0 (nop)

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.8.0
Reported by:	GitHub (watch releases)
cf3f58ef03
Jan Beich (jbeich) · 0.8.0.r1
graphics/libjxl: update to 0.8.0.r1

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.8.0rc1
Reported by:	GitHub (watch releases)
115fc1237e
Jan Beich (jbeich) · 0.7.0
graphics/libjxl: don't disable -Werror

FreeBSD is supported upstream, and upstream regularly tests with Clang.
I'd like to be notified of new warnings. Let's see how long it lasts.

Tested by:	Clang 11/13/14/15, GCC 11, -DNDEBUG
dfd63e9ee7
Jan Beich (jbeich) · 0.7.0
graphics/jpeg-xl: update to 0.7.0

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.7.0
Reported by:	GitHub (watch releases)
3037c199e6
Stefan Eßer (se) · 0.7.r
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.7.r
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Jan Beich (jbeich) · 0.7.r
graphics/jpeg-xl: update to 0.7.r

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.7rc
Reported by:	GitHub (watch releases)
7ea47cecaa
Jan Beich (jbeich) · 0.6.1_6
graphics/libjxl: unbreak fetch due to repo growth

fetch: https://github.com/libjxl/libjxl/commit/e903d53a58b4.patch: size mismatch: expected 4935, actual 4937

-index e89e8af0a..467442073 100644
+index e89e8af0a8..4674420737 100644
2259e3be98
Jan Beich (jbeich) · 0.6.1_6
devel/highway: update to 1.0.0

Changes:	https://github.com/google/highway/releases/tag/1.0.0
Reported by:	GitHub (watch releases)
6896c7c48f
Jan Beich (jbeich) · 0.6.1_5
devel/highway: update to 0.17.0

Changes:	https://github.com/google/highway/releases/tag/0.17.0
Reported by:	GitHub (watch releases)
786d1f0a60
Jan Beich (jbeich) · 0.6.1_5
graphics/libjxl: unbreak on riscv64 after 32c2b95c682e

Hard-float 'd' ABI can't be used for a target that doesn't support the D instruction set extension (ignoring target-abi)
ld: error: too many errors emitted, stopping now (use -error-limit=0 to see all errors)
c++: error: linker command failed with exit code 1 (use -v to see invocation)

Reported by:	pkg-fallout
6e98271eb5
Tobias C. Berner (tcberner) · 0.6.1_5
graphics/gdk-pixbuf2: add trigger to run gdk-pixbuf-query-loaders

gdk-pixbuf2 uses a cache of its loadable modules, which is updated by
${RREFIX}/bin/gdk-pixbuf-query-loaders and stored in
${PREFIX}/lib/gdk-pixbuf-2.0/${GTK2_VERSION}/loaders.

Remove the pre-existing @exec and @postexec commands in the ports
providing such modules, and add a trigger in graphics/gdk-pixbuf2
to do this automatically.

Reviewed by:		bapt
Differential Revision: https://reviews.freebsd.org/D34679
bd08b1edde
Jan Beich (jbeich) · 0.6.1_5
graphics/libjxl: document recommended addons

Most GTK apps are covered by PIXBUF option. Exceptions are apps that
hardcode formats or have custom import/export. For example, xsane
(unlike simple-scan) doesn't support saving with .jxl extension.
1cd24a832a
Jan Beich (jbeich) · 0.6.1_5
graphics/libjxl: split GIMP into gimp-jxl-plugin

gimp-app is a heavy dependency that prevents enabling JXL in other ports.

PR:		261043
952502d4bc
Jan Beich (jbeich) · 0.6.1_4
devel/highway: switch to shared library after 00e47df9ed1a

PR:		261003
fcb1353a34
Jan Beich (jbeich) · 0.6.1_3
devel/highway: update to 0.16.0

Changes:	https://github.com/google/highway/releases/tag/0.16.0
Reported by:	GitHub (watch releases)
00e47df9ed