CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

graphics/libsixel1.8.7.r2,1

Encoder/decoder library for DEC SIXEL graphics

Maintainer
sue@iwmt.org
Packages
libsixel 1.8.7.r2,1
Upstream
Higher version available: 1.10.5
CPE
saitoha:sixel from the port
WWW
https://github.com/saitoha/libsixel
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (41)

Dima Panov (fluffy) · 1.8.7.r2,1
graphics/libsixel: update to 1.8.7-r2

PR:		296965
Approved by:	maintainer (timeout, 3w+)
dd6b515b66
Bernhard Froehlich (decke) · 1.8.6_1,1
graphics/libsixel: Fix deprecated CPE_VENDOR
05bc552cd8
Charlie Li (vishwin) · 1.8.6_1,1
gnome.mk: rename gdkpixbuf2 to gdkpixbuf to prepare for port move

The GTK 1-based gdk-pixbuf has not existed for some time.

No functional or package changes.
e87d8134a3
Muhammad Moinur Rahman (bofh) · 1.8.6_1,1
graphics/libsixel: Moved man to share/man

Approved by:    portmgr (blanket)
40d640822e
Stefan Eßer (se) · 1.8.6,1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.8.6,1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Stefan Eßer (se) · 1.8.6,1
graphics/libsixel: Add CPE information

Approved by:	portmgr (blanket)
5e3522cefb
Mathieu Arnold (mat) · 1.8.6,1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.8.6,1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Alexey Dokuchaev (danfe) · 1.8.6,1
Restore original (upstream) distfile URL.  During initial `make makesum' the distfile got fetched from the nearby Gentoo mirror but I didn't pay enough attention and didn't notice that:

$ curl -sI https://mirror.yandex.ru/gentoo-distfiles/distfiles/libsixel-1.8.6.tar.gz | egrep HTTP\|Content-Length:
    HTTP/1.1 200 OK
    Content-Length: 4791628

Because both its size (previous distfile was 4778776 bytes) and contents
looked legit, I did not verify that it is identical to the file fetched
from GitHub directly.  Comparing their contents show only some missing
files and directories (example programs and sample image files, none of
them are built or installed anyway); the source code itself is identical
between the two, as well as resulting `include/sixel.h' file which now
comes pre-generated:

    $ diff -rudp libsixel-1.8.6 sixel-1.8.6
    Only in libsixel-1.8.6: .coveralls.yml
    Only in libsixel-1.8.6: .gitignore
    Only in libsixel-1.8.6: .travis.yml
    Only in libsixel-1.8.6: LICENSE
    Only in libsixel-1.8.6: LICENSE.images
    Only in libsixel-1.8.6: LICENSE.mesa
    Only in libsixel-1.8.6: LICENSE.pngsuite
    Only in libsixel-1.8.6: LICENSE.pnmcolormap
    Only in libsixel-1.8.6: LICENSE.sdump
    Only in libsixel-1.8.6: LICENSE.sixel
    Only in libsixel-1.8.6: LICENSE.stb
    Only in libsixel-1.8.6: README.md
    Only in libsixel-1.8.6: examples
    Only in libsixel-1.8.6: images
    Only in sixel-1.8.6/include: sixel.h
    Only in sixel-1.8.6/m4: ._ltoptions.m4
    Only in sixel-1.8.6/m4: ._ltsugar.m4
    Only in sixel-1.8.6/m4: ._lt~obsolete.m4
    Only in libsixel-1.8.6: package.json
    Only in libsixel-1.8.6: perl
    Only in libsixel-1.8.6: php
    Only in libsixel-1.8.6/python: LICENSE
    Only in libsixel-1.8.6/python: README.rst
    Only in libsixel-1.8.6: ruby
    Only in libsixel-1.8.6: wic

Drop the LICENSE and README.md (which is basically the project's GitHub
front page) and install more commonly seen in packages ChangeLog and
NEWS files instead; while here, trim some excessive vertical whitespace.
0347d04649
Alexey Dokuchaev (danfe) · 1.8.6,1
Temporarily switch download location to the distfile found on the mirrors until I figure out what's going on.
11a78d9f82
Alexey Dokuchaev (danfe) · 1.8.6,1
- Update to version 1.8.6 - Drop redundant PYTHON_DESC
ecaf25c96e
Dirk Meyer (dinoex) · 1.8.2_1,1
- update libgd to 2.3.0 - new option RAQM - resurrect deprecated gdlib-config - bump dependend ports
eff60e5ddb
Tobias Kortkamp (tobik) · 1.8.2,1
Add USES={gl,gnome,mate,sdl,xorg} missed in the last round
863110e9f9
Fernando Apesteguía (fernape) · 1.8.2,1
devel/libsixel: update to 1.8.2

Fixes:

* CVE-2018-14072
* CVE-2018-14073

PR:	229975
Submitted by:	sue@iwmt.org (maintainer)
Approved by:	tcberner (mentor)
MFH:	2018Q3
Differential Revision:	  https://reviews.freebsd.org/D16421
accf76d798
Tobias Kortkamp (tobik) · 1.8.1,1
graphics/libsixel: Update to 1.8.1

While here

- switch to using the immutable tarballs upstream provides [1]

- add missing DOCS option

[1] https://github.com/saitoha/libsixel/issues/64

PR:		228881
Submitted by:	IWAMOTO Kouichi <sue@iwmt.org> (maintainer)
beaea4c327
Matthew Rezny (rezny) · 1.7.2_1,1
Revision bump of all ports with USE_GL after consolidation of mesa-libs

Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D10845
b760897dde
Jan Beich (jbeich) · 1.7.2,1
graphics/libsixel: update to 1.7.2

Changes:	https://github.com/saitoha/libsixel/compare/v1.7.0...v1.7.2
PR:		213966
Submitted by:	IWAMOTO Kouichi <sue@iwmt.org> (maintainer)
8d07690303
Pawel Pekala (pawel) · 1.7.0,1
Update to version 1.7.0

PR:		211416
Submitted by:	IWAMOTO Kouichi (maintainer)
7d0cd34ee1
Dirk Meyer (dinoex) · 1.6.1_1,1
- update libgd to 2.2.2 - new MASTER_SITES - add security patch PR:		210913 Submitted by:	Piotr Kubaj MFH:		2016Q3 Security: CVE-2015-8874 Security: CVE-2016-3074 Security: http://www.openwall.com/lists/oss-security/2016/07/12/4
3561a46f28
Wen Heping (wen) · 1.6.1,1
- Update to 1.6.1

PR:		209081
Submitted by:	sue@iwmt.org(maintainer)
02fa711363
Mathieu Arnold (mat) · 1.4.13,1
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.

With hat:	portmgr
Sponsored by:	Absolight
4e1b79a0a6
Pawel Pekala (pawel) · 1.4.13,1
Update to version 1.4.13

PR:		201936
Submitted by:	IWAMOTO Kouichi (maintainer)
d3cecf2cbb
Mathieu Arnold (mat) · 1.4.12,1
Remove unneeded MASTER_SITES=GH entries.

Sponsored by:	Absolight
284038d67d
Antoine Brodin (antoine) · 1.4.12,1
Convert to USES=jpeg
6e5719ca80
Dmitry Marakasov (amdmi3) · 1.4.12,1
- Update to 1.4.12

PR:		200866
Submitted by:	sue@iwmt.org (maintainer)
8aca83d298
Bryan Drewery (bdrewery) · 1.4.10,1
USE_GITHUB: For the new support, fix DISTNAME to be more consistent.

When using GH_TAGNAME the DISTNAME would have GH_PROJECT and GH_ACCOUNT in
it. When not using GH_TAGNAME it would not have this. Now both cases
will add in the GH_PROJECT and GH_ACCOUNT.

Add special care to ensure that the DISTVERSION is not added in twice. If
a port does GH_TAGNAME=v${PORTVERSION} it will be added in twice though. For
that case DISTVERSIONPREFIX=v should be set and no GH_TAGNAME should be used.

empty() is used rather than (!defined || !${}) to support fmake.

The purpose of setting DISTNAME at all in these cases is to make it more clear
that the distfile is from *GITHUB* and to avoid collisions if a project were
to be renamed or moved. Without adding in GH_PROJECT and GH_ACCOUNT then there
are real risks that collisions on filenames would happen on renamed or moved
projects, which is fairly common. A GITHUB-generated file may not match
a custom-rolled or git-archive-rolled distfile.

PR:		199069
With hat:	portmgr
Testing done:	All USE_GITHUB ports without GH_COMMIT were checksum/fetch/extract/WRKSRC tested.
aa6ad6e726
Wen Heping (wen) · 1.4.10,1
- Update to 1.4.10

PR:		198823
Submitted by:	sue@iwmt.org(maintainer)
4226e276e7
Tilman Keskinoz (arved) · 1.4.8,1
Update to 1.4.8

PR:		197978
Submitted by:	maintainer
fcedf23cff
Vanilla I. Shu (vanilla) · 1.4.7,1
Upgrade to 1.4.7.

PR:		197315
Submitted by:	maintainer
fd9e28b6bb
Dmitry Marakasov (amdmi3) · 1.4.5,1
- Update to 1.4.5

PR:		196758
Submitted by:	sue@iwmt.org (maintainer)
a083469112
Rene Ladan (rene) · 1.4.3,1
graphics/libsixel: update to 1.4.3

PR:		196280
Submitted by:	maintainer (sue@iwmt.org)
61be27df72
Baptiste Daroussin (bapt) · 1.4.1_1,1
Bump portrevision after png update
bb21093773
Dmitry Marakasov (amdmi3) · 1.4.1,1
- Update to 1.4.1

PR:		195545
Submitted by:	sue@iwmt.org (maintainer)
a2418c5957
Bartek Rutkowski (robak) · 1.3.2,1
graphics/libsixel: update 0.28.0 -> 1.3.2

PR:		194649
Submitted by:	Iwamoto Kouichi <sue@iwmt.org>
Approved by:	mentors (implicit)
1210b8757a
Baptiste Daroussin (bapt) · 0.28.0,1
Cleanup plist
a76a739bfe
Thomas Zander (riggs) · 0.28.0,1
- Update to new upstream release 0.28.0

PR:		192392
Submitted by:	sue@iwmt.org (maintainer)
Approved by:	mentors (implicit)
a1052ec0e2
Danilo Egea Gondolfo (danilo) · 0.25.2,1
- Update from 0.19.5 to 0.25.2 - Use options helpers

PR:		ports/192087
Submitted by:	IWAMOTO Kouichi <sue@iwmt.org>
abf46cb65c
Jimmy Olgeni (olgeni) · 0.19.5,1
Remove indefinite articles and trailing periods from COMMENT, plus minor COMMENT typos and surrounding whitespace fixes. Categories G-I.

CR:		D201
Approved by:	portmgr (bapt)
5e38556079
Martin Wilke (miwi) · 0.19.5,1
- Update to 0.19.5

PR:		190348
Submitted by:	maintainer
d882bac072
Martin Wilke (miwi) · 20140422
This package provides encoder/decoder implementation for DEC SIXEL graphics, and some converter programs. SIXEL is one of image formats for terminal imaging introduced by DEC VT series. Its data scheme is represented as a terminal-friendly escape sequence. So if you want to view a SIXEL image file, all you have to do is "cat" it to your terminal.

WWW: https://github.com/saitoha/libsixel

PR:		ports/188937
Submitted by:	sue@iwmt.org
8764109145