CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

graphics/openjpeg 2.5.4_2

Open-source JPEG 2000 codec

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 2.5.4_2
Upstream
up to date
Last update
to 2.5.4_2 · 2adc4bef7d
Quarterly
2026Q4: 2.5.4_2
WWW
https://www.openjpeg.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install openjpeg
installs 2.5.4_2 from latest; from quarterly (2026Q4) 2.5.4_2
Port
# cd /usr/ports/graphics/openjpeg && make install clean
Size
330 KiB download · 1.3 MiB installed
Depends on
graphics/jpeg-turbo 3.1.4.1, graphics/lcms2 2.19.1, graphics/png 1.6.59_1, graphics/tiff 4.7.2
License
BSD2CLAUSE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.5.4_22.5.4_2–
FreeBSD 152.5.4_22.5.4_2–
FreeBSD 142.5.4_22.5.4_22.5.4_2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.5.4_22.5.4_2–
FreeBSD 142.5.4_22.5.4_22.5.4_2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 2.5.4_2 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-61924.82026-04-13A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulatio…

VuXML only (0)

Listed in VuXML, the packaged version 2.5.4_2 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (5)

Show 5 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
297807maintainer-feedback? graphics/openjpeg: (unit) test suit is missingNew2026-08-23

Commits (75)

Dirk Meyer (dinoex) · 1.5.0_1
- drop maintainership
f25e0cd253
Dirk Meyer (dinoex) · 1.5.0_1
- make portlint happier - fix path in pkg_config file Submitted by:	Zhihao Yuan
5dcc37da05
Dirk Meyer (dinoex) · 1.5.0
- update to 1.5.0 - new MASTER_SITE PR:		166744 Suggested by:	Zhihao Yuan
3d2a969d29
Dirk Meyer (dinoex) · 1.3_2
- drop MASTER_SITE_LOCAL
eec0b8368e
Olli Hauer (ohauer) · 1.3_2
-remove MD5
30f9161773
Dirk Meyer (dinoex) · 1.3_2
- cleanup LICENSE_FILE
3ad176ba7c
Dirk Meyer (dinoex) · 1.3_2
- add COPYRIGHT - add MASTER_SITES
7a72368020
Dirk Meyer (dinoex) · 1.3_2
LICENSE BSD
0862ea05a1
Dirk Meyer (dinoex) · 1.3_2
- update to jpeg-8
ca9c60461c
Dirk Meyer (dinoex) · 1.3_1
- honor CC PR:		139965 Submitted by:	swell.k
c87ced7ae5
Dirk Meyer (dinoex) · 1.3_1
- bump all port that indirectly depends on libjpeg and have not yet been bumped or updated Requested by:	edwin
eca78ec61b
Dirk Meyer (dinoex) · 1.3
- MAKE_JOBS_UNSAFE
c602617259
Dirk Meyer (dinoex) · 1.3
- add LICENSE:
951434a20f
Dirk Meyer (dinoex) · 1.3
- update to 1.3
06f759a55e
Edward Tomasz Napierala (trasz) · 1.2_1
Pass maintainership to dinoex@.
549137d6ae
Edward Tomasz Napierala (trasz) · 1.2_1
- Don't strip libraries - Build and install j2k utils

PR:		ports/114694
Submitted by:	ahze
Approved by:	miwi (mentor)
53df5e02b2
Edward Tomasz Napierala (trasz) · 1.2
Add ${MASTER_SITE_LOCAL}.

Suggested by:	pav
Approved by:	miwi (mentor)
afd4147f0c
Edward Tomasz Napierala (trasz) · 1.2
- Remove unneeded part of a diff.

Suggested by:	sat
Approved by:	miwi (mentor)
0804a3d20c
Edward Tomasz Napierala (trasz) · 1.2
- Use proper capitalization in my email address.

Approved by:	miwi (mentor)
Suggested by:	sat
627cb575f7
Edward Tomasz Napierala (trasz) · 1.2
- Update to 1.2.

Approved by:	miwi (mentor)
a2b767bd8a
Edward Tomasz Napierala (trasz) · 1.1.1_1
- Add required symlinks to the shared object, so that putting openjpeg   into LIB_DEPENDS and linking with just '-lopenjpeg' actually work - Tidy the port a bit

Submitted by:	alepulver
Approved by:	miwi (mentor)
f11c334dd2
Edward Tomasz Napierala (trasz) · 1.1.1
Change my email address to trasz@FreeBSD.org.

Approved by:	miwi (mentor)
985042c3ae
Martin Wilke (miwi) · 1.1.1
- Update to 1.1.1

PR:             110927
Submitted by:   trasz   (maintainer)
23f252a0e7
Martin Wilke (miwi) · 1.1_1
- Fix build with amd64

Submitted by: pointyhat via kris
bb02f8b91f
Martin Wilke (miwi) · 1.1
The OpenJPEG library is an open-source JPEG 2000 codec written in C language.  It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group (JPEG).  In addition to the basic codec, various other features are under development, among them the JP2 and MJ2 (Motion JPEG 2000) file formats, an indexing tool useful for

WWW:	http://www.openjpeg.org/

PR:		ports/107868
Submitted by:	trasz <trasz at pin.if.uz.zgora.pl>
a093780d07