CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

graphics/photoqt3.4_9

Simple, powerful and good looking Qt5 image viewer

Maintainer
melanhit@gmail.com
Packages
photoqt 3.4_9
Upstream
Higher version available: 5.4.1
CPE
none, CVEs only via VuXML
WWW
https://photoqt.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (31)

Sergey A. Osokin (osa) · 3.4_9
*/*: Bump consumers after graphics/libraw update

PR:		296733

Sponsored by:	tipi.work
de81406064
Gleb Popov (arrowd) · 3.4_8
graphics/ImageMagick: update to 7.1.2-25

Changes:	https://github.com/ImageMagick/ImageMagick/compare/7.1.2-24...7.1.2-25
Security:	CVE-2026-53460
Security:	CVE-2026-53461
Security:	CVE-2026-53462
Security:	CVE-2026-53463
Security:	CVE-2026-53464
Security:	CVE-2026-53465
PR:		296190
320e46a6ce
Gleb Popov (arrowd) · 3.4_7
*: Bump PORTREVISION on Poppler's consumers
7ddc6804bf
Loïc Bartoletti (lbartoletti) · 3.4_6
graphics/poppler: bump consumers of graphics/poppler

PR:		291277
Exp-run by:	antoine
3076d31cda
Max Brazhnikov (makc) · 3.4_5
*/*: Fix Qt and LXQt spelling
64fb50b01e
Loïc Bartoletti (lbartoletti) · 3.4_5
graphics/poppler: bump dependent ports
78c4bd4996
Loïc Bartoletti (lbartoletti) · 3.4_4
graphics/ImageMagicks*: bump dependent ports
9a9c1ba205
Loïc Bartoletti (lbartoletti) · 3.4_3
graphics/poppler: bump dependent ports
12a794e8bd
Tobias C. Berner (tcberner) · 3.4_2
graphics/poppler: bump consumers of graphics/poppler

Bump after rupdate in 478df79a3071b399f648107456cf371587e84a3f
d2f834ba51
Tobias C. Berner (tcberner) · 3.4_1
graphics/poppler: bump revision of consumers
672f0463c7
Yuri Victorovich (yuri) · 3.4
graphics/photoqt: update 1.6 → 3.4

PR:		270493
Approved by:	melanhit@gmail.com (maintainer's timeout; 8 months 8 days)
94c534c904
Matthias Andree (mandree) · 1.6_10
graphics/photoqt: make compatible with exiv2 0.28

PR:		272311
919c0e9e65
Jason E. Hale (jhale) · 1.6_9
graphics/libraw: Update to 0.21.1

Bump PORTREVISION on dependent ports due to shared library increase.
Add several fixes for compatability.

https://www.libraw.org/news/libraw-0-21-release
https://www.libraw.org/news/libraw-0-21-1-release
35b0544d8e
Felix Palmen (zirias) · 1.6_8
Mk/Uses: always use colon for build/run suffix

Most USES use a colon for build/run(/test) suffixes. Change kde.mk,
qt.mk and pyqt.mk to do the same, and update all ports using that.

Document in CHANGES.

PR:			266034
Exp-run by:		antoine
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36349
ddae4e92d8
Stefan Eßer (se) · 1.6_8
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.6_8
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mathieu Arnold (mat) · 1.6_8
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.6_8
Remove # $FreeBSD$ from Makefiles.
305f148f48
Jason E. Hale (jhale) · 1.6_8
graphics/libraw: Update to 0.20.2

Bump PORTREVISION on consumers due to shared library bump.

Changes:	https://www.libraw.org/news/libraw-0-20-2-Release
3676ef0b9e
Dmitry Marakasov (amdmi3) · 1.6_7
- Fix LICENSE - Add LICENSE_FILE - Update WWW

Approved by:	portmgr blanket
ca67d9081f
Gerald Pfeifer (gerald) · 1.6_7
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Tobias C. Berner (tcberner) · 1.6_6
graphics/exiv2: update to 0.27.1

Exp-run by:	antoine
PR:		239028
6dc0b2cfc8
Jason E. Hale (jhale) · 1.6_6
graphics/libraw: Update to 0.19.2

- Demosaic packs are no longer distributed nor supported upstream
- Bump PORTREVISON on all consumers due to libraw shlib version increase

Changes:	https://www.libraw.org/news/libraw-0-19-2-release
67d26aa566
Tobias C. Berner (tcberner) · 1.6_5
graphics/exiv2: update to 0.27

Changelog:
	http://www.exiv2.org/changelog.html

- All depending ports have been bumped.
- graphics/py-exiv2 has been marked broken; use graphics/gexiv2 for python bindings

Exp-run by:	antoine
PR:		235943
PR:		234830
fda98ed059
Tijl Coosemans (tijl) · 1.6_4
Fix Qt5 symbol version scripts to put the catch-all clause first.  When a symbol matches multiple clauses the last one takes precedence.  If the catch-all is last it captures everything.  In the case of Qt5 libraries this caused all symbols to have a Qt_5 label while some should have Qt_5_PRIVATE_API.  This only affects lld because GNU ld always gives the catch-all lowest priority.

Older versions of Qt5Webengine exported some memory allocation symbols from
the bundled Chromium.  Version 5.9 stopped exporting these [1] but the
symbols were kept as weak wrappers for the standard allocation functions to
maintain binary compatibility. [2][3]  The problem is that the call to the
standard function in these weak wrappers is only resolved to the standard
function if there's a call to this standard function in other parts of
Qt5Webengine, because only then is there a non-weak symbol that takes
precedence over the weak one.  If there's no such non-weak symbol the call
in the weak wrapper resolves to the weak wrapper itself creating an infinite
call loop that overflows the stack and causes a crash.  Some of the
allocation functions are variants of C++ new and delete and it probably
depends on the compiler whether these variants are used in other parts of
Qt5Webengine.

Remove the weak wrappers (make them Linux specific).  This isn't binary
compatible but we are already breaking that with the changes to the symbol
versions.

[1] https://github.com/qt/qtwebengine/commit/5c2cbfccf9aafb547b0b30914c4056abd25942a4
[2] https://github.com/qt/qtwebengine/commit/2ed5054e3a800fa97c2c9e920ba1e6ea4b6ef2a5
[3] https://github.com/qt/qtwebengine/commit/009f5ebb4bd6e50188671e0815a5dae6afe39db5

Bump all ports that depend on Qt5.

PR:		234070
Exp-run by:	antoine
Approved by:	kde (adridg)
1bf487d3e7
Tobias C. Berner (tcberner) · 1.6_3
Change cmake default behaviour to outsource.

Ports that build out of source now simply can use "USES=cmake"
instead of "USES=cmake:outsource". Ports that fail to build
out of source now need to specify "USES=cmake:insource".

I tried to only set insource where explictely needed.

PR:		232038
Exp-run by:	antoine
707c6bf295
Gerald Pfeifer (gerald) · 1.6_3
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Tobias C. Berner (tcberner) · 1.6_2
Merge lang/qt5-qml and x11-toolkits/qt5-quick into x11-toolkits/qt5-declarative

- There was no obvious reason to split these ports, and it makes
  porting simpler; the set of ports using either mostly coincided.

Exp-run by:	antoine
PR:		223687
PR:		232751
89d1bb9ab0
Gerald Pfeifer (gerald) · 1.6_1
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6
Tobias C. Berner (tcberner) · 1.6
Replace bsd.qt.mk by Uses/qt.mk and Uses/qt-dist.mk

From now on, ports that depend on Qt4 will have to set
	USES=		qt:4
	USE_QT=		foo bar
ports depending on Qt5 will use
	USES=		qt:5
	USE_QT=		foo bar

PR:		229225
Exp-run by:	antoine
Reviewed by:	mat
Approved by:	portmgr (antoine)
Differential Revision:	→https://reviews.freebsd.org/D15540
b1a1d38bf9
Tobias C. Berner (tcberner) · 1.6
New port: graphics/photoqt -- a simple image viewer.

* Based on a version submitted by Andrew Romanenko.

PR:		221482
Submitted by:	Andrew Romanenko <melanhit@gmail.com> (initial version)
9445cd9e3c