CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

lang/bun1.4.2

JavaScript runtime, bundler, test runner, and package manager

0
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
yuri@FreeBSD.org
Packages
bun 1.4.2
Upstream
Higher version available: 1.4.4
CPE
none, CVEs only via VuXML
WWW
https://bun.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (14)

Oleksii Samorukov (samm) · 1.4.2
lang/bun: update to 1.4.2

Update to 1.4.2 and rework the port for the upstream Rust build system.
Use lang/rust-nightly-bun instead of the moving lang/rust-nightly, add
aarch64 support, keep the patched WebKit fork, and drop the old Zig /
sysroot / prebuilt-binary machinery.

PR: 299115
Pull Request: https://github.com/freebsd/freebsd-ports/pull/644
fec1cd2f9b
Mikael Urankar (mikael) · 1.3.14_6
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Mathieu Arnold (mat) · 1.3.14_5
lang/bun: fix fetch with new do-fetch.sh
076733902c
Mikael Urankar (mikael) · 1.3.14_5
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Daniel Engberg (diizzy) · 1.3.14_4
lang/bun: Mark BROKEN

SHA256 Checksum mismatch for bun/bun-cargo-vendor-lolhtml-1.3.14.tar.gz.
expected: 55bd5cbcd4c430c8f8fe8ef3f2bb097da7bfd017a76472d17fb973bb3b49edbb
fetched:  0bf1875b4620792fbe44ec74d5a2c5f3c2f2d57a91c6191892a1d7c2c863bab4
size:     4022017

Additionally pkg-fallout also reports build errors
spawn failed: ENOEXEC: unknown error, posix_spawn '/wrkdirs/usr/ports/lang/bun/work/oven-zig/bootstrap-x86_64-linux-musl/zig'
84e0697934
Mikael Urankar (mikael) · 1.3.14_4
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Tijl Coosemans (tijl) · 1.3.14_3
*/*: Use C.UTF-8 locale

Ports 02f27a83b44d fixed the ports tree to the C locale so it would work
correctly in environments where users use a locale that isn't compatible
with the C locale, e.g. xx_YY.UTF-8 where [A-Z] includes more than just
upper case letters.  USE_LOCALE was introduced to let ports use another
locale if they needed it.  The C.UTF-8 locale was created later on to be
mostly compatible with the C locale.

Switch the ports tree locale to C.UTF-8 and remove USE_LOCALE.  The
world has moved to Unicode so all ports either require it or know how to
build correctly in a Unicode environment.

PR:		295945
Exp-run by:	antoine
b6ec06f079
Mikael Urankar (mikael) · 1.3.14_3
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Yuri Victorovich (yuri) · 1.3.14_2
lang/bun: Add LLVM_VER=21 with explanation for why it is needed
96a261f407
Yuri Victorovich (yuri) · 1.3.14_2
lang/bun: Partially respect CPUTYPE

Bun has a very complex build system using Zig and Rust languages.
It is now respecting CPUTYPE for the most part, but it uses the
bundled FreeBSD binary WebKit with bun-related patches which still
brings in some x86-64-v4 and latest SSE instructions.

This can be resolved by creating a dedicated port for bun-patched
WebKit.
432159b93e
Yuri Victorovich (yuri) · 1.3.14_1
lang/bun: Fix fetch by adding package-lock*.json files to freeze dependencies
111447bfcc
Yuri Victorovich (yuri) · 1.3.14
lang/bun: Fix fetch

Reported by:	Jimmy Olgeni <olgeni@FreeBSD.org>
acb8da5835
Yuri Victorovich (yuri) · 1.3.14
lang/bun: update 1.3.13-93 → 1.3.14
b81bc7a0b6
Yuri Victorovich (yuri) · 1.3.13.93
lang/bun: New port: JavaScript runtime, bundler, test runner, and package manager
8407c9414e